This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: CiUQAPxnwPCZDAi4txUMgObrtjg7YzNt1ZXs4eMYSIU= Subject key identifier: F8:83:2E:99:3C:92:FE:78:74:F8:68:28:7E:74:8F:98:77:7A:7F:2E Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 2D41C69A4780A8A7149BD40672168F3E5E028AFD Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:10 +0000 ROA not before: Tue 06 Jan 2026 20:44:10 +0000 ROA not after: Tue 05 Jan 2027 20:49:10 +0000 asID: 273072 IP address blocks: 2803:cf90:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:41:c6:9a:47:80:a8:a7:14:9b:d4:06:72:16:8f:3e:5e:02:8a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:10 2026 GMT Not After : Jan 5 20:49:10 2027 GMT Subject: CN=F8832E993C92FE7874F868287E748F98777A7F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:ef:74:df:ca:83:cc:2e:36:67:8c:e1:23: f9:b7:89:f6:3e:e9:ce:28:ee:76:f2:eb:f4:a0:b1: b7:b9:58:27:4c:75:85:f4:6a:03:34:b0:cf:7c:df: c8:1c:af:99:8a:8f:22:e3:65:9b:48:24:04:de:68: 87:f7:dc:12:55:7c:59:11:5f:b8:47:f8:7b:46:e0: 1c:0e:ee:ac:7b:7d:6c:23:ff:02:2f:b2:5c:0f:f0: e9:b9:9b:c2:06:ae:d9:34:f7:fe:0c:6e:38:a1:47: 0c:f1:6a:01:87:55:05:86:7b:1e:72:18:80:bb:e1: f1:6b:a8:72:50:5d:ee:c7:f6:77:a9:b0:11:fa:63: e8:df:99:71:6f:a4:21:d4:f2:9f:12:28:69:4e:be: d5:23:6e:e6:43:54:01:14:de:46:92:63:b4:e9:9a: f6:70:6a:51:4d:ee:f8:a1:d2:74:87:08:13:57:e7: 56:41:a9:7f:2c:41:96:ba:d0:eb:84:a6:b6:56:ac: 9e:04:ad:1a:6b:73:99:1a:97:f7:6a:e5:f3:45:80: c0:04:bd:19:08:a1:1d:d4:17:5f:f9:a7:f7:bd:71: 53:96:c4:7a:a4:de:19:7b:dc:94:fe:63:a4:29:be: 25:72:76:de:69:4a:27:3f:73:03:9c:51:62:72:78: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:83:2E:99:3C:92:FE:78:74:F8:68:28:7E:74:8F:98:77:7A:7F:2E X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1700::/40 Signature Algorithm: sha256WithRSAEncryption 3b:a1:77:f6:4e:74:ad:14:f4:86:19:f6:cd:b6:0f:cb:61:d4: b5:ad:bb:d6:31:d6:71:9a:b4:3d:31:6a:6c:3f:fe:84:f0:6b: f5:f1:9a:0d:4f:e4:36:cf:17:4d:ec:08:7a:49:52:82:3e:4f: 65:83:ff:91:c9:01:84:da:2a:e6:0e:1b:07:d7:09:6b:64:ec: b2:1e:a4:a8:a8:b4:85:25:1b:12:f3:61:7b:04:f0:cc:31:2f: 12:34:d0:d9:3c:1e:ba:20:08:2c:14:af:5c:99:0c:ec:f2:86: 59:0b:99:73:92:a7:72:88:f8:05:28:6a:73:03:cc:47:6d:b6: 74:bd:9c:a0:88:4f:ef:be:d3:c9:da:4d:34:41:a7:60:b1:4d: 40:a0:49:17:c4:9c:05:12:f5:6d:35:ac:c7:11:63:16:3c:dc: f1:ed:81:7e:5f:c5:dc:cf:eb:3c:e5:d7:60:30:e0:d1:c0:fb: 24:0c:5a:b9:87:12:73:56:5e:83:b5:31:53:2e:5a:bc:bd:03: 3c:69:d7:ea:fd:19:ae:2a:14:3a:c4:96:87:ce:f3:63:da:84: 40:09:00:9c:2a:37:08:65:e7:56:5c:a9:bf:50:94:4a:ef:12: 9d:45:9a:ad:62:c4:31:ad:62:51:b3:62:b2:79:70:d9:23:6b: 61:8a:b9:05 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIULUHGmkeAqKcUm9QGchaPPl4Civ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTBaFw0yNzAxMDUyMDQ5MTBaMDMxMTAvBgNV BAMTKEY4ODMyRTk5M0M5MkZFNzg3NEY4NjgyODdFNzQ4Rjk4Nzc3QTdGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7u9038qDzC42Z4zhI/m3ifY+ 6c4o7nby6/Sgsbe5WCdMdYX0agM0sM9838gcr5mKjyLjZZtIJATeaIf33BJVfFkR X7hH+HtG4BwO7qx7fWwj/wIvslwP8Om5m8IGrtk09/4MbjihRwzxagGHVQWGex5y GIC74fFrqHJQXe7H9nepsBH6Y+jfmXFvpCHU8p8SKGlOvtUjbuZDVAEU3kaSY7Tp mvZwalFN7vih0nSHCBNX51ZBqX8sQZa60OuEprZWrJ4ErRprc5kal/dq5fNFgMAE vRkIoR3UF1/5p/e9cVOWxHqk3hl73JT+Y6QpviVydt5pSic/cwOcUWJyeAipAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU+IMumTyS/nh0+GgofnSPmHd6fy4wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz NzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QFzANBgkqhkiG9w0BAQsFAAOCAQEAO6F39k50rRT0hhn2zbYPy2HU ta271jHWcZq0PTFqbD/+hPBr9fGaDU/kNs8XTewIeklSgj5PZYP/kckBhNoq5g4b B9cJa2Tssh6kqKi0hSUbEvNhewTwzDEvEjTQ2TweuiAILBSvXJkM7PKGWQuZc5Kn coj4BShqcwPMR222dL2coIhP777TydpNNEGnYLFNQKBJF8ScBRL1bTWsxxFjFjzc 8e2Bfl/F3M/rPOXXYDDg0cD7JAxauYcSc1Zeg7UxUy5avL0DPGnX6v0ZrioUOsSW h87zY9qEQAkAnCo3CGXnVlypv1CUSu8SnUWarWLEMa1iUbNisnlw2SNrYYq5BQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client