This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: ShGPetgals+jO21sMB90P+Ytj3HdYFxVHJIA1UuwrgU= Subject key identifier: 59:78:76:7F:AE:97:C1:AD:38:26:1B:F5:1B:9E:B9:7A:00:C9:2A:EB Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 187FDF73F4A32DE56CE79197A01AFE693AA3AC71 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:48:59 +0000 ROA not before: Tue 06 Jan 2026 20:43:59 +0000 ROA not after: Tue 05 Jan 2027 20:48:59 +0000 asID: 273072 IP address blocks: 2803:cf90:1f00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7f:df:73:f4:a3:2d:e5:6c:e7:91:97:a0:1a:fe:69:3a:a3:ac:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:43:59 2026 GMT Not After : Jan 5 20:48:59 2027 GMT Subject: CN=5978767FAE97C1AD38261BF51B9EB97A00C92AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:48:26:09:a0:c6:76:93:03:ba:f0:01:6f: fd:5a:9d:31:3f:b1:e1:44:a9:0f:50:1d:14:f5:d9: 72:92:6e:0f:5b:0b:c5:ad:83:37:6f:2c:0a:ce:88: 31:f1:83:c5:d8:39:fa:da:a8:ac:0c:aa:1e:2b:41: a7:5b:e4:56:d6:af:b2:7e:4c:3c:7f:b4:46:90:af: 20:5f:77:0c:c2:d0:43:10:00:31:6b:bd:0c:a4:9e: c4:b9:cb:26:83:32:2e:78:fa:36:8e:98:4d:1e:4c: c3:1f:cb:ef:8a:e9:11:76:d2:53:f8:3e:18:58:34: 37:87:16:bc:d5:d6:12:76:e6:1d:3d:3f:28:3f:d0: 1d:37:af:67:d7:ca:3e:19:39:3b:17:71:74:83:cd: 78:23:8f:3d:5c:25:fe:35:60:36:e5:f4:fd:89:f8: 52:f8:95:c3:48:46:63:d6:70:23:f0:6b:de:9d:87: d6:01:f7:59:72:a7:f2:c1:8a:2c:d8:9e:b3:81:57: cf:e4:89:4d:c5:2c:f7:2a:5d:98:53:53:80:78:a4: cf:79:72:8a:1a:fa:6f:9e:ea:2f:93:a0:e0:a4:fe: f6:a1:08:92:ae:40:4e:a0:1f:a0:da:8d:1d:d3:36: 84:60:61:44:8c:c0:a5:6a:64:e5:b1:63:79:0c:46: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:76:7F:AE:97:C1:AD:38:26:1B:F5:1B:9E:B9:7A:00:C9:2A:EB X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:ce:74:7a:29:df:83:02:56:4c:75:33:5b:8e:63:bc:13:0d: 02:5f:9c:33:6a:2a:a3:23:82:c9:3e:09:4d:54:db:04:4a:48: 96:be:1e:b1:ca:00:81:48:81:06:d1:20:fe:89:e9:56:f3:57: 47:80:09:54:f7:24:34:b8:de:07:6c:4d:9e:26:1d:05:9c:b0: 23:d7:c4:d3:08:8f:ec:90:28:54:ed:e6:9a:eb:6f:de:d7:db: 21:6c:15:9c:13:6b:a2:15:c6:85:d2:2a:ff:83:53:6f:64:12: 80:0e:79:16:69:46:11:c5:0d:45:08:c9:d3:86:3a:cf:6d:72: e6:dc:dd:a5:d0:e1:18:6e:e9:42:06:fd:dd:09:0c:6d:1a:72: 39:14:24:a0:e4:3e:cf:87:2a:c9:d2:47:82:89:6c:30:35:da: 86:ee:35:7c:12:1d:81:b0:10:7a:09:05:20:be:36:c9:4d:4f: 4f:91:18:71:1d:e9:25:51:5f:8c:99:1a:33:f5:89:4c:37:ac: 21:99:85:42:b4:fa:5b:cf:70:a3:7e:6b:65:0c:c6:aa:75:d2: 93:48:fd:c8:2a:2b:74:64:53:89:56:32:0d:e1:47:72:29:31: ff:e5:68:e4:18:74:82:70:d5:59:9c:7d:7d:95:45:7e:2b:f0: b5:99:8c:25 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUGH/fc/SjLeVs55GXoBr+aTqjrHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQzNTlaFw0yNzAxMDUyMDQ4NTlaMDMxMTAvBgNV BAMTKDU5Nzg3NjdGQUU5N0MxQUQzODI2MUJGNTFCOUVCOTdBMDBDOTJBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TUgmCaDGdpMDuvABb/1anTE/ seFEqQ9QHRT12XKSbg9bC8WtgzdvLArOiDHxg8XYOfraqKwMqh4rQadb5FbWr7J+ TDx/tEaQryBfdwzC0EMQADFrvQyknsS5yyaDMi54+jaOmE0eTMMfy++K6RF20lP4 PhhYNDeHFrzV1hJ25h09Pyg/0B03r2fXyj4ZOTsXcXSDzXgjjz1cJf41YDbl9P2J +FL4lcNIRmPWcCPwa96dh9YB91lyp/LBiizYnrOBV8/kiU3FLPcqXZhTU4B4pM95 cooa+m+e6i+ToOCk/vahCJKuQE6gH6DajR3TNoRgYUSMwKVqZOWxY3kMRjGLAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWXh2f66Xwa04Jhv1G565egDJKuswHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2 NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QHzANBgkqhkiG9w0BAQsFAAOCAQEAjs50einfgwJWTHUzW45jvBMN Al+cM2oqoyOCyT4JTVTbBEpIlr4escoAgUiBBtEg/onpVvNXR4AJVPckNLjeB2xN niYdBZywI9fE0wiP7JAoVO3mmutv3tfbIWwVnBNrohXGhdIq/4NTb2QSgA55FmlG EcUNRQjJ04Y6z21y5tzdpdDhGG7pQgb93QkMbRpyORQkoOQ+z4cqydJHgolsMDXa hu41fBIdgbAQegkFIL42yU1PT5EYcR3pJVFfjJkaM/WJTDesIZmFQrT6W89wo35r ZQzGqnXSk0j9yCordGRTiVYyDeFHcikx/+Vo5Bh0gnDVWZx9fZVFfivwtZmMJQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:09 2026 by rpki-client