This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: tpYmJVpUotGZrZ7nc9pTvE/gSzJM/GXwlYetivTvfPs= Subject key identifier: 52:B0:FB:9D:41:41:1D:28:9E:F6:EB:61:EB:2D:8C:9B:33:40:C9:0B Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 5A6381DF0397A5F95281D744EAC88EEED2ADB4F9 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:17 +0000 ROA not before: Tue 06 Jan 2026 20:44:17 +0000 ROA not after: Tue 05 Jan 2027 20:49:17 +0000 asID: 273072 IP address blocks: 2803:cf90:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:81:df:03:97:a5:f9:52:81:d7:44:ea:c8:8e:ee:d2:ad:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:17 2026 GMT Not After : Jan 5 20:49:17 2027 GMT Subject: CN=52B0FB9D41411D289EF6EB61EB2D8C9B3340C90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:2b:cd:d5:b2:6f:9b:d5:e2:65:a8:e8:0f: 5a:79:ad:52:ef:28:be:52:84:c4:02:b2:74:32:0a: c4:71:48:62:d9:46:82:32:4e:b4:ce:22:92:70:42: de:db:01:87:b4:c9:00:f9:9b:f4:cf:a5:13:2e:07: 6d:0c:93:8b:cf:bf:06:31:96:76:ee:b1:a9:8c:70: f3:49:fc:06:70:a6:24:09:76:d4:f2:6b:f1:da:87: 29:2c:ea:70:2a:ef:58:33:b6:b3:f7:93:af:cf:a0: ac:ce:b7:dc:6c:3d:0d:a0:8f:8c:76:03:0a:fa:1f: 85:46:82:d4:9b:ca:9f:90:31:1f:15:67:fe:d0:b4: e1:72:d1:10:fd:9f:3c:22:e0:cd:18:66:d8:9e:34: 5a:23:fe:c1:f2:40:9d:05:9b:b0:58:d9:91:fd:43: da:c8:ad:55:0a:33:ee:a7:78:ba:ca:2f:ef:63:1a: e1:80:9e:64:c8:93:05:d2:06:56:a5:2b:a9:d6:31: 91:78:38:a2:d2:b5:4a:01:41:51:b5:0b:c9:1d:47: f7:55:54:b5:95:62:12:1d:a2:73:35:88:cd:7b:00: fc:98:97:0d:a5:6e:83:a9:8b:0c:39:93:23:7f:31: 10:c2:f2:18:67:e1:90:b8:4e:64:de:64:70:4b:17: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:FB:9D:41:41:1D:28:9E:F6:EB:61:EB:2D:8C:9B:33:40:C9:0B X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 75:b1:a5:30:e6:81:ec:5d:3a:bd:6e:15:ca:ec:46:a8:c5:b3: cb:38:b7:8a:d0:10:9d:3a:38:cd:43:22:bc:e2:a5:35:36:84: f6:58:5b:dd:29:74:ed:1e:ef:2e:35:6d:ad:ab:74:88:f3:19: 63:70:fa:12:07:9f:68:d8:e8:50:b2:66:3b:22:57:49:f9:80: fb:90:5b:ac:2b:95:51:f5:5c:aa:6f:16:7b:88:7e:4a:aa:a0: 32:f4:87:00:a0:a2:c3:81:17:24:2a:c5:47:21:6c:0d:62:0c: d5:31:4b:b0:7c:eb:c3:61:f9:08:0e:02:56:fa:34:1a:79:59: 3b:8e:d2:4e:9d:76:e3:20:d4:c3:1f:cc:d4:4e:da:61:dc:92: a0:ea:82:38:10:d1:e1:b1:da:ee:f6:51:3d:27:99:2c:b4:a6: 50:a0:a6:2b:e7:26:a5:f7:2e:67:9d:2a:5d:2d:f4:5e:a4:48: 34:cc:aa:ef:d7:b9:36:68:fe:c3:95:fc:f4:31:80:64:14:bf: f1:42:12:b9:bf:5d:44:7f:43:67:d7:09:3e:48:95:4d:eb:51: 2c:96:70:4a:53:99:ca:98:31:8e:66:80:ca:e6:dc:4b:a0:48: 2d:79:1b:b2:a8:87:2d:85:a6:ce:42:15:79:9a:d5:e9:91:31: 6b:d1:77:76 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUWmOB3wOXpflSgddE6siO7tKttPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTdaFw0yNzAxMDUyMDQ5MTdaMDMxMTAvBgNV BAMTKDUyQjBGQjlENDE0MTFEMjg5RUY2RUI2MUVCMkQ4QzlCMzM0MEM5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8ivN1bJvm9XiZajoD1p5rVLv KL5ShMQCsnQyCsRxSGLZRoIyTrTOIpJwQt7bAYe0yQD5m/TPpRMuB20Mk4vPvwYx lnbusamMcPNJ/AZwpiQJdtTya/Hahyks6nAq71gztrP3k6/PoKzOt9xsPQ2gj4x2 Awr6H4VGgtSbyp+QMR8VZ/7QtOFy0RD9nzwi4M0YZtieNFoj/sHyQJ0Fm7BY2ZH9 Q9rIrVUKM+6neLrKL+9jGuGAnmTIkwXSBlalK6nWMZF4OKLStUoBQVG1C8kdR/dV VLWVYhIdonM1iM17APyYlw2lboOpiww5kyN/MRDC8hhn4ZC4TmTeZHBLF49bAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUUrD7nUFBHSie9uth6y2MmzNAyQswHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2 MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QLDANBgkqhkiG9w0BAQsFAAOCAQEAdbGlMOaB7F06vW4VyuxGqMWz yzi3itAQnTo4zUMivOKlNTaE9lhb3Sl07R7vLjVtrat0iPMZY3D6EgefaNjoULJm OyJXSfmA+5BbrCuVUfVcqm8We4h+SqqgMvSHAKCiw4EXJCrFRyFsDWIM1TFLsHzr w2H5CA4CVvo0GnlZO47STp124yDUwx/M1E7aYdySoOqCOBDR4bHa7vZRPSeZLLSm UKCmK+cmpfcuZ50qXS30XqRINMyq79e5Nmj+w5X89DGAZBS/8UISub9dRH9DZ9cJ PkiVTetRLJZwSlOZypgxjmaAyubcS6BILXkbsqiHLYWmzkIVeZrV6ZExa9F3dg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:59 2026 by rpki-client