This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: gXsZqJmL35P9gk+7ugpEivH5ATxnSc/LDv6RdK9OYvs= Subject key identifier: 54:7B:79:26:A9:6E:4D:A1:E3:6C:42:5C:6A:A8:38:7D:A1:1A:40:C9 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 4EDE21818DF326FDF42A7F5A968E0998DDCB1A9B Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:01 +0000 ROA not before: Tue 06 Jan 2026 20:44:01 +0000 ROA not after: Tue 05 Jan 2027 20:49:01 +0000 asID: 273072 IP address blocks: 2803:cf90:1600::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:de:21:81:8d:f3:26:fd:f4:2a:7f:5a:96:8e:09:98:dd:cb:1a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:01 2026 GMT Not After : Jan 5 20:49:01 2027 GMT Subject: CN=547B7926A96E4DA1E36C425C6AA8387DA11A40C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:b1:6b:f7:d3:76:e7:21:64:49:96:c6:07: 3f:e2:34:9d:57:ad:22:a5:50:06:48:c9:b8:2f:f5: b9:7f:3d:f8:72:b2:11:c4:46:db:c1:8a:57:d3:1b: 5d:fb:e9:ab:83:06:c4:ee:1b:84:eb:c0:ec:87:9a: f6:c4:d7:25:a3:10:56:53:a6:21:7e:ea:9b:35:ec: 75:01:20:f3:e3:aa:4a:0f:96:61:a9:10:b6:ed:5f: 9e:4a:39:ae:86:61:de:07:40:6d:e5:97:e4:0c:7e: 29:b9:1c:9b:83:c7:5e:b5:7d:49:13:af:f3:03:3b: d8:c0:f4:dc:49:e3:51:49:3d:b7:44:d4:17:6c:e9: cb:9d:10:cd:0b:f0:53:ea:3c:13:68:be:f6:21:67: 36:3c:10:4a:15:85:b6:14:b3:f2:09:03:80:5f:bd: ba:a9:dd:93:00:cc:5c:6a:e4:d6:35:b0:d5:a7:c0: 17:39:0c:34:80:a3:2c:9e:fa:af:0c:96:77:e2:19: a0:60:20:d9:f8:4c:90:f4:1f:1a:98:40:d1:03:c6: 75:c4:73:27:9c:14:a3:d6:5a:3f:e9:0c:3c:86:c5: 0d:8e:7d:01:fd:67:0a:ee:b7:8a:32:90:ce:5f:8b: 1d:f5:5c:51:51:b9:66:9c:59:17:ca:7b:28:99:28: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7B:79:26:A9:6E:4D:A1:E3:6C:42:5C:6A:A8:38:7D:A1:1A:40:C9 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1600::/40 Signature Algorithm: sha256WithRSAEncryption 4c:db:b4:aa:48:40:19:17:ae:21:d8:92:fc:84:f9:81:3e:4a: a2:41:2b:b4:6d:41:08:3b:51:5b:f5:d5:3a:74:fb:fb:65:c8: 3c:ef:f2:fd:69:1a:98:e8:0e:e1:01:54:54:bb:c0:a7:88:6f: 35:38:2c:06:50:a2:21:6e:78:52:eb:18:85:15:9d:0d:8a:35: 4a:ad:96:12:21:32:a2:1c:65:40:4d:98:12:8d:2c:fa:22:cd: d3:66:7e:47:f0:0b:f1:38:db:87:7c:ea:86:46:13:4a:03:ea: 3e:a6:94:1c:74:63:80:74:e2:4d:f1:2f:d6:38:fa:56:04:3f: 32:e2:14:2c:ed:73:6f:bc:98:47:07:80:f8:95:6d:00:88:20: 61:15:70:4f:b4:a5:72:df:c6:58:f3:49:fc:ee:d9:dd:19:dc: 7c:62:20:23:1f:58:76:86:48:ca:4b:62:15:61:90:71:19:de: 33:29:0f:f0:0f:01:14:38:e6:15:48:7d:d7:49:1d:30:ad:2d: e6:a9:97:55:41:f5:33:de:02:84:98:56:f6:03:09:93:2d:54: cf:d0:63:5f:6c:f6:46:1e:7f:a5:b3:37:b9:95:db:9b:db:e5: 59:5e:44:b5:b3:cb:15:c9:07:9f:7c:78:58:53:4b:69:31:38: 2d:fa:55:e9 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTt4hgY3zJv30Kn9alo4JmN3LGpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDFaFw0yNzAxMDUyMDQ5MDFaMDMxMTAvBgNV BAMTKDU0N0I3OTI2QTk2RTREQTFFMzZDNDI1QzZBQTgzODdEQTExQTQwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcLFr99N25yFkSZbGBz/iNJ1X rSKlUAZIybgv9bl/PfhyshHERtvBilfTG1376auDBsTuG4TrwOyHmvbE1yWjEFZT piF+6ps17HUBIPPjqkoPlmGpELbtX55KOa6GYd4HQG3ll+QMfim5HJuDx161fUkT r/MDO9jA9NxJ41FJPbdE1Bds6cudEM0L8FPqPBNovvYhZzY8EEoVhbYUs/IJA4Bf vbqp3ZMAzFxq5NY1sNWnwBc5DDSAoyye+q8MlnfiGaBgINn4TJD0HxqYQNEDxnXE cyecFKPWWj/pDDyGxQ2OfQH9Zwrut4oykM5fix31XFFRuWacWRfKeyiZKKlBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUVHt5JqluTaHjbEJcaqg4faEaQMkwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QFjANBgkqhkiG9w0BAQsFAAOCAQEATNu0qkhAGReuIdiS/IT5gT5K okErtG1BCDtRW/XVOnT7+2XIPO/y/WkamOgO4QFUVLvAp4hvNTgsBlCiIW54UusY hRWdDYo1Sq2WEiEyohxlQE2YEo0s+iLN02Z+R/AL8Tjbh3zqhkYTSgPqPqaUHHRj gHTiTfEv1jj6VgQ/MuIULO1zb7yYRweA+JVtAIggYRVwT7Slct/GWPNJ/O7Z3Rnc fGIgIx9YdoZIyktiFWGQcRneMykP8A8BFDjmFUh910kdMK0t5qmXVUH1M94ChJhW 9gMJky1Uz9BjX2z2Rh5/pbM3uZXbm9vlWV5EtbPLFckHn3x4WFNLaTE4LfpV6Q== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:05 2026 by rpki-client