This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: iqTHDIXkExXhe3QMwY5PxfZJ8lX88nuGbzTDT981a7I= Subject key identifier: B8:FE:5D:FE:B1:5A:D4:8E:D0:CB:5C:5B:07:81:85:FF:EC:13:2A:C0 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 66EDD3DEB3DCE52715F31D0E0E165D9008A68F23 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:01 +0000 ROA not before: Tue 06 Jan 2026 20:44:01 +0000 ROA not after: Tue 05 Jan 2027 20:49:01 +0000 asID: 273072 IP address blocks: 2803:cf90:2a00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ed:d3:de:b3:dc:e5:27:15:f3:1d:0e:0e:16:5d:90:08:a6:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:01 2026 GMT Not After : Jan 5 20:49:01 2027 GMT Subject: CN=B8FE5DFEB15AD48ED0CB5C5B078185FFEC132AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:2f:46:6e:89:81:53:a0:4e:8d:b3:e4:44: c9:d7:dc:d9:54:f9:a7:09:9e:64:e3:80:5a:56:7d: 5b:fe:63:a0:57:ce:ff:41:d7:e7:ea:f3:34:e6:8d: 19:a7:3d:77:e3:2a:30:3e:3f:38:cd:63:35:05:3b: 38:f7:a6:fb:f0:19:31:85:eb:34:fa:2a:f8:72:15: 55:57:18:41:e5:b5:3f:c5:fd:e3:13:cf:fc:b1:77: 59:ae:0c:e5:ab:45:0f:fd:7c:a4:d1:5a:a3:c9:1c: 63:43:c8:b9:df:92:07:3b:48:a8:ba:14:0b:e9:7b: 28:21:39:a0:66:b4:42:0e:f8:e1:41:75:60:12:4a: 5b:8c:16:0c:a7:6c:08:dc:51:30:03:c4:89:ea:e9: 89:57:0b:dd:61:d6:0d:da:93:32:fc:b6:55:c0:d4: 05:c0:6d:8a:2c:37:5a:b9:a1:e8:0a:7e:b1:9d:4f: a7:e5:44:8b:29:cd:5d:4a:3b:e6:6a:c4:08:1c:c6: da:b8:14:6a:72:8e:c5:00:ac:b4:a3:05:0f:97:1c: f3:7a:a0:45:88:fd:c8:96:6f:11:94:f2:ef:c1:dd: 31:d5:23:ff:79:47:a7:b5:c9:ca:2d:78:91:6d:d4: 14:e3:cd:bd:ad:43:09:73:82:c3:f2:94:bb:0d:07: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:5D:FE:B1:5A:D4:8E:D0:CB:5C:5B:07:81:85:FF:EC:13:2A:C0 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2a00::/40 Signature Algorithm: sha256WithRSAEncryption 0c:a0:b7:7d:93:ff:4f:c4:c6:0a:99:9c:55:ff:44:e4:fe:b7: 90:a8:40:74:ae:a9:3e:9b:c6:44:d3:71:3e:95:b1:df:4f:79: a2:b6:80:07:d9:1b:26:29:de:56:aa:5e:90:6a:5c:af:29:e8: 3c:c5:a2:8c:97:59:25:76:b0:fb:f9:51:33:bc:f9:57:14:21: 64:72:9f:e0:ce:c5:5c:0a:c3:6b:49:3e:3f:c8:d0:e0:88:a8: 78:0d:e4:77:3c:7a:9c:1a:67:d4:61:90:44:40:17:25:33:ff: a6:f9:de:ba:81:a5:dc:15:66:d3:6d:c3:e3:1b:d1:db:01:97: 83:fc:64:e1:2a:0a:98:ec:21:fb:ed:13:36:ff:f9:83:0d:c4: e6:9d:e2:89:c4:ae:4a:87:20:75:13:c4:01:44:b1:71:2a:e1: c9:71:e4:25:12:7c:cc:e4:b5:e5:ca:c7:d4:26:85:b0:30:f0: a9:d0:86:22:29:11:07:75:d3:73:9f:f1:bf:0b:ff:b7:4c:54: f4:2b:3f:f3:b4:12:e2:81:ac:1f:d0:9c:85:f8:b5:c9:6a:97: cf:fc:14:99:65:4b:62:34:af:8d:d7:87:46:8d:f9:1f:87:a3: dd:2e:fc:ee:f5:12:26:1a:11:1a:da:61:31:8a:15:a7:ae:4f: 0f:f2:b2:fc -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZu3T3rPc5ScV8x0ODhZdkAimjyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDFaFw0yNzAxMDUyMDQ5MDFaMDMxMTAvBgNV BAMTKEI4RkU1REZFQjE1QUQ0OEVEMENCNUM1QjA3ODE4NUZGRUMxMzJBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3i9GbomBU6BOjbPkRMnX3NlU +acJnmTjgFpWfVv+Y6BXzv9B1+fq8zTmjRmnPXfjKjA+PzjNYzUFOzj3pvvwGTGF 6zT6KvhyFVVXGEHltT/F/eMTz/yxd1muDOWrRQ/9fKTRWqPJHGNDyLnfkgc7SKi6 FAvpeyghOaBmtEIO+OFBdWASSluMFgynbAjcUTADxInq6YlXC91h1g3akzL8tlXA 1AXAbYosN1q5oegKfrGdT6flRIspzV1KO+ZqxAgcxtq4FGpyjsUArLSjBQ+XHPN6 oEWI/ciWbxGU8u/B3THVI/95R6e1ycoteJFt1BTjzb2tQwlzgsPylLsNBxAxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUuP5d/rFa1I7Qy1xbB4GF/+wTKsAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2 MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QKjANBgkqhkiG9w0BAQsFAAOCAQEADKC3fZP/T8TGCpmcVf9E5P63 kKhAdK6pPpvGRNNxPpWx3095oraAB9kbJineVqpekGpcrynoPMWijJdZJXaw+/lR M7z5VxQhZHKf4M7FXArDa0k+P8jQ4IioeA3kdzx6nBpn1GGQREAXJTP/pvneuoGl 3BVm023D4xvR2wGXg/xk4SoKmOwh++0TNv/5gw3E5p3iicSuSocgdRPEAUSxcSrh yXHkJRJ8zOS15crH1CaFsDDwqdCGIikRB3XTc5/xvwv/t0xU9Cs/87QS4oGsH9Cc hfi1yWqXz/wUmWVLYjSvjdeHRo35H4ej3S787vUSJhoRGtphMYoVp65PD/Ky/A== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:18 2026 by rpki-client