This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a326230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: QzEsKLXo67UsKFFZUxO56STlECuHWPteyt3jdb2FlI0= Subject key identifier: F4:02:A1:28:C7:A3:B6:3F:B5:62:E5:81:06:F0:89:0E:93:E2:20:AF Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 3C182460D3A3FC7803669D99BA6CF0757B000802 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:12 +0000 ROA not before: Tue 06 Jan 2026 20:44:12 +0000 ROA not after: Tue 05 Jan 2027 20:49:12 +0000 asID: 273072 IP address blocks: 2803:cf90:2b00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 15:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:18:24:60:d3:a3:fc:78:03:66:9d:99:ba:6c:f0:75:7b:00:08:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:12 2026 GMT Not After : Jan 5 20:49:12 2027 GMT Subject: CN=F402A128C7A3B63FB562E58106F0890E93E220AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:a0:95:42:be:d7:12:a7:db:57:22:41:3f: 16:47:23:0c:f2:cd:70:d0:86:b4:94:79:d6:d8:ea: 4f:b9:41:ce:7d:a5:f2:09:5e:6e:8b:fa:96:06:d7: 7d:b2:ef:62:7b:83:ff:b2:ed:d6:bf:8e:c0:dd:f8: 39:e9:c5:70:c7:a1:1b:90:2d:ef:31:3e:8f:09:f1: c6:18:fe:5a:38:f9:12:37:f2:4b:2d:a2:ba:d0:2d: 27:8c:f2:c1:e7:0f:d6:90:49:2d:a3:65:fc:76:d0: 63:32:04:28:91:41:d7:86:d2:40:cd:ce:d2:b5:67: 38:cf:44:35:95:86:68:37:67:05:57:26:1e:62:f0: 82:2d:b3:79:4c:de:59:42:26:59:6a:58:80:64:ba: 09:76:a5:98:70:4c:b7:5e:8a:ef:48:d1:b8:32:25: 64:e0:2c:cf:cc:3e:f3:a4:19:3a:e9:f8:1c:e8:d9: 43:81:b2:b7:78:9e:97:1f:6f:a9:e5:39:b6:14:da: d9:b7:31:d6:34:9e:b0:65:ff:95:89:5f:23:55:53: 62:de:a8:8d:67:55:66:bf:d6:e0:74:31:20:05:16: 64:32:28:69:51:3d:d0:06:2f:e5:66:93:5c:76:ef: 7b:73:5e:22:64:c1:be:72:38:b9:46:53:f5:6d:1a: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:02:A1:28:C7:A3:B6:3F:B5:62:E5:81:06:F0:89:0E:93:E2:20:AF X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2b00::/40 Signature Algorithm: sha256WithRSAEncryption 26:32:7c:a3:b2:a7:80:da:27:e2:b1:59:c9:fe:21:bf:6e:1c: 92:a0:d2:45:04:72:8b:89:a2:99:ec:90:e7:7f:37:43:f0:51: 0e:38:72:80:0e:9c:f1:d1:1e:68:96:62:6b:1d:06:7f:8a:c0: 82:f4:a8:1a:c5:5a:09:46:82:14:d2:5f:cf:01:cf:f4:03:5e: 03:17:c1:b2:1b:b8:78:4c:f9:20:be:4f:0b:6b:0f:f0:1d:58: 41:20:73:84:03:c1:57:7d:58:73:00:9d:49:20:8f:91:91:01: 25:54:bc:b9:a8:82:ef:35:fe:25:ad:d0:80:66:3a:04:9d:3e: 4d:36:4d:38:c8:cb:d1:45:bf:b7:e5:bc:a3:f2:9e:11:4e:3a: db:31:11:b2:55:ac:71:4b:28:70:84:f4:cf:f4:84:39:5a:63: ae:60:47:b0:17:9b:9c:0e:7d:4f:76:af:73:f3:94:0a:8c:3a: df:a2:35:5a:e7:76:00:97:b0:12:f3:66:5a:fc:5c:aa:1f:c7: 53:14:b3:93:46:34:8e:dd:88:bb:b5:0d:35:70:6c:94:54:07: d0:6c:7f:58:23:9a:a6:6c:e7:55:29:8e:81:ae:2b:19:d2:d9: ee:9f:2c:ef:a8:c4:fc:4b:6a:85:90:e9:36:5b:4b:85:3b:7a: 2c:57:66:06 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUPBgkYNOj/HgDZp2ZumzwdXsACAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTJaFw0yNzAxMDUyMDQ5MTJaMDMxMTAvBgNV BAMTKEY0MDJBMTI4QzdBM0I2M0ZCNTYyRTU4MTA2RjA4OTBFOTNFMjIwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfdqCVQr7XEqfbVyJBPxZHIwzy zXDQhrSUedbY6k+5Qc59pfIJXm6L+pYG132y72J7g/+y7da/jsDd+DnpxXDHoRuQ Le8xPo8J8cYY/lo4+RI38kstorrQLSeM8sHnD9aQSS2jZfx20GMyBCiRQdeG0kDN ztK1ZzjPRDWVhmg3ZwVXJh5i8IIts3lM3llCJllqWIBkugl2pZhwTLdeiu9I0bgy JWTgLM/MPvOkGTrp+Bzo2UOBsrd4npcfb6nlObYU2tm3MdY0nrBl/5WJXyNVU2Le qI1nVWa/1uB0MSAFFmQyKGlRPdAGL+Vmk1x273tzXiJkwb5yOLlGU/VtGjY3AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU9AKhKMejtj+1YuWBBvCJDpPiIK8wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2 MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QKzANBgkqhkiG9w0BAQsFAAOCAQEAJjJ8o7KngNon4rFZyf4hv24c kqDSRQRyi4mimeyQ5383Q/BRDjhygA6c8dEeaJZiax0Gf4rAgvSoGsVaCUaCFNJf zwHP9ANeAxfBshu4eEz5IL5PC2sP8B1YQSBzhAPBV31YcwCdSSCPkZEBJVS8uaiC 7zX+Ja3QgGY6BJ0+TTZNOMjL0UW/t+W8o/KeEU462zERslWscUsocIT0z/SEOVpj rmBHsBebnA59T3avc/OUCow636I1Wud2AJewEvNmWvxcqh/HUxSzk0Y0jt2Iu7UN NXBslFQH0Gx/WCOapmznVSmOga4rGdLZ7p8s76jE/EtqhZDpNltLhTt6LFdmBg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:49:24 2026 by rpki-client