This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a316130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: kWDRB+DlGnLXp5KkM47K1qfJU4SHRsssH5EZbX11OHQ= Subject key identifier: 84:65:65:8E:5A:B9:DE:39:97:44:AF:93:04:02:A0:EF:A6:4B:34:FC Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 427355AB99040F0C3101843C075A563086268DC9 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:12 +0000 ROA not before: Tue 06 Jan 2026 20:44:12 +0000 ROA not after: Tue 05 Jan 2027 20:49:12 +0000 asID: 273072 IP address blocks: 2803:cf90:1a00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:73:55:ab:99:04:0f:0c:31:01:84:3c:07:5a:56:30:86:26:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:12 2026 GMT Not After : Jan 5 20:49:12 2027 GMT Subject: CN=8465658E5AB9DE399744AF930402A0EFA64B34FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:ca:6b:db:84:fa:0f:52:c6:db:bc:9d:f9: 7c:11:ef:9c:79:f1:88:1c:67:12:54:53:74:be:34: 7c:22:5d:18:89:5a:4b:25:fc:6f:ae:98:ed:80:49: 2f:b9:b8:8a:f1:33:3a:6b:27:eb:35:82:02:f6:01: fc:33:77:20:86:4c:d2:f9:bc:e9:91:c0:d8:94:87: 2c:12:35:c6:38:e6:c2:f4:6e:a0:af:8d:57:d5:00: 73:3c:1a:8a:ba:1d:bc:3a:de:bc:4c:3f:62:56:f5: 6f:8e:b4:d3:a6:2c:07:67:44:d9:54:7f:99:b0:7e: d3:c6:6f:41:c6:c0:c9:2c:bd:bc:97:54:f7:0f:37: 2d:6b:e9:e3:2e:af:c6:7d:1c:35:aa:ec:b2:ad:f4: 4f:bc:6e:b8:9a:fd:2c:5d:af:bb:a4:7c:ad:4c:0e: c6:f9:7e:2f:3b:0b:90:bf:c0:f1:64:57:f9:2b:aa: a2:98:4a:b3:a8:78:12:01:0d:e7:f7:1b:9b:d8:d0: d4:62:49:b6:be:fc:ee:50:b2:7d:13:ec:17:19:7c: d5:6a:7e:f8:4d:fb:34:b7:0c:e9:57:ba:ad:0e:2f: f7:96:82:b6:ed:41:ec:37:da:46:dd:a0:eb:16:b2: ca:77:8a:09:59:4f:97:14:fb:2b:03:c2:1e:ae:a7: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:65:8E:5A:B9:DE:39:97:44:AF:93:04:02:A0:EF:A6:4B:34:FC X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 69:0f:d1:43:16:91:c9:90:bd:e0:1d:94:c6:15:d1:41:0a:8b: 89:40:d3:39:56:ef:9d:3b:bb:01:43:03:d6:30:ca:b9:3c:80: a2:d2:00:b9:35:17:dc:b0:fd:d5:f4:fd:a6:88:4c:5c:1f:12: 27:88:18:87:49:9e:e2:21:c2:92:c4:f6:cc:e6:7f:bd:e7:fd: 0a:c9:4d:85:42:40:85:c5:ee:54:da:99:dd:b2:f8:75:16:6f: 55:a6:d5:3e:8a:59:95:fa:d1:88:8d:f4:53:09:d6:dd:69:5b: 4a:3e:69:cd:90:7d:e4:07:b2:d6:f5:6c:fa:77:76:11:db:9d: 8f:e4:6f:67:1b:7e:d3:50:c4:29:42:38:c5:9b:1f:81:e7:74: f1:eb:de:86:aa:3e:81:45:fc:8a:c5:3a:fd:ed:aa:1e:43:44: 7a:5c:07:4a:db:f8:85:6c:18:ed:af:1c:86:b6:cc:f5:b2:a4: fb:70:3f:40:cd:50:5c:d1:18:ab:5d:2f:6c:1d:7c:dc:47:4e: ca:ec:a3:71:49:3e:f8:eb:bc:df:e7:6b:57:1b:3b:7d:a6:15: 9f:60:32:1f:01:cf:50:bb:e9:79:02:7f:de:42:d8:8b:eb:84: 7e:6b:62:15:d9:3c:d7:36:57:e8:56:72:1e:d4:6f:8f:ad:38: 95:ff:c6:d8 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQnNVq5kEDwwxAYQ8B1pWMIYmjckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTJaFw0yNzAxMDUyMDQ5MTJaMDMxMTAvBgNV BAMTKDg0NjU2NThFNUFCOURFMzk5NzQ0QUY5MzA0MDJBMEVGQTY0QjM0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeK8pr24T6D1LG27yd+XwR75x5 8YgcZxJUU3S+NHwiXRiJWksl/G+umO2ASS+5uIrxMzprJ+s1ggL2AfwzdyCGTNL5 vOmRwNiUhywSNcY45sL0bqCvjVfVAHM8Goq6Hbw63rxMP2JW9W+OtNOmLAdnRNlU f5mwftPGb0HGwMksvbyXVPcPNy1r6eMur8Z9HDWq7LKt9E+8bria/Sxdr7ukfK1M Dsb5fi87C5C/wPFkV/krqqKYSrOoeBIBDef3G5vY0NRiSba+/O5Qsn0T7BcZfNVq fvhN+zS3DOlXuq0OL/eWgrbtQew32kbdoOsWssp3iglZT5cU+ysDwh6up+WxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUhGVljlq53jmXRK+TBAKg76ZLNPwwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2 MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QGjANBgkqhkiG9w0BAQsFAAOCAQEAaQ/RQxaRyZC94B2UxhXRQQqL iUDTOVbvnTu7AUMD1jDKuTyAotIAuTUX3LD91fT9pohMXB8SJ4gYh0me4iHCksT2 zOZ/vef9CslNhUJAhcXuVNqZ3bL4dRZvVabVPopZlfrRiI30UwnW3WlbSj5pzZB9 5Aey1vVs+nd2Edudj+RvZxt+01DEKUI4xZsfged08evehqo+gUX8isU6/e2qHkNE elwHStv4hWwY7a8chrbM9bKk+3A/QM1QXNEYq10vbB183EdOyuyjcUk++Ou83+dr Vxs7faYVn2AyHwHPULvpeQJ/3kLYi+uEfmtiFdk81zZX6FZyHtRvj604lf/G2A== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:30 2026 by rpki-client