This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a316230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: O9UguzDazj14tWeIHPiBG1WgMlJkYj1l3Fl5uPIqCZ8= Subject key identifier: 10:69:98:31:0E:B2:D4:B5:41:93:CE:2B:E9:C5:CD:78:3A:E0:C8:3D Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 07B7FDBAA00BC67313FC4E6AB0068AF46B309B93 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:07 +0000 ROA not before: Tue 06 Jan 2026 20:44:07 +0000 ROA not after: Tue 05 Jan 2027 20:49:07 +0000 asID: 273072 IP address blocks: 2803:cf90:1b00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b7:fd:ba:a0:0b:c6:73:13:fc:4e:6a:b0:06:8a:f4:6b:30:9b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:07 2026 GMT Not After : Jan 5 20:49:07 2027 GMT Subject: CN=106998310EB2D4B54193CE2BE9C5CD783AE0C83D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:88:ec:b6:25:12:78:06:1a:b5:d3:07:f0: 69:5d:ed:46:0d:b5:51:e3:af:bc:98:b9:f0:8c:80: 08:32:33:ff:85:66:d8:12:bc:7e:94:5b:c8:05:33: a5:7f:f3:ea:06:c0:d0:34:35:1b:f8:90:0f:a6:55: 70:97:0b:76:f1:ef:01:1b:98:9a:d1:8c:ef:81:70: a2:24:2e:3d:4d:58:db:fb:89:85:45:9b:07:a5:c7: 33:e1:e0:f8:ab:4c:2d:16:8e:1b:67:48:34:58:f2: 35:09:be:93:32:a6:33:e6:39:51:b2:e1:e0:e3:d3: be:ee:05:7f:68:be:84:02:fa:a6:e7:f5:ba:55:b6: 21:c0:eb:39:dd:5b:56:0c:05:4f:4b:db:69:f7:dd: 96:6d:11:c7:b8:ae:52:a6:a4:33:68:d9:d2:fe:89: aa:4d:e3:6d:7f:34:81:ca:06:ba:37:c3:71:73:b0: c0:67:38:8b:00:2e:94:4e:d8:40:ba:6b:ae:e8:c4: fe:f6:30:3b:b9:76:0c:77:b6:c5:4e:ee:0e:35:a2: 80:13:53:b5:05:c4:02:3b:ed:f4:de:59:b0:e0:36: 9e:00:d2:16:22:15:aa:39:9a:75:51:04:4e:6b:70: 1e:cb:0b:b5:f1:1b:9d:c5:01:96:82:9e:60:b2:bf: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:98:31:0E:B2:D4:B5:41:93:CE:2B:E9:C5:CD:78:3A:E0:C8:3D X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 61:d4:ec:bd:00:dd:8a:a7:05:ce:06:b5:04:89:b7:b8:e2:ef: 2c:3d:84:c8:54:50:ca:8a:5a:3b:7e:74:e9:22:99:7e:ac:bc: f0:9d:d0:5b:52:19:a8:11:17:ac:5f:f6:c8:35:6a:cc:b7:ec: ed:a1:7f:9d:01:1a:ac:78:03:41:f1:89:77:46:8d:0f:0a:98: 48:38:13:0c:53:35:ff:d1:cb:03:55:5f:e4:94:db:b6:44:91: f6:02:46:5e:82:2e:d0:11:7c:e2:7a:b2:77:c0:25:17:72:0b: 55:e9:01:f5:c5:46:4c:0b:d6:e9:16:14:88:73:16:fe:06:74: a1:fa:a4:57:ee:77:dd:5f:40:5b:4c:96:4f:f1:b5:49:34:ab: d9:46:b2:25:b2:5f:4a:ae:b2:f7:94:74:47:6b:ac:d7:27:8a: 67:85:d4:01:cc:8f:58:df:1e:4a:1b:54:6f:52:05:fc:5b:52: b1:6d:a8:0f:68:7c:c8:a3:72:c3:16:f8:0d:4e:93:75:77:7f: f6:b0:e8:35:0d:20:96:9b:78:80:ed:7f:56:a1:9b:b4:55:23: f7:d3:2f:7d:f8:73:8a:88:f8:ad:b3:c7:0a:cb:47:84:2d:7c: 07:3c:f8:c2:54:e5:ca:01:83:e1:01:83:cc:a0:62:6e:ea:57: c5:73:c1:e8 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUB7f9uqALxnMT/E5qsAaK9Gswm5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDdaFw0yNzAxMDUyMDQ5MDdaMDMxMTAvBgNV BAMTKDEwNjk5ODMxMEVCMkQ0QjU0MTkzQ0UyQkU5QzVDRDc4M0FFMEM4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWIjstiUSeAYatdMH8Gld7UYN tVHjr7yYufCMgAgyM/+FZtgSvH6UW8gFM6V/8+oGwNA0NRv4kA+mVXCXC3bx7wEb mJrRjO+BcKIkLj1NWNv7iYVFmwelxzPh4PirTC0WjhtnSDRY8jUJvpMypjPmOVGy 4eDj077uBX9ovoQC+qbn9bpVtiHA6zndW1YMBU9L22n33ZZtEce4rlKmpDNo2dL+ iapN421/NIHKBro3w3FzsMBnOIsALpRO2EC6a67oxP72MDu5dgx3tsVO7g41ooAT U7UFxAI77fTeWbDgNp4A0hYiFao5mnVRBE5rcB7LC7XxG53FAZaCnmCyv+q1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUEGmYMQ6y1LVBk84r6cXNeDrgyD0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2 MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QGzANBgkqhkiG9w0BAQsFAAOCAQEAYdTsvQDdiqcFzga1BIm3uOLv LD2EyFRQyopaO3506SKZfqy88J3QW1IZqBEXrF/2yDVqzLfs7aF/nQEarHgDQfGJ d0aNDwqYSDgTDFM1/9HLA1Vf5JTbtkSR9gJGXoIu0BF84nqyd8AlF3ILVekB9cVG TAvW6RYUiHMW/gZ0ofqkV+533V9AW0yWT/G1STSr2UayJbJfSq6y95R0R2us1yeK Z4XUAcyPWN8eShtUb1IF/FtSsW2oD2h8yKNywxb4DU6TdXd/9rDoNQ0glpt4gO1/ VqGbtFUj99Mvffhzioj4rbPHCstHhC18Bzz4wlTlygGD4QGDzKBibupXxXPB6A== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:32 2026 by rpki-client