This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: UXNSm8WKse5AxQYgYOPD5cBQ2y9sLSOX1HyXZhUaDUA= Subject key identifier: 81:FB:D9:80:1A:3C:8A:E7:C2:8E:39:6E:72:D5:73:98:3A:E8:8A:85 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 7E96F8DC77406A401F3B74B85DCC23C26F41FECC Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:14 +0000 ROA not before: Tue 06 Jan 2026 20:44:14 +0000 ROA not after: Tue 05 Jan 2027 20:49:14 +0000 asID: 273072 IP address blocks: 2803:cf90:2300::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:96:f8:dc:77:40:6a:40:1f:3b:74:b8:5d:cc:23:c2:6f:41:fe:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:14 2026 GMT Not After : Jan 5 20:49:14 2027 GMT Subject: CN=81FBD9801A3C8AE7C28E396E72D573983AE88A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:ba:1e:c2:63:59:93:f0:e2:61:dc:1a:65: f4:00:b0:8e:63:9a:c6:80:0a:ec:bd:26:19:41:d0: cc:d9:cf:5a:46:04:76:c5:6b:0b:ff:10:1f:82:25: d7:a9:45:c7:03:e5:aa:01:c4:b0:48:1d:01:7c:f8: 35:2e:49:bd:9c:b0:8e:f3:b1:fd:58:5c:ec:35:90: 86:35:9e:63:06:d0:ab:4b:ce:a2:63:53:c5:05:09: 5e:f5:f9:c4:cb:01:3c:19:ad:bc:59:66:ff:02:08: 97:84:be:4d:3a:31:dc:89:96:9b:66:c2:68:3e:ba: ef:ae:60:7c:41:90:9e:c8:50:9e:df:61:a9:67:b6: 13:fd:d8:a5:95:7a:76:72:fb:59:76:00:d8:fc:b2: c7:c9:8d:97:d4:68:54:a7:df:37:be:dd:f1:47:d4: 03:e7:7b:13:89:35:10:f9:e8:c2:67:fb:4b:4d:4f: 01:92:ab:8c:b2:9e:e5:60:27:1a:cc:b7:73:19:7f: 2b:bf:70:de:c9:e4:86:79:b6:6e:c1:1d:fc:7b:0f: 87:de:f0:a1:6b:19:53:e7:6f:50:2d:df:3a:36:16: f1:9b:ba:08:75:d7:e6:21:e0:74:6f:12:b1:9d:c6: ae:28:47:50:4f:92:8d:80:df:77:b9:1c:bb:b8:de: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FB:D9:80:1A:3C:8A:E7:C2:8E:39:6E:72:D5:73:98:3A:E8:8A:85 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2300::/40 Signature Algorithm: sha256WithRSAEncryption 36:82:63:a8:be:ad:18:c7:11:2f:2f:4f:91:da:38:9e:59:79: 12:77:5e:6e:fc:aa:8a:66:4a:67:ae:25:77:0c:6c:a0:6e:7c: 59:64:55:a0:e6:9d:91:d3:85:6d:c1:ec:da:9e:d0:73:85:0a: cf:c8:4b:11:84:97:df:71:9d:99:ef:a1:c4:f1:bb:4a:88:ca: 37:eb:11:a0:30:fd:8a:2b:52:bc:d5:0e:e2:14:96:46:b3:db: 41:92:b5:50:29:d5:d7:7a:21:3f:9d:7c:ba:f6:d2:a1:eb:b6: 47:0a:b0:24:a8:ac:f8:6c:78:98:ef:7d:f7:81:a6:76:cb:a3: 1e:a6:aa:80:2d:cb:29:54:57:3f:b2:2e:0a:04:d5:7c:9f:4a: 4b:62:03:70:f9:66:68:2d:aa:c9:fe:95:3c:c8:1e:66:b6:e0: b5:0a:8e:fd:93:87:65:59:c3:40:b4:cc:20:db:de:01:c7:34: 37:5b:af:2c:53:7e:7d:e8:3e:6f:55:22:52:94:81:05:aa:ae: 9a:2b:58:f3:f3:82:aa:85:0b:04:c7:e7:f3:ed:33:4b:a8:08: 32:74:42:86:7e:a8:86:dd:f0:e1:f2:c5:da:03:67:4a:15:ad: ba:4c:24:07:a5:30:9f:6c:b4:ce:f4:57:09:8b:1c:24:71:b0: f2:f3:12:7a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfpb43HdAakAfO3S4Xcwjwm9B/swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTRaFw0yNzAxMDUyMDQ5MTRaMDMxMTAvBgNV BAMTKDgxRkJEOTgwMUEzQzhBRTdDMjhFMzk2RTcyRDU3Mzk4M0FFODhBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5roewmNZk/DiYdwaZfQAsI5j msaACuy9JhlB0MzZz1pGBHbFawv/EB+CJdepRccD5aoBxLBIHQF8+DUuSb2csI7z sf1YXOw1kIY1nmMG0KtLzqJjU8UFCV71+cTLATwZrbxZZv8CCJeEvk06MdyJlptm wmg+uu+uYHxBkJ7IUJ7fYalnthP92KWVenZy+1l2ANj8ssfJjZfUaFSn3ze+3fFH 1APnexOJNRD56MJn+0tNTwGSq4yynuVgJxrMt3MZfyu/cN7J5IZ5tm7BHfx7D4fe 8KFrGVPnb1At3zo2FvGbugh11+Yh4HRvErGdxq4oR1BPko2A33e5HLu43j9xAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUgfvZgBo8iufCjjluctVzmDroioUwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QIzANBgkqhkiG9w0BAQsFAAOCAQEANoJjqL6tGMcRLy9Pkdo4nll5 EndebvyqimZKZ64ldwxsoG58WWRVoOadkdOFbcHs2p7Qc4UKz8hLEYSX33Gdme+h xPG7SojKN+sRoDD9iitSvNUO4hSWRrPbQZK1UCnV13ohP518uvbSoeu2RwqwJKis +Gx4mO9994GmdsujHqaqgC3LKVRXP7IuCgTVfJ9KS2IDcPlmaC2qyf6VPMgeZrbg tQqO/ZOHZVnDQLTMINveAcc0N1uvLFN+feg+b1UiUpSBBaqumitY8/OCqoULBMfn 8+0zS6gIMnRChn6oht3w4fLF2gNnShWtukwkB6Uwn2y0zvRXCYscJHGw8vMSeg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:05 2026 by rpki-client