This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323730303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323730303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: iJzHW1ipPK5Mjhpi5P+YhwjXLa3LUmfKjxteMqDsOEE= Subject key identifier: 48:A8:65:14:AF:C0:B7:27:6F:8B:AA:D5:8C:43:DE:54:7E:46:BE:29 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 740D9BF5D5223D10482AD4715A28E0B0F8372996 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323730303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:14 +0000 ROA not before: Tue 06 Jan 2026 20:44:14 +0000 ROA not after: Tue 05 Jan 2027 20:49:14 +0000 asID: 273072 IP address blocks: 2803:cf90:2700::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:9b:f5:d5:22:3d:10:48:2a:d4:71:5a:28:e0:b0:f8:37:29:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:14 2026 GMT Not After : Jan 5 20:49:14 2027 GMT Subject: CN=48A86514AFC0B7276F8BAAD58C43DE547E46BE29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:fd:45:2a:be:02:07:11:aa:c5:b4:04:2f: 15:ff:da:cb:6e:bb:93:29:71:cc:75:74:60:c4:59: 25:69:c9:dc:d1:ce:bc:fa:f1:72:ce:25:e2:8a:16: 38:cc:87:ec:f7:21:72:40:f4:17:1e:df:68:4d:e1: ed:f9:ef:70:d7:70:5e:e1:7d:94:43:ce:f8:b2:c5: da:c0:fd:88:26:a8:ce:41:22:c1:f7:7f:22:79:fe: 2d:43:fa:36:fc:58:d1:7f:94:1a:a7:e4:17:26:68: aa:07:71:05:3d:d9:07:fd:3e:3a:fa:4a:8f:81:4a: eb:1e:87:86:e1:2c:3e:69:77:77:a5:17:0d:b5:cd: e5:c9:b1:e5:57:89:d0:63:43:05:ba:b7:f2:34:52: 41:2f:4d:a2:17:99:7c:00:6f:46:7e:9a:08:81:39: 3b:cc:c3:cb:29:87:8d:34:5d:f8:fb:be:a3:c1:c6: 9b:ac:8a:53:c3:05:9e:66:90:b3:39:d5:75:e8:c5: 55:45:12:12:11:b5:67:a6:8b:73:95:76:32:7d:be: f0:71:62:fe:d5:41:73:c7:03:70:c9:01:4f:e2:62: d5:3d:12:76:af:e3:01:83:69:05:3c:63:d0:0a:7a: 9e:88:f0:64:92:04:43:c1:32:b5:ab:18:1f:8b:87: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A8:65:14:AF:C0:B7:27:6F:8B:AA:D5:8C:43:DE:54:7E:46:BE:29 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323730303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2700::/40 Signature Algorithm: sha256WithRSAEncryption 93:12:d3:f4:02:ee:45:d1:d4:00:bb:ff:cf:4c:02:a9:1a:fc: 9e:b7:82:b0:f7:21:de:6d:fc:d8:e2:cf:29:5a:99:f0:55:48: 5d:9e:7d:e5:b9:84:61:3c:48:89:eb:17:91:3d:b5:ef:8d:1b: fc:46:e6:00:11:d8:ae:93:bc:ea:ec:ba:ca:9f:aa:8a:66:a5: 5e:14:e0:9f:53:69:b7:9b:0c:ed:68:b3:17:90:ea:09:a9:cd: 17:09:3d:e0:fb:fd:2d:3b:53:1f:b6:43:a2:e9:5e:53:4c:9e: ff:58:59:00:21:08:c0:b7:75:71:c1:84:3e:c0:12:df:1c:eb: 01:f8:cf:b9:ed:77:97:90:d2:30:98:9e:03:c7:07:cf:b4:bc: af:09:58:1a:c5:79:4e:71:4f:70:ac:5a:e9:71:65:b0:4d:0e: 41:14:01:f5:88:30:46:f5:33:44:99:32:d3:57:2f:c0:f8:dd: c2:fe:bf:3d:7a:53:04:a2:c7:ad:ec:b0:fb:0a:b5:02:31:09: c5:25:b8:41:2e:fd:4b:e5:b5:68:0a:d0:b7:91:d6:72:7c:5f: 4e:b2:56:51:5d:13:b2:f0:dc:53:e4:0a:76:4c:a9:14:b2:fc: 1d:8f:ca:cd:92:85:60:a2:b7:dd:45:55:f2:ca:ea:aa:b2:53: 2e:f8:fa:94 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUdA2b9dUiPRBIKtRxWijgsPg3KZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTRaFw0yNzAxMDUyMDQ5MTRaMDMxMTAvBgNV BAMTKDQ4QTg2NTE0QUZDMEI3Mjc2RjhCQUFENThDNDNERTU0N0U0NkJFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPf1FKr4CBxGqxbQELxX/2stu u5Mpccx1dGDEWSVpydzRzrz68XLOJeKKFjjMh+z3IXJA9Bce32hN4e3573DXcF7h fZRDzviyxdrA/YgmqM5BIsH3fyJ5/i1D+jb8WNF/lBqn5BcmaKoHcQU92Qf9Pjr6 So+BSuseh4bhLD5pd3elFw21zeXJseVXidBjQwW6t/I0UkEvTaIXmXwAb0Z+mgiB OTvMw8sph400Xfj7vqPBxpusilPDBZ5mkLM51XXoxVVFEhIRtWemi3OVdjJ9vvBx Yv7VQXPHA3DJAU/iYtU9Enav4wGDaQU8Y9AKep6I8GSSBEPBMrWrGB+Lh0KNAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUSKhlFK/Atydvi6rVjEPeVH5GvikwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz NzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QJzANBgkqhkiG9w0BAQsFAAOCAQEAkxLT9ALuRdHUALv/z0wCqRr8 nreCsPch3m382OLPKVqZ8FVIXZ595bmEYTxIiesXkT21740b/EbmABHYrpO86uy6 yp+qimalXhTgn1Npt5sM7WizF5DqCanNFwk94Pv9LTtTH7ZDouleU0ye/1hZACEI wLd1ccGEPsAS3xzrAfjPue13l5DSMJieA8cHz7S8rwlYGsV5TnFPcKxa6XFlsE0O QRQB9YgwRvUzRJky01cvwPjdwv6/PXpTBKLHreyw+wq1AjEJxSW4QS79S+W1aArQ t5HWcnxfTrJWUV0TsvDcU+QKdkypFLL8HY/KzZKFYKK33UVV8srqqrJTLvj6lA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client