This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: DYk49KHCXvwOrhByZbx+LD4AwMwKnKcwdUA/grXc2YU= Subject key identifier: FB:08:AE:00:E4:96:1D:86:2C:F3:7E:67:55:22:3A:66:E5:05:7A:79 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 30E0C079B22A9AE63EA595A715E16E245E5D84DB Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:16 +0000 ROA not before: Tue 06 Jan 2026 20:44:16 +0000 ROA not after: Tue 05 Jan 2027 20:49:16 +0000 asID: 273072 IP address blocks: 2803:cf90:1d00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e0:c0:79:b2:2a:9a:e6:3e:a5:95:a7:15:e1:6e:24:5e:5d:84:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:16 2026 GMT Not After : Jan 5 20:49:16 2027 GMT Subject: CN=FB08AE00E4961D862CF37E6755223A66E5057A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:16:69:64:03:32:2a:b6:34:85:c5:8a:3c: 4d:ab:e9:45:94:ff:1b:97:ae:03:05:01:c4:f4:fb: e1:bd:98:c6:74:38:b6:70:71:bb:3e:d0:7d:07:6b: b9:67:bb:72:f8:0c:38:e8:95:9c:38:75:fa:50:d9: c0:ea:b3:22:83:3a:a9:53:08:dc:0b:36:d3:2c:eb: c1:2c:19:89:34:ca:b5:77:30:a3:d7:ee:b6:06:2f: 2e:23:26:76:35:9a:b3:de:70:96:a9:42:91:29:a1: 1a:23:93:b6:58:1e:d9:15:bc:d2:27:3a:66:fc:18: 24:51:d3:b1:f1:80:6e:a9:f4:96:01:15:f6:b8:5c: e7:68:80:39:3f:69:18:e5:2b:bd:9c:76:e1:98:71: ff:71:bc:7d:bd:62:55:b7:eb:4c:0b:1c:07:5b:78: 2e:87:1d:32:0b:0f:d1:e9:ed:fb:b3:48:b9:2a:14: 65:3a:36:89:d0:19:59:43:a2:8c:0a:70:34:07:12: 87:f4:3c:56:3b:e0:dd:c7:09:20:28:cf:9d:af:2c: 2a:a3:23:68:a2:5c:ad:b1:ef:d6:32:b0:5f:08:e6: e5:d1:05:6c:e2:16:bd:19:05:5e:bf:95:e4:e6:55: 4a:f2:24:8b:8f:79:eb:17:e4:13:5c:00:3d:b1:be: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:AE:00:E4:96:1D:86:2C:F3:7E:67:55:22:3A:66:E5:05:7A:79 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1d00::/40 Signature Algorithm: sha256WithRSAEncryption 37:33:52:a4:70:fc:b6:53:cf:e1:47:08:25:64:bc:4d:18:96: 2b:3a:f7:2c:62:c1:40:a4:11:4a:15:d3:f5:33:8b:1c:b6:24: 29:19:89:bf:0a:77:14:33:c5:4c:a2:6c:77:c8:85:2a:20:8c: 27:5e:55:ef:17:01:3b:30:ed:62:ae:66:60:61:c8:55:e5:5b: 41:26:72:55:c2:2f:e6:42:8a:d1:b7:03:e5:ca:d2:cb:f5:12: a9:e9:c6:2a:c4:dc:96:85:57:a1:65:cf:60:16:72:df:40:ca: cf:5e:88:11:f4:da:15:d8:9b:91:e2:d6:73:ae:36:f7:38:f7: 52:4b:94:22:b5:c2:7e:ce:19:07:37:c3:3b:a0:8f:0f:8f:b0: 1f:20:4c:ab:99:c6:a3:43:e9:97:eb:0b:75:1e:9a:11:5c:52: 32:fb:27:c0:33:6f:55:1c:d1:c4:7c:12:ad:ca:fc:62:a9:17: 9e:fe:0b:40:7f:68:e1:90:11:6a:33:d3:65:97:8c:e9:af:5a: ad:9d:68:a7:55:70:34:fc:bf:d2:ca:00:73:05:60:69:74:4b: 5d:4f:79:57:9a:51:60:d9:b9:c8:20:9a:81:ba:31:90:b7:6b: 97:c5:c6:87:f4:4b:a9:af:45:86:7a:68:db:0d:e4:f1:ff:10: 9a:8a:c1:94 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUMODAebIqmuY+pZWnFeFuJF5dhNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTZaFw0yNzAxMDUyMDQ5MTZaMDMxMTAvBgNV BAMTKEZCMDhBRTAwRTQ5NjFEODYyQ0YzN0U2NzU1MjIzQTY2RTUwNTdBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52xZpZAMyKrY0hcWKPE2r6UWU /xuXrgMFAcT0++G9mMZ0OLZwcbs+0H0Ha7lnu3L4DDjolZw4dfpQ2cDqsyKDOqlT CNwLNtMs68EsGYk0yrV3MKPX7rYGLy4jJnY1mrPecJapQpEpoRojk7ZYHtkVvNIn Omb8GCRR07HxgG6p9JYBFfa4XOdogDk/aRjlK72cduGYcf9xvH29YlW360wLHAdb eC6HHTILD9Hp7fuzSLkqFGU6NonQGVlDoowKcDQHEof0PFY74N3HCSAoz52vLCqj I2iiXK2x79YysF8I5uXRBWziFr0ZBV6/leTmVUryJIuPeesX5BNcAD2xvqGTAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU+wiuAOSWHYYs835nVSI6ZuUFenkwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2 NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QHTANBgkqhkiG9w0BAQsFAAOCAQEANzNSpHD8tlPP4UcIJWS8TRiW Kzr3LGLBQKQRShXT9TOLHLYkKRmJvwp3FDPFTKJsd8iFKiCMJ15V7xcBOzDtYq5m YGHIVeVbQSZyVcIv5kKK0bcD5crSy/USqenGKsTcloVXoWXPYBZy30DKz16IEfTa FdibkeLWc6429zj3UkuUIrXCfs4ZBzfDO6CPD4+wHyBMq5nGo0Ppl+sLdR6aEVxS MvsnwDNvVRzRxHwSrcr8YqkXnv4LQH9o4ZARajPTZZeM6a9arZ1op1VwNPy/0soA cwVgaXRLXU95V5pRYNm5yCCagboxkLdrl8XGh/RLqa9Fhnpo2w3k8f8QmorBlA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client