This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: mjGWkYOnQdKWcp0tAwsA12DiFzcxDJ6eN1HWPqbgAPw= Subject key identifier: 60:A8:E3:E2:B3:02:15:33:46:30:2A:12:0C:8A:7A:30:68:88:63:4B Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 5BF971BD7F11625373A62A770AC5E567AB911C2E Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:48:59 +0000 ROA not before: Tue 06 Jan 2026 20:43:59 +0000 ROA not after: Tue 05 Jan 2027 20:48:59 +0000 asID: 273072 IP address blocks: 2803:cf90:1900::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:71:bd:7f:11:62:53:73:a6:2a:77:0a:c5:e5:67:ab:91:1c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:43:59 2026 GMT Not After : Jan 5 20:48:59 2027 GMT Subject: CN=60A8E3E2B302153346302A120C8A7A306888634B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:5a:f2:b6:6a:94:9e:fd:a6:10:7f:14:3e: 00:f3:a1:22:fa:6f:0d:0c:bc:9b:c5:df:49:41:6c: b9:c8:7f:9d:23:22:8d:59:d6:d3:50:7b:b1:55:5e: 3c:50:0d:d2:16:e7:0c:21:b2:ba:b9:6a:05:a9:b6: 2a:c2:30:7a:da:f8:9a:e5:6c:13:33:60:43:6f:61: 53:7a:bc:16:c7:aa:18:b3:13:00:05:17:50:7c:1b: 69:52:a0:39:43:b9:89:3f:83:1b:9d:81:f0:4b:ef: 24:17:c9:41:9f:88:6a:dc:21:64:aa:ed:bc:e4:18: 58:fa:c0:28:a5:d3:e5:54:8b:b3:f4:af:e6:65:a4: 43:da:eb:50:18:33:4c:5a:69:97:d5:a4:25:56:a6: 54:85:f7:2d:aa:70:3d:68:64:16:0a:62:f7:35:c1: 83:7a:a7:c4:4c:21:33:43:6f:ff:c0:fb:93:d8:12: 2e:ce:6e:48:e1:2e:3e:d9:c5:5c:37:17:ad:cc:ca: b4:b7:50:c7:4f:50:04:77:51:fc:05:ef:59:e8:2e: 19:8a:fc:16:60:75:29:03:5e:38:95:97:15:69:8f: 9d:42:78:9b:cb:8e:30:44:0d:ee:80:a8:bd:6f:c0: 13:cd:b4:28:1a:85:13:2c:08:16:be:bf:d4:82:40: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A8:E3:E2:B3:02:15:33:46:30:2A:12:0C:8A:7A:30:68:88:63:4B X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1900::/40 Signature Algorithm: sha256WithRSAEncryption 2b:00:b1:2e:61:c8:f8:48:0a:98:a9:09:c5:31:e0:18:72:bf: 78:1c:b0:18:b0:ec:d4:88:72:2b:aa:e1:80:7f:dc:8b:e5:af: ca:ec:e4:f4:45:7f:50:92:79:43:da:e7:0b:84:2b:84:3f:39: 2d:d5:a0:0f:05:f1:90:1f:fa:96:ee:f3:54:65:c3:f6:3b:67: ee:bd:da:27:9e:4e:46:55:93:c3:29:7a:26:82:44:ce:5a:da: b9:9a:cf:db:5a:92:7a:54:51:e5:9a:8b:ae:dd:e6:c7:07:19: db:86:2b:44:65:31:d4:dc:d5:73:ad:5c:40:8f:93:f2:a2:e0: 0e:2c:74:ee:8d:f3:c3:3d:2d:b4:da:ea:64:c7:6a:9d:b8:81: bd:69:41:22:7c:82:d3:a3:41:46:bc:7d:4c:e6:f6:3d:a8:b9: eb:f0:10:3d:14:2c:ac:17:d9:53:f7:10:10:16:92:a5:6d:71: af:af:4d:fa:8d:34:60:00:c2:3e:7f:64:07:ff:5c:9d:2e:78: 90:41:2a:00:ce:f4:c1:83:59:cf:6f:c5:f2:e3:e3:2a:35:71: 55:bd:8e:fd:a7:39:08:fd:a8:76:8f:25:d5:83:b9:64:75:b6: cc:f1:0a:12:57:d6:cb:b1:ab:c7:45:43:6b:e5:32:85:50:b1: 06:61:b7:32 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUW/lxvX8RYlNzpip3CsXlZ6uRHC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQzNTlaFw0yNzAxMDUyMDQ4NTlaMDMxMTAvBgNV BAMTKDYwQThFM0UyQjMwMjE1MzM0NjMwMkExMjBDOEE3QTMwNjg4ODYzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkFrytmqUnv2mEH8UPgDzoSL6 bw0MvJvF30lBbLnIf50jIo1Z1tNQe7FVXjxQDdIW5wwhsrq5agWptirCMHra+Jrl bBMzYENvYVN6vBbHqhizEwAFF1B8G2lSoDlDuYk/gxudgfBL7yQXyUGfiGrcIWSq 7bzkGFj6wCil0+VUi7P0r+ZlpEPa61AYM0xaaZfVpCVWplSF9y2qcD1oZBYKYvc1 wYN6p8RMITNDb//A+5PYEi7ObkjhLj7ZxVw3F63MyrS3UMdPUAR3UfwF71noLhmK /BZgdSkDXjiVlxVpj51CeJvLjjBEDe6AqL1vwBPNtCgahRMsCBa+v9SCQIOtAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUYKjj4rMCFTNGMCoSDIp6MGiIY0swHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QGTANBgkqhkiG9w0BAQsFAAOCAQEAKwCxLmHI+EgKmKkJxTHgGHK/ eBywGLDs1IhyK6rhgH/ci+Wvyuzk9EV/UJJ5Q9rnC4QrhD85LdWgDwXxkB/6lu7z VGXD9jtn7r3aJ55ORlWTwyl6JoJEzlrauZrP21qSelRR5ZqLrt3mxwcZ24YrRGUx 1NzVc61cQI+T8qLgDix07o3zwz0ttNrqZMdqnbiBvWlBInyC06NBRrx9TOb2Pai5 6/AQPRQsrBfZU/cQEBaSpW1xr69N+o00YADCPn9kB/9cnS54kEEqAM70wYNZz2/F 8uPjKjVxVb2O/ac5CP2odo8l1YO5ZHW2zPEKElfWy7Grx0VDa+UyhVCxBmG3Mg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:05 2026 by rpki-client