This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323530303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323530303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: FvjBn00/RHCxnQqxoXyyG1QId4cXGh4pjcRVCO8rRvg= Subject key identifier: C1:A4:4C:D6:AF:4E:E2:71:56:EC:EA:A6:9A:98:DF:0D:DD:03:E6:15 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 366FB1B525376D8A94AE134F4F0D69A699202021 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323530303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:48:57 +0000 ROA not before: Tue 06 Jan 2026 20:43:57 +0000 ROA not after: Tue 05 Jan 2027 20:48:57 +0000 asID: 273072 IP address blocks: 2803:cf90:2500::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6f:b1:b5:25:37:6d:8a:94:ae:13:4f:4f:0d:69:a6:99:20:20:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:43:57 2026 GMT Not After : Jan 5 20:48:57 2027 GMT Subject: CN=C1A44CD6AF4EE27156ECEAA69A98DF0DDD03E615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:13:c0:bf:0e:98:b0:af:f7:0e:8b:92:0f: 1b:b6:b2:d0:f5:6a:70:25:fc:ee:df:55:fc:05:c9: 05:db:60:34:df:ee:c1:4d:1c:7c:f6:72:a2:ed:e3: bb:11:c8:fb:be:8d:56:2b:a9:a2:d3:0c:17:ff:05: 3b:d0:43:86:57:5b:2f:1e:3b:aa:99:00:6a:a5:8b: e2:7d:2f:ea:ea:52:09:fb:9d:fb:16:43:18:cd:72: 65:1e:e3:6e:a5:fb:27:f3:d4:0f:da:d2:c3:b5:0e: 1f:52:1e:ae:b9:68:43:89:42:79:ed:9d:b4:d0:c9: 9e:57:80:bf:5a:59:6b:ce:e0:99:dc:a6:a4:54:f5: e9:1b:c0:52:7f:e3:76:f3:c1:d0:6a:25:ab:e8:04: 6b:42:b9:ab:42:96:27:09:d2:5d:38:43:98:94:54: 77:34:6e:a0:b9:69:a3:8a:55:ee:46:1e:e2:22:7b: 8c:5a:c6:4f:37:5b:c3:88:1c:f0:2b:2d:57:a6:d0: 90:3d:6d:09:7a:b7:c6:35:f9:ed:fd:18:ab:13:aa: 08:67:81:e1:05:56:c5:5c:52:31:75:9c:ef:2a:81: f9:91:e8:ad:aa:1b:52:bb:a7:e4:99:05:3f:28:aa: cb:ea:fb:73:17:16:35:d5:58:cc:a1:69:18:60:83: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:4C:D6:AF:4E:E2:71:56:EC:EA:A6:9A:98:DF:0D:DD:03:E6:15 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323530303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2500::/40 Signature Algorithm: sha256WithRSAEncryption ac:6b:77:63:90:3c:78:4c:7d:8b:87:18:ac:46:4e:c3:f9:26: 42:bf:a9:cc:a0:89:ff:ce:76:ae:65:08:d5:f3:85:b8:15:12: 39:58:43:82:d5:10:f5:69:a5:7c:fd:4a:0d:03:de:bf:b7:83: a4:55:8b:94:1d:fa:81:a6:b0:71:45:50:33:48:8a:d4:28:f8: 39:cc:a8:19:03:db:3b:cb:19:fb:ef:d6:5f:c0:e6:3d:cf:07: 5e:ea:f7:bd:ed:d2:64:02:76:65:08:50:1e:89:74:a5:02:2c: fb:42:f4:98:f5:ab:8f:de:b8:dc:9a:40:e1:aa:a2:e1:53:6f: e1:c6:2a:b9:1b:8a:b8:0e:1d:92:4e:4c:d7:d4:07:6c:c3:b5: 06:a2:74:8a:53:6a:64:bf:cd:d4:1a:0f:7c:2a:a4:ca:bc:c8: be:07:e4:a8:1c:33:f0:dc:6b:67:b5:1b:31:48:08:c2:6d:ab: 7a:da:71:3a:07:f8:67:df:ee:05:d0:c7:17:f7:7f:9e:be:48: 6c:e6:08:28:96:c0:31:00:cc:90:ba:1c:47:2c:8e:6b:47:04: 4e:cb:a5:97:7f:e8:31:e6:03:38:b4:89:ee:9a:78:64:a8:31: 68:7b:10:0c:0d:46:bd:a9:af:55:2d:77:9b:27:74:2d:31:38: f6:11:48:c5 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNm+xtSU3bYqUrhNPTw1pppkgICEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQzNTdaFw0yNzAxMDUyMDQ4NTdaMDMxMTAvBgNV BAMTKEMxQTQ0Q0Q2QUY0RUUyNzE1NkVDRUFBNjlBOThERjBEREQwM0U2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJdRPAvw6YsK/3DouSDxu2stD1 anAl/O7fVfwFyQXbYDTf7sFNHHz2cqLt47sRyPu+jVYrqaLTDBf/BTvQQ4ZXWy8e O6qZAGqli+J9L+rqUgn7nfsWQxjNcmUe426l+yfz1A/a0sO1Dh9SHq65aEOJQnnt nbTQyZ5XgL9aWWvO4JncpqRU9ekbwFJ/43bzwdBqJavoBGtCuatClicJ0l04Q5iU VHc0bqC5aaOKVe5GHuIie4xaxk83W8OIHPArLVem0JA9bQl6t8Y1+e39GKsTqghn geEFVsVcUjF1nO8qgfmR6K2qG1K7p+SZBT8oqsvq+3MXFjXVWMyhaRhggyDHAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUwaRM1q9O4nFW7OqmmpjfDd0D5hUwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QJTANBgkqhkiG9w0BAQsFAAOCAQEArGt3Y5A8eEx9i4cYrEZOw/km Qr+pzKCJ/852rmUI1fOFuBUSOVhDgtUQ9WmlfP1KDQPev7eDpFWLlB36gaawcUVQ M0iK1Cj4OcyoGQPbO8sZ++/WX8DmPc8HXur3ve3SZAJ2ZQhQHol0pQIs+0L0mPWr j9643JpA4aqi4VNv4cYquRuKuA4dkk5M19QHbMO1BqJ0ilNqZL/N1BoPfCqkyrzI vgfkqBwz8NxrZ7UbMUgIwm2retpxOgf4Z9/uBdDHF/d/nr5IbOYIKJbAMQDMkLoc RyyOa0cETsull3/oMeYDOLSJ7pp4ZKgxaHsQDA1GvamvVS13myd0LTE49hFIxQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client