This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: IKKcXmfuLLCt9tY4XK7Ah25IiujDXx2s/vPJRzA+XAs= Subject key identifier: 68:0C:28:57:AC:90:0B:72:FC:10:5A:EB:51:6B:BB:E2:5A:06:D8:98 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 416E309CB6112DC939DA2C4DC77F9A711E3776E5 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:18 +0000 ROA not before: Tue 06 Jan 2026 20:44:18 +0000 ROA not after: Tue 05 Jan 2027 20:49:18 +0000 asID: 273072 IP address blocks: 2803:cf90:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6e:30:9c:b6:11:2d:c9:39:da:2c:4d:c7:7f:9a:71:1e:37:76:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:18 2026 GMT Not After : Jan 5 20:49:18 2027 GMT Subject: CN=680C2857AC900B72FC105AEB516BBBE25A06D898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:56:b6:28:5c:8e:d4:cd:02:23:50:97:33: 4d:83:85:d8:a8:0a:d3:56:4a:ba:47:12:39:8a:a0: 30:57:ee:22:06:25:6d:0a:b6:4f:01:69:5b:90:d8: 8a:ef:9b:38:73:64:74:52:d2:35:93:c0:b3:72:35: b8:8c:42:71:bc:18:a6:4d:d7:d0:6d:1c:cf:86:47: 95:d6:5b:8f:e1:49:b8:72:85:ca:47:ac:6b:0c:7e: 0c:68:dc:d0:91:cd:d7:6d:b3:43:5b:2a:d6:af:21: 62:e0:87:2f:14:1f:a3:b9:13:13:57:d4:32:c1:c3: 38:ba:ad:e4:11:85:5c:6e:0c:ef:f3:6c:ce:76:46: 03:a0:1f:87:ef:bc:83:73:52:0a:73:51:5a:69:3a: 69:db:11:2a:e2:4e:ef:7e:ba:ae:ca:7d:a6:67:5f: 4d:3b:3c:89:6f:22:ba:2d:f1:ff:25:fd:a1:d8:ee: f0:92:4a:69:2d:b7:5e:65:e4:db:22:8b:37:4c:00: d1:1b:6c:26:46:16:d1:e6:70:75:c9:09:84:0f:5a: 32:27:68:ed:09:25:a1:bf:67:2c:c0:5e:b7:d7:8f: 45:d1:b4:56:a9:52:a6:49:97:6a:b7:36:b9:33:fe: e6:6a:71:83:a1:55:d3:2f:d8:ac:0e:7a:bd:af:0f: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:28:57:AC:90:0B:72:FC:10:5A:EB:51:6B:BB:E2:5A:06:D8:98 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2200::/40 Signature Algorithm: sha256WithRSAEncryption 34:8f:ad:48:1e:65:3e:f9:9d:5f:bf:f8:a3:59:ae:af:27:73: 7e:fe:5d:6d:c9:73:ca:44:83:83:18:92:1c:4c:d2:ce:af:a4: e9:b4:c3:19:f8:55:c2:69:13:cf:73:4d:7b:ef:a1:7f:c4:70: 0b:14:0c:94:6f:b6:b6:43:7f:b0:b2:15:3f:ab:61:1a:ca:60: 22:06:bb:d0:d0:c1:72:1b:00:e3:88:8c:79:e0:83:d9:b6:92: 08:95:34:b8:3f:fe:91:5f:b4:97:0f:f0:5b:6c:96:b8:5b:82: 05:d1:26:47:4d:2e:30:2b:e5:18:69:d5:e5:46:12:9e:96:a7: 66:69:48:4c:b3:e7:d8:37:1d:f5:3b:e0:ca:53:44:75:69:5a: 2c:61:ea:3b:20:97:c8:5d:80:20:ca:e3:a4:37:6c:18:27:40: 6a:73:96:0f:a0:c2:be:29:66:c2:6e:41:d0:f0:5d:7b:ac:f4: 8e:b8:8e:9a:a2:dc:c6:71:ef:2f:71:85:d4:da:8a:0e:80:e6: 50:04:ac:04:eb:76:ba:0f:ae:14:55:42:e3:ea:e5:17:f2:2e: f8:25:36:4e:7e:2d:72:7d:33:b6:d5:fb:15:8e:59:a4:66:d6: f2:f7:7b:5f:7d:4a:ad:c5:57:21:9d:1c:58:64:a7:fa:93:02: 5e:39:a8:c7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQW4wnLYRLck52ixNx3+acR43duUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MThaFw0yNzAxMDUyMDQ5MThaMDMxMTAvBgNV BAMTKDY4MEMyODU3QUM5MDBCNzJGQzEwNUFFQjUxNkJCQkUyNUEwNkQ4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiVa2KFyO1M0CI1CXM02Dhdio CtNWSrpHEjmKoDBX7iIGJW0Ktk8BaVuQ2IrvmzhzZHRS0jWTwLNyNbiMQnG8GKZN 19BtHM+GR5XWW4/hSbhyhcpHrGsMfgxo3NCRzddts0NbKtavIWLghy8UH6O5ExNX 1DLBwzi6reQRhVxuDO/zbM52RgOgH4fvvINzUgpzUVppOmnbESriTu9+uq7KfaZn X007PIlvIrot8f8l/aHY7vCSSmktt15l5NsiizdMANEbbCZGFtHmcHXJCYQPWjIn aO0JJaG/ZyzAXrfXj0XRtFapUqZJl2q3Nrkz/uZqcYOhVdMv2KwOer2vD3ZrAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUaAwoV6yQC3L8EFrrUWu74loG2JgwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QIjANBgkqhkiG9w0BAQsFAAOCAQEANI+tSB5lPvmdX7/4o1murydz fv5dbclzykSDgxiSHEzSzq+k6bTDGfhVwmkTz3NNe++hf8RwCxQMlG+2tkN/sLIV P6thGspgIga70NDBchsA44iMeeCD2baSCJU0uD/+kV+0lw/wW2yWuFuCBdEmR00u MCvlGGnV5UYSnpanZmlITLPn2Dcd9TvgylNEdWlaLGHqOyCXyF2AIMrjpDdsGCdA anOWD6DCvilmwm5B0PBde6z0jriOmqLcxnHvL3GF1NqKDoDmUASsBOt2ug+uFFVC 4+rlF/Iu+CU2Tn4tcn0zttX7FY5ZpGbW8vd7X31KrcVXIZ0cWGSn+pMCXjmoxw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:04 2026 by rpki-client