This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323030303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323030303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: BGJNEOShy0mZ2QDbeBhRG7DNDcOsQnGSq9xw6Vj37hw= Subject key identifier: FF:EC:EE:55:18:C7:64:99:0B:E1:E0:AF:63:6F:D7:72:2B:17:3E:1B Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 6C84C97CFBF437EAC8FBC10089542058041FF5E6 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323030303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:08 +0000 ROA not before: Tue 06 Jan 2026 20:44:08 +0000 ROA not after: Tue 05 Jan 2027 20:49:08 +0000 asID: 273072 IP address blocks: 2803:cf90:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:84:c9:7c:fb:f4:37:ea:c8:fb:c1:00:89:54:20:58:04:1f:f5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:08 2026 GMT Not After : Jan 5 20:49:08 2027 GMT Subject: CN=FFECEE5518C764990BE1E0AF636FD7722B173E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:70:d5:59:c8:7b:89:b8:5c:a0:d8:27:49: 7b:62:32:fa:6a:82:1e:b2:c8:84:8d:87:fa:4d:ac: 8e:fe:ae:cb:0a:85:44:54:ad:af:e7:5a:15:68:ec: 00:1a:ce:71:61:23:d9:bf:5b:9d:a2:32:d8:4e:95: 48:e9:08:2d:e7:52:a4:9b:fe:01:b7:93:8f:e1:e7: 9b:70:32:b1:f8:55:e8:cd:0d:e2:8c:26:a9:b9:f2: 2e:15:dc:6a:24:a0:41:8a:76:3f:58:8a:76:6b:61: 3d:8c:11:32:5d:19:2b:02:b1:a2:93:22:46:c9:d9: 4e:de:12:7a:23:03:2c:66:17:fc:2b:00:25:a1:99: 7e:12:85:9e:69:48:69:61:ac:9c:31:7b:ba:85:3e: e1:b2:94:7f:f2:8c:f3:90:83:55:89:1f:d5:50:d1: 00:a6:bf:ed:87:c2:3c:df:8f:f1:9b:c7:d5:30:2d: 33:86:5d:f4:f6:2a:15:fe:9b:f6:b5:ba:6e:8c:0e: 92:55:ff:31:69:a1:f2:22:fd:a9:71:99:d9:84:64: a3:e7:7b:5f:97:ab:be:49:38:02:4b:d5:30:62:f1: 53:f2:80:25:ea:10:71:91:a6:42:f0:af:0a:5f:dc: cc:95:e9:35:4b:e0:c0:f0:37:d0:d5:1a:07:d2:ba: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:EE:55:18:C7:64:99:0B:E1:E0:AF:63:6F:D7:72:2B:17:3E:1B X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323030303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2000::/40 Signature Algorithm: sha256WithRSAEncryption 01:c4:4d:54:b6:e3:f9:1d:86:76:46:35:93:ea:93:0b:ee:4c: 6a:c7:5b:f6:b4:71:ef:75:f2:36:eb:76:ee:81:14:81:6d:64: 01:23:3a:8b:39:6d:81:9f:c6:11:b3:f2:5f:9c:b9:bc:32:0d: 2c:a6:a5:26:21:ae:e0:e9:cb:c2:2b:f9:eb:b3:d4:f9:d0:be: e3:cd:34:35:3c:ff:3a:86:cd:07:16:d9:f5:64:74:51:48:75: 2d:78:3f:98:74:a4:60:7e:e5:de:1b:92:04:4e:f8:bb:d8:a1: c2:5d:c0:d8:10:2d:25:9d:9b:f0:f9:24:5d:45:89:52:9c:65: 4d:16:41:0c:79:c4:47:17:55:00:85:cd:f3:06:5a:c0:06:81: 53:e3:e8:ca:a9:09:8c:24:b1:32:f2:f4:ef:e2:5e:90:5c:06: 67:a7:ae:b5:11:c0:b0:de:71:82:2f:5d:84:ba:a8:f2:5a:6d: f6:f6:92:25:da:21:e3:06:1a:2d:90:ed:68:0d:e4:f3:af:ff: 57:53:b8:56:22:34:21:bb:09:ae:19:d2:2c:22:cd:c3:fd:45: 24:27:67:c8:79:b4:12:20:e1:15:3b:37:c5:3e:10:b2:80:72: ff:42:db:73:bf:42:a1:12:f2:c5:dd:43:dd:f6:43:1e:c9:77: 4d:f4:43:b4 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUbITJfPv0N+rI+8EAiVQgWAQf9eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDhaFw0yNzAxMDUyMDQ5MDhaMDMxMTAvBgNV BAMTKEZGRUNFRTU1MThDNzY0OTkwQkUxRTBBRjYzNkZENzcyMkIxNzNFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLnDVWch7ibhcoNgnSXtiMvpq gh6yyISNh/pNrI7+rssKhURUra/nWhVo7AAaznFhI9m/W52iMthOlUjpCC3nUqSb /gG3k4/h55twMrH4VejNDeKMJqm58i4V3GokoEGKdj9YinZrYT2METJdGSsCsaKT IkbJ2U7eEnojAyxmF/wrACWhmX4ShZ5pSGlhrJwxe7qFPuGylH/yjPOQg1WJH9VQ 0QCmv+2Hwjzfj/Gbx9UwLTOGXfT2KhX+m/a1um6MDpJV/zFpofIi/alxmdmEZKPn e1+Xq75JOAJL1TBi8VPygCXqEHGRpkLwrwpf3MyV6TVL4MDwN9DVGgfSundxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU/+zuVRjHZJkL4eCvY2/XcisXPhswHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QIDANBgkqhkiG9w0BAQsFAAOCAQEAAcRNVLbj+R2GdkY1k+qTC+5M asdb9rRx73XyNut27oEUgW1kASM6izltgZ/GEbPyX5y5vDINLKalJiGu4OnLwiv5 67PU+dC+4800NTz/OobNBxbZ9WR0UUh1LXg/mHSkYH7l3huSBE74u9ihwl3A2BAt JZ2b8PkkXUWJUpxlTRZBDHnERxdVAIXN8wZawAaBU+PoyqkJjCSxMvL07+JekFwG Z6eutRHAsN5xgi9dhLqo8lpt9vaSJdoh4wYaLZDtaA3k86//V1O4ViI0IbsJrhnS LCLNw/1FJCdnyHm0EiDhFTs3xT4QsoBy/0Lbc79CoRLyxd1D3fZDHsl3TfRDtA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client