This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: C6Z8rdFmjI1Hull+HcUw1LBkKAuwO60tGbabFiNVINU= Subject key identifier: AC:63:13:94:1A:4D:A7:2A:FA:8F:A8:82:1E:35:E6:E5:EE:54:B0:10 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 5EC476402C779F580919BE20B857616B0499A151 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:07 +0000 ROA not before: Tue 06 Jan 2026 20:44:07 +0000 ROA not after: Tue 05 Jan 2027 20:49:07 +0000 asID: 273072 IP address blocks: 2803:cf90:1800::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c4:76:40:2c:77:9f:58:09:19:be:20:b8:57:61:6b:04:99:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:07 2026 GMT Not After : Jan 5 20:49:07 2027 GMT Subject: CN=AC6313941A4DA72AFA8FA8821E35E6E5EE54B010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:47:f5:46:0c:6a:e9:ef:c8:bb:be:46:9e: 71:9e:77:9a:f0:2a:a2:7b:07:2a:86:9e:93:b2:71: 66:4d:fa:13:dd:ee:1b:73:8e:9a:f3:30:86:85:25: 90:1a:b1:9e:cb:f5:4d:6e:ce:34:3e:12:af:b8:43: ef:a0:92:74:46:35:f3:8c:b4:18:d9:26:a2:a3:f5: e1:de:47:14:7f:34:d7:8a:53:1a:a7:e9:7c:68:01: 26:4d:f9:45:6a:df:fc:58:0e:e6:9c:b8:52:46:4a: d8:ae:86:96:44:4a:b4:3f:94:ff:d0:81:ac:78:58: 2f:ed:49:13:e5:e8:e2:63:7a:9d:5a:cd:ce:48:52: db:69:66:8f:18:1f:65:3e:a8:8b:cb:6e:b5:c8:e9: a3:e4:cb:88:e9:42:7b:e5:c2:fd:df:85:53:21:4a: 11:bd:42:d3:50:53:30:8d:cf:1b:8d:a7:92:66:05: 96:6f:02:a2:92:ba:c9:e9:b2:f8:72:e3:39:51:a6: 52:53:a5:01:c6:76:5f:c9:ba:30:23:ce:41:4b:1a: 88:40:56:89:17:85:ab:a2:c7:23:54:1a:ae:46:04: e4:65:03:ed:d2:b3:0a:83:b4:99:4b:e8:6e:ec:eb: b4:64:85:ed:00:cc:2c:ca:27:a3:7d:51:b4:77:5c: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:13:94:1A:4D:A7:2A:FA:8F:A8:82:1E:35:E6:E5:EE:54:B0:10 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1800::/40 Signature Algorithm: sha256WithRSAEncryption 4f:e8:f8:49:9e:87:f4:d8:09:fd:d6:2d:71:61:bf:de:36:43: 93:c3:92:55:1f:37:30:4e:53:d9:0d:22:97:ea:4b:4f:c9:e8: 5f:2e:e1:09:de:c7:30:4f:f1:10:d6:c0:36:b8:5d:e5:39:7c: c1:55:25:7e:e4:ae:a7:c6:17:3d:41:67:23:16:93:da:40:b1: 94:ed:90:4f:51:df:94:ef:a9:c8:f2:fe:ed:1b:0b:a3:df:7e: 83:52:83:61:80:30:d7:7c:db:29:da:8b:a2:a5:0e:2e:af:1b: 8f:93:69:66:a9:62:15:24:bd:41:57:ca:1c:87:81:f8:ec:2c: 58:9c:ca:81:61:2c:bb:b8:94:bd:70:88:fe:0e:18:7d:51:d4: 8d:28:ce:09:18:f6:c2:b7:68:be:64:3f:7c:d8:55:9e:ba:c8: 66:45:8f:e2:b7:d6:4e:c1:79:b8:ed:f6:eb:76:09:81:ac:52: 36:6e:23:d6:a4:4b:86:8b:85:dd:bb:31:fb:58:75:88:3a:e7: b9:17:10:d1:85:c6:ee:18:ad:21:47:21:3b:87:07:7a:a7:36: b7:f4:36:ba:3b:be:45:52:3d:bc:6e:2c:e8:a7:d4:41:de:66: f6:6c:31:5c:2c:0e:e9:01:16:b9:8d:d1:fb:01:fd:c8:77:ee: c5:6a:5e:49 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUXsR2QCx3n1gJGb4guFdhawSZoVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDdaFw0yNzAxMDUyMDQ5MDdaMDMxMTAvBgNV BAMTKEFDNjMxMzk0MUE0REE3MkFGQThGQTg4MjFFMzVFNkU1RUU1NEIwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIGkf1Rgxq6e/Iu75GnnGed5rw KqJ7ByqGnpOycWZN+hPd7htzjprzMIaFJZAasZ7L9U1uzjQ+Eq+4Q++gknRGNfOM tBjZJqKj9eHeRxR/NNeKUxqn6XxoASZN+UVq3/xYDuacuFJGStiuhpZESrQ/lP/Q gax4WC/tSRPl6OJjep1azc5IUttpZo8YH2U+qIvLbrXI6aPky4jpQnvlwv3fhVMh ShG9QtNQUzCNzxuNp5JmBZZvAqKSusnpsvhy4zlRplJTpQHGdl/JujAjzkFLGohA VokXhauixyNUGq5GBORlA+3SswqDtJlL6G7s67Rkhe0AzCzKJ6N9UbR3XNRBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUrGMTlBpNpyr6j6iCHjXm5e5UsBAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz ODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QGDANBgkqhkiG9w0BAQsFAAOCAQEAT+j4SZ6H9NgJ/dYtcWG/3jZD k8OSVR83ME5T2Q0il+pLT8noXy7hCd7HME/xENbANrhd5Tl8wVUlfuSup8YXPUFn IxaT2kCxlO2QT1HflO+pyPL+7RsLo99+g1KDYYAw13zbKdqLoqUOLq8bj5NpZqli FSS9QVfKHIeB+OwsWJzKgWEsu7iUvXCI/g4YfVHUjSjOCRj2wrdovmQ/fNhVnrrI ZkWP4rfWTsF5uO3263YJgaxSNm4j1qRLhouF3bsx+1h1iDrnuRcQ0YXG7hitIUch O4cHeqc2t/Q2uju+RVI9vG4s6KfUQd5m9mwxXCwO6QEWuY3R+wH9yHfuxWpeSQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:07 2026 by rpki-client