This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: pJjFz2y7+JXbPMtRcdWq7e/8yu7tucj8gawpnDRHSSE= Subject key identifier: D9:9E:AB:6E:5E:B0:66:00:2B:32:A7:7D:3A:B8:E1:C9:25:CF:57:56 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 6DA08432A9FFF0F30C11F773A574925D8AEBD513 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:04 +0000 ROA not before: Tue 06 Jan 2026 20:44:04 +0000 ROA not after: Tue 05 Jan 2027 20:49:04 +0000 asID: 273072 IP address blocks: 2803:cf90:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a0:84:32:a9:ff:f0:f3:0c:11:f7:73:a5:74:92:5d:8a:eb:d5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:04 2026 GMT Not After : Jan 5 20:49:04 2027 GMT Subject: CN=D99EAB6E5EB066002B32A77D3AB8E1C925CF5756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:6f:9b:16:53:13:1a:f7:8b:1b:ea:cf:5c: 7a:95:6d:7d:89:b5:f1:d8:e4:a6:92:16:b2:41:86: 0e:5f:a4:ba:a2:d3:61:f9:7d:01:c0:ab:c7:6f:ef: 6d:cb:23:91:5d:f4:d8:68:cf:38:32:26:3f:fe:84: 67:f3:64:50:1c:ed:5d:a8:ea:af:3b:66:4d:5c:37: fa:cd:dc:41:97:ec:b0:f8:c3:50:79:fd:64:33:fe: 26:b9:cb:8f:f0:fd:de:7f:0d:9f:0b:bb:fe:c0:69: 85:1f:1c:1d:20:7d:7b:81:34:d5:af:22:ca:c9:97: 36:5e:b0:99:ca:3c:ec:7d:a2:88:ff:58:ea:72:5d: 64:c8:d9:0e:ac:46:41:d6:e5:4a:77:39:17:b9:2d: 05:57:79:a3:1b:b4:e7:4a:ea:23:49:29:5f:82:9d: 18:ff:35:88:da:c5:9f:9d:31:31:0b:ed:7e:94:36: 38:51:9a:dc:77:d2:75:e6:75:74:de:a0:73:bf:0f: 07:c6:b1:7c:17:db:96:c2:1b:62:b3:e4:e1:87:23: e7:f5:fe:2e:13:e4:67:05:21:41:b5:88:9c:e3:ac: b1:f7:95:c6:b4:25:74:00:cf:69:b1:11:ae:e4:7f: d9:21:61:0b:71:e6:fa:97:5e:ee:60:40:ec:45:a1: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:AB:6E:5E:B0:66:00:2B:32:A7:7D:3A:B8:E1:C9:25:CF:57:56 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2800::/40 Signature Algorithm: sha256WithRSAEncryption 6a:f2:b4:ed:fd:00:22:d2:2b:86:ca:18:de:bf:53:be:f0:27: 9a:23:af:31:e8:2e:be:eb:e8:64:fb:7b:c9:12:cc:f0:89:9b: 7f:c9:ef:1a:fb:cc:27:13:97:17:61:33:ee:26:5c:36:b8:ec: 99:08:f2:f8:fd:ee:f3:10:0c:5a:f1:ea:bc:71:0a:55:99:aa: 5b:b4:59:d2:21:b1:1f:1d:f9:77:80:80:da:8c:1a:91:6a:e2: 04:d6:7c:15:bb:8d:ec:14:ce:fc:34:55:65:84:95:d0:e8:d5: 87:78:64:ed:0c:42:63:9e:a0:9b:ed:df:6e:9e:e6:99:70:9f: 5c:9d:dc:1b:80:c3:f1:05:92:27:e3:12:d4:ce:08:82:45:85: a4:92:e1:16:bb:04:08:e4:e0:c4:65:55:ad:8b:d2:f4:30:fd: 1b:91:17:0b:75:f9:fe:68:96:07:bc:92:91:00:e6:90:6c:a4: c0:d3:b9:6a:3b:c3:58:8b:9f:81:86:21:7e:8c:d1:d8:71:0a: 76:80:3e:63:42:ca:ee:d9:ac:fd:63:18:cf:44:ac:c2:66:82: 49:2c:2d:ba:aa:ff:b2:9c:1b:dd:84:f5:3d:66:22:ba:1d:38: 6d:64:2b:1e:ce:c1:05:26:d5:2f:99:ed:2a:aa:1b:f8:6a:b2: 3b:8b:a8:53 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUbaCEMqn/8PMMEfdzpXSSXYrr1RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDRaFw0yNzAxMDUyMDQ5MDRaMDMxMTAvBgNV BAMTKEQ5OUVBQjZFNUVCMDY2MDAyQjMyQTc3RDNBQjhFMUM5MjVDRjU3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Mm+bFlMTGveLG+rPXHqVbX2J tfHY5KaSFrJBhg5fpLqi02H5fQHAq8dv723LI5Fd9NhozzgyJj/+hGfzZFAc7V2o 6q87Zk1cN/rN3EGX7LD4w1B5/WQz/ia5y4/w/d5/DZ8Lu/7AaYUfHB0gfXuBNNWv IsrJlzZesJnKPOx9ooj/WOpyXWTI2Q6sRkHW5Up3ORe5LQVXeaMbtOdK6iNJKV+C nRj/NYjaxZ+dMTEL7X6UNjhRmtx30nXmdXTeoHO/DwfGsXwX25bCG2Kz5OGHI+f1 /i4T5GcFIUG1iJzjrLH3lca0JXQAz2mxEa7kf9khYQtx5vqXXu5gQOxFobPJAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU2Z6rbl6wZgArMqd9OrjhySXPV1YwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz ODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QKDANBgkqhkiG9w0BAQsFAAOCAQEAavK07f0AItIrhsoY3r9TvvAn miOvMeguvuvoZPt7yRLM8Imbf8nvGvvMJxOXF2Ez7iZcNrjsmQjy+P3u8xAMWvHq vHEKVZmqW7RZ0iGxHx35d4CA2owakWriBNZ8FbuN7BTO/DRVZYSV0OjVh3hk7QxC Y56gm+3fbp7mmXCfXJ3cG4DD8QWSJ+MS1M4IgkWFpJLhFrsECOTgxGVVrYvS9DD9 G5EXC3X5/miWB7ySkQDmkGykwNO5ajvDWIufgYYhfozR2HEKdoA+Y0LK7tms/WMY z0SswmaCSSwtuqr/spwb3YT1PWYiuh04bWQrHs7BBSbVL5ntKqob+GqyO4uoUw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client