This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: R6MbBDVJg6q81oMs/pX8RcGqzMbN2eTqscl9rPfx6JQ= Subject key identifier: A7:EC:B4:A7:D2:58:23:5D:B1:1C:AE:78:98:E3:47:65:42:5F:C6:86 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 3BBC7C3B08804A72ABFDD6C07C66E7B743D070BE Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:04 +0000 ROA not before: Tue 06 Jan 2026 20:44:04 +0000 ROA not after: Tue 05 Jan 2027 20:49:04 +0000 asID: 273072 IP address blocks: 2803:cf90:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bc:7c:3b:08:80:4a:72:ab:fd:d6:c0:7c:66:e7:b7:43:d0:70:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:04 2026 GMT Not After : Jan 5 20:49:04 2027 GMT Subject: CN=A7ECB4A7D258235DB11CAE7898E34765425FC686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:e8:aa:d7:f7:50:41:31:56:75:f7:9c:45: 7c:62:16:34:a9:17:16:88:88:1c:d7:53:38:35:ef: cf:00:01:5e:1b:24:ec:86:aa:a7:24:37:a8:ed:15: 73:80:c8:af:ed:e7:1a:20:60:35:d8:ec:82:08:ec: 70:31:8e:87:aa:85:c6:b2:9c:0c:7d:43:65:62:fd: 1a:3c:d4:a8:5e:a9:5f:88:a3:72:80:da:44:9f:2b: cb:9a:7c:ce:7d:a8:f5:ed:96:66:6c:64:31:4a:fa: a8:ff:8a:66:65:a3:ab:83:57:84:a7:08:bd:ad:1d: 27:76:d2:80:39:b9:f1:b0:ca:a5:96:75:6a:13:3c: 8e:8d:e7:56:76:de:62:8f:e1:53:72:22:d6:82:8d: ca:ca:24:dc:bb:03:2f:0e:ea:da:15:3d:4d:b2:25: ea:42:71:4d:b0:7b:30:e7:0a:0e:a3:78:a6:1e:f9: 75:c8:56:4c:a3:45:10:eb:fa:9b:69:01:50:f4:d9: ff:dd:a1:58:7f:1d:d6:48:33:c1:df:c1:aa:50:16: 44:7c:df:e5:32:c4:67:ab:60:13:68:92:6a:fd:c8: e3:64:63:27:ea:e7:25:63:19:74:d5:a5:3c:6d:b4: ea:fd:ec:a8:39:e2:60:f0:95:f9:1a:e9:76:72:d7: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:B4:A7:D2:58:23:5D:B1:1C:AE:78:98:E3:47:65:42:5F:C6:86 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2900::/40 Signature Algorithm: sha256WithRSAEncryption 8d:ea:40:40:2d:56:c9:95:31:bd:1a:8c:f0:d4:74:21:79:3b: eb:b6:5c:f7:1c:cc:4f:55:85:75:5b:68:70:74:26:d6:fd:f3: d4:ee:3a:03:42:a4:49:f3:7a:64:b6:c8:f1:96:00:9e:19:a7: d0:db:ae:82:dc:fc:68:a4:26:9e:d8:7e:41:7c:de:74:03:9e: 28:af:ca:5e:bc:59:bb:b2:6f:fc:2a:d8:85:08:09:92:e2:bf: 52:78:12:f1:f6:ce:be:c3:70:3c:fa:be:65:6f:19:ad:79:da: 21:eb:38:f7:0e:7b:11:b3:97:d8:b1:51:a3:e0:ca:16:17:2a: 03:99:70:ac:d8:bd:23:40:86:94:83:10:71:02:9a:63:38:6e: 5b:66:9c:e7:f6:8e:ab:69:43:c3:88:73:2f:d4:d6:62:18:0d: 23:ca:00:fa:ef:55:05:c9:29:ab:a4:c8:f7:f2:b9:43:5a:24: f3:72:a7:13:e6:82:df:1c:68:62:cd:f0:0b:1c:fc:5b:95:f1: 28:a1:15:cd:b3:83:ad:a8:89:c1:83:30:10:ca:7e:06:63:2a: 02:e9:40:46:dd:f0:58:28:de:a8:d5:a0:ea:e9:73:14:32:11: 32:3f:02:a2:e9:41:e2:6e:11:f5:5c:17:f6:ef:ee:43:5d:0f: 0c:97:69:d2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUO7x8OwiASnKr/dbAfGbnt0PQcL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDRaFw0yNzAxMDUyMDQ5MDRaMDMxMTAvBgNV BAMTKEE3RUNCNEE3RDI1ODIzNURCMTFDQUU3ODk4RTM0NzY1NDI1RkM2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6+iq1/dQQTFWdfecRXxiFjSp FxaIiBzXUzg1788AAV4bJOyGqqckN6jtFXOAyK/t5xogYDXY7III7HAxjoeqhcay nAx9Q2Vi/Ro81KheqV+Io3KA2kSfK8uafM59qPXtlmZsZDFK+qj/imZlo6uDV4Sn CL2tHSd20oA5ufGwyqWWdWoTPI6N51Z23mKP4VNyItaCjcrKJNy7Ay8O6toVPU2y JepCcU2wezDnCg6jeKYe+XXIVkyjRRDr+ptpAVD02f/doVh/HdZIM8HfwapQFkR8 3+UyxGerYBNokmr9yONkYyfq5yVjGXTVpTxttOr97Kg54mDwlfka6XZy11W1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUp+y0p9JYI12xHK54mONHZUJfxoYwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QKTANBgkqhkiG9w0BAQsFAAOCAQEAjepAQC1WyZUxvRqM8NR0IXk7 67Zc9xzMT1WFdVtocHQm1v3z1O46A0KkSfN6ZLbI8ZYAnhmn0Nuugtz8aKQmnth+ QXzedAOeKK/KXrxZu7Jv/CrYhQgJkuK/UngS8fbOvsNwPPq+ZW8ZrXnaIes49w57 EbOX2LFRo+DKFhcqA5lwrNi9I0CGlIMQcQKaYzhuW2ac5/aOq2lDw4hzL9TWYhgN I8oA+u9VBckpq6TI9/K5Q1ok83KnE+aC3xxoYs3wCxz8W5XxKKEVzbODraiJwYMw EMp+BmMqAulARt3wWCjeqNWg6ulzFDIRMj8CoulB4m4R9VwX9u/uQ10PDJdp0g== -----END CERTIFICATE-----Generated at Mon Jan 12 15:50:29 2026 by rpki-client