This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: YyIxI3rogKKzPkxSnlslSx8eYotLEFy8D3Ny3X6rHng= Subject key identifier: E8:05:04:9A:91:FB:CD:CE:A7:1D:50:3E:30:60:74:04:A3:4D:28:EE Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 4E687E236B86ADE482CC0A3FFFA8FFC7EBB03E31 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:48:57 +0000 ROA not before: Tue 06 Jan 2026 20:43:57 +0000 ROA not after: Tue 05 Jan 2027 20:48:57 +0000 asID: 273072 IP address blocks: 2803:cf90:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:68:7e:23:6b:86:ad:e4:82:cc:0a:3f:ff:a8:ff:c7:eb:b0:3e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:43:57 2026 GMT Not After : Jan 5 20:48:57 2027 GMT Subject: CN=E805049A91FBCDCEA71D503E30607404A34D28EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:25:02:90:1f:7d:4d:5f:ad:ca:5b:40:b6: 41:85:55:8e:f8:61:f0:f9:ef:c4:0d:6a:05:30:f2: 88:11:6a:70:fe:75:59:4d:b3:35:2c:7e:d8:d0:05: 7e:f1:57:3c:f6:80:40:11:f3:9e:d4:68:cc:46:98: da:9e:4a:f9:b5:dd:09:84:f9:46:51:9c:c3:92:83: e2:0f:6a:e7:dc:9d:d6:36:01:64:80:71:ed:df:be: f4:b5:1f:24:b8:8d:d1:82:bf:f0:b6:f8:00:35:6e: 8f:38:2b:46:ab:0e:60:75:aa:18:78:98:c4:70:5f: 46:84:53:67:12:d8:35:36:f5:7c:63:a1:2e:f9:1c: 50:db:6e:fb:b6:93:91:4a:32:30:23:5b:1b:46:0f: 25:3b:c3:d6:49:eb:88:f8:44:60:8e:f6:21:a7:e6: 57:a8:4d:1d:c6:90:aa:4a:21:cf:d3:37:01:f8:fe: 51:54:5a:54:af:6f:e4:f1:ef:b0:91:08:90:ad:77: 46:d7:55:3c:9b:06:fd:1f:62:4a:c6:7b:c5:83:43: 38:66:27:e3:fa:a2:67:80:a6:5c:55:72:ce:2c:ff: 4d:6b:1e:02:c8:cc:c6:1a:1d:85:91:1f:9a:16:5c: eb:a5:27:6e:cf:44:f4:00:3f:b7:92:1d:2c:36:69: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:05:04:9A:91:FB:CD:CE:A7:1D:50:3E:30:60:74:04:A3:4D:28:EE X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2600::/40 Signature Algorithm: sha256WithRSAEncryption 00:fc:ea:c0:99:8b:15:e6:89:a3:92:f3:e7:00:e3:e0:35:6a: ba:2c:bf:97:2c:95:e8:6c:1d:e0:91:9c:d9:53:e8:4e:41:d9: 7b:a7:41:ff:95:f1:be:fc:c5:a1:53:99:ae:9a:bc:53:3f:90: 49:3f:f5:a3:9e:85:4e:c4:ac:b8:e4:97:10:47:5e:18:7d:44: 88:c5:9d:2e:90:88:d3:80:8c:fa:77:5b:97:06:e2:a9:67:98: 2c:ba:25:f2:6d:8e:71:c9:6e:17:58:d7:c1:9d:f6:28:80:2f: aa:83:d1:48:d9:8b:88:b1:3a:d4:5f:31:f6:fd:5d:54:7b:35: 76:4f:a5:04:47:01:1d:15:a2:8d:54:c0:7a:c5:9a:43:37:e7: 71:af:05:64:f1:6d:2b:3c:2d:1e:8f:43:ed:6e:b9:ad:99:84: 3e:62:4f:ce:a5:26:9d:80:4d:17:04:37:f8:04:13:39:4a:58: 30:00:48:68:2f:a2:46:da:b7:41:62:d7:ef:ce:d3:d8:d1:a1: 9b:bb:d8:04:ca:ff:8e:11:c1:86:41:e8:3d:36:b6:3f:b9:82: 3a:31:81:88:51:12:d1:54:1f:d3:c6:8f:66:e4:8c:fb:dc:7c: 98:b4:14:66:95:97:dd:cd:b1:a2:b6:2e:a3:5f:12:9b:ba:f0: b8:e7:cb:a6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTmh+I2uGreSCzAo//6j/x+uwPjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQzNTdaFw0yNzAxMDUyMDQ4NTdaMDMxMTAvBgNV BAMTKEU4MDUwNDlBOTFGQkNEQ0VBNzFENTAzRTMwNjA3NDA0QTM0RDI4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvCUCkB99TV+tyltAtkGFVY74 YfD578QNagUw8ogRanD+dVlNszUsftjQBX7xVzz2gEAR857UaMxGmNqeSvm13QmE +UZRnMOSg+IPaufcndY2AWSAce3fvvS1HyS4jdGCv/C2+AA1bo84K0arDmB1qhh4 mMRwX0aEU2cS2DU29XxjoS75HFDbbvu2k5FKMjAjWxtGDyU7w9ZJ64j4RGCO9iGn 5leoTR3GkKpKIc/TNwH4/lFUWlSvb+Tx77CRCJCtd0bXVTybBv0fYkrGe8WDQzhm J+P6omeAplxVcs4s/01rHgLIzMYaHYWRH5oWXOulJ27PRPQAP7eSHSw2aUMfAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU6AUEmpH7zc6nHVA+MGB0BKNNKO4wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QJjANBgkqhkiG9w0BAQsFAAOCAQEAAPzqwJmLFeaJo5Lz5wDj4DVq uiy/lyyV6Gwd4JGc2VPoTkHZe6dB/5XxvvzFoVOZrpq8Uz+QST/1o56FTsSsuOSX EEdeGH1EiMWdLpCI04CM+ndblwbiqWeYLLol8m2OccluF1jXwZ32KIAvqoPRSNmL iLE61F8x9v1dVHs1dk+lBEcBHRWijVTAesWaQzfnca8FZPFtKzwtHo9D7W65rZmE PmJPzqUmnYBNFwQ3+AQTOUpYMABIaC+iRtq3QWLX787T2NGhm7vYBMr/jhHBhkHo PTa2P7mCOjGBiFES0VQf08aPZuSM+9x8mLQUZpWX3c2xorYuo18Sm7rwuOfLpg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:06 2026 by rpki-client