This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: Adwz7VQ5SeLVtICgXaYHM7Ppdam/914fS4V/kOA22Gw= Subject key identifier: D6:61:9F:46:50:7C:92:A8:19:4C:E6:C3:A6:71:9D:48:FF:2A:2D:2D Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 16607221E520DB672F3B1A58A37C1E8341A6E6B5 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:06 +0000 ROA not before: Tue 06 Jan 2026 20:44:06 +0000 ROA not after: Tue 05 Jan 2027 20:49:06 +0000 asID: 273072 IP address blocks: 2803:cf90:1c00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:60:72:21:e5:20:db:67:2f:3b:1a:58:a3:7c:1e:83:41:a6:e6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:06 2026 GMT Not After : Jan 5 20:49:06 2027 GMT Subject: CN=D6619F46507C92A8194CE6C3A6719D48FF2A2D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:e6:7a:90:46:d4:89:12:2f:44:b2:12:1d: 31:86:51:a5:03:a5:f9:41:bf:e5:4b:ea:f4:17:a2: f7:09:f8:f2:d2:1c:50:f2:a0:c0:7b:2a:6f:9d:a7: 6d:a6:61:4e:1a:f9:12:e3:77:39:59:09:b0:9b:40: 62:e4:33:2d:12:46:c5:e4:4e:68:71:b7:31:5d:e2: bf:96:95:91:87:63:79:52:a6:fb:bd:62:32:86:da: da:9c:b8:88:b1:fc:51:bc:ec:7c:5c:66:d3:3b:55: a2:9d:1b:76:a4:34:f7:a1:67:1d:8f:d8:31:f3:06: 8e:eb:21:b0:09:17:e0:63:1b:e5:c0:82:2d:ed:a1: 37:1d:52:7d:30:7f:44:d8:8f:bd:06:63:de:35:55: 36:9f:f8:81:fb:99:70:66:94:3b:fd:60:ae:b2:28: 58:22:29:6b:09:2e:79:c5:1d:22:0b:b9:7f:0f:06: e3:12:a9:16:b7:4b:f3:e3:b6:b9:cb:16:da:cc:55: 44:d5:c2:89:aa:e9:2e:8f:ac:3e:b6:93:08:49:3a: ee:42:59:fd:48:cb:99:0f:8a:d4:ae:40:db:d9:ca: a9:3f:6c:42:0f:ab:fb:85:21:d7:e0:1f:f3:4c:bd: d5:d6:3a:98:89:56:e6:8f:0a:9e:4f:b1:7c:2d:48: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:61:9F:46:50:7C:92:A8:19:4C:E6:C3:A6:71:9D:48:FF:2A:2D:2D X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1c00::/40 Signature Algorithm: sha256WithRSAEncryption 27:26:99:37:93:3a:07:77:bf:d6:b1:d2:5e:01:18:82:8b:b6: 8f:2e:d8:07:96:87:d7:92:a5:86:b0:31:33:6d:ad:78:93:5a: 20:48:20:27:bd:44:36:9e:49:96:f2:74:fa:c8:cb:f0:e6:52: d7:0e:8f:ab:d6:61:20:81:6c:42:3a:b2:57:61:b2:69:29:a2: 15:26:4a:57:31:15:7a:03:84:b3:de:14:31:84:42:70:75:89: f0:b6:10:76:63:99:47:25:ff:86:3b:b9:04:c0:e5:aa:c6:95: b0:f7:ed:5c:86:e2:70:d4:5a:ba:5d:9b:a7:f1:2b:ad:c8:4e: b9:78:fa:6e:8d:df:3e:86:34:a1:b8:53:18:c6:9c:ed:c9:e1: 14:b5:00:b3:fa:33:0b:26:58:4e:82:23:bb:10:bd:f7:75:77: 81:1b:f6:26:88:dd:78:b8:a3:21:5e:7a:08:27:21:0b:16:53: da:f7:13:d1:2d:c3:6b:d7:41:4a:e3:61:54:87:23:ef:ec:8d: 11:a0:a5:55:de:2f:66:0b:87:e5:4b:e5:f5:8a:a6:df:91:17: d0:b4:e9:fa:6c:fe:5a:36:25:07:8c:69:ae:59:e5:5f:fa:b6: 3d:a8:46:54:b1:d8:aa:d4:a2:5a:9d:f7:62:3e:6c:b5:17:95: 90:a0:c6:42 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUFmByIeUg22cvOxpYo3weg0Gm5rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDZaFw0yNzAxMDUyMDQ5MDZaMDMxMTAvBgNV BAMTKEQ2NjE5RjQ2NTA3QzkyQTgxOTRDRTZDM0E2NzE5RDQ4RkYyQTJEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPlOZ6kEbUiRIvRLISHTGGUaUD pflBv+VL6vQXovcJ+PLSHFDyoMB7Km+dp22mYU4a+RLjdzlZCbCbQGLkMy0SRsXk TmhxtzFd4r+WlZGHY3lSpvu9YjKG2tqcuIix/FG87HxcZtM7VaKdG3akNPehZx2P 2DHzBo7rIbAJF+BjG+XAgi3toTcdUn0wf0TYj70GY941VTaf+IH7mXBmlDv9YK6y KFgiKWsJLnnFHSILuX8PBuMSqRa3S/PjtrnLFtrMVUTVwomq6S6PrD62kwhJOu5C Wf1Iy5kPitSuQNvZyqk/bEIPq/uFIdfgH/NMvdXWOpiJVuaPCp5PsXwtSH3dAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU1mGfRlB8kqgZTObDpnGdSP8qLS0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2 MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QHDANBgkqhkiG9w0BAQsFAAOCAQEAJyaZN5M6B3e/1rHSXgEYgou2 jy7YB5aH15KlhrAxM22teJNaIEggJ71ENp5JlvJ0+sjL8OZS1w6Pq9ZhIIFsQjqy V2GyaSmiFSZKVzEVegOEs94UMYRCcHWJ8LYQdmOZRyX/hju5BMDlqsaVsPftXIbi cNRaul2bp/ErrchOuXj6bo3fPoY0obhTGMac7cnhFLUAs/ozCyZYToIjuxC993V3 gRv2JojdeLijIV56CCchCxZT2vcT0S3Da9dBSuNhVIcj7+yNEaClVd4vZguH5Uvl 9Yqm35EX0LTp+mz+WjYlB4xprlnlX/q2PahGVLHYqtSiWp33Yj5stReVkKDGQg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:05 2026 by rpki-client