This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: RCIAc+M80IxQUmfMtoKRAPsm3rJyDBvmA4Rz+EhG5sw= Subject key identifier: 7C:95:BC:9C:0F:50:71:6F:B7:95:73:EE:EE:5A:33:F3:A4:BE:0A:C0 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 0F5FD6D0B6DB130FA4EC9B4DE8B6A14F7155650A Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:17 +0000 ROA not before: Tue 06 Jan 2026 20:44:17 +0000 ROA not after: Tue 05 Jan 2027 20:49:17 +0000 asID: 273072 IP address blocks: 2803:cf90:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5f:d6:d0:b6:db:13:0f:a4:ec:9b:4d:e8:b6:a1:4f:71:55:65:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:17 2026 GMT Not After : Jan 5 20:49:17 2027 GMT Subject: CN=7C95BC9C0F50716FB79573EEEE5A33F3A4BE0AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:9b:55:70:64:80:39:d9:af:ef:11:6d:6b: 9e:fa:f1:09:a0:9f:c0:60:b6:37:8f:fb:59:39:c5: 26:b1:19:aa:60:03:de:04:4b:b9:97:aa:50:31:b4: e3:05:e6:66:ff:13:0e:85:a1:31:65:51:f8:67:5b: e5:a8:75:46:b5:6f:ef:15:45:b5:d1:e7:f7:f6:02: 92:34:d1:c5:dd:a2:28:71:1e:07:9f:3d:db:d8:b9: 8d:43:52:38:0c:62:ec:47:b6:a0:bd:43:d1:60:13: 16:24:cc:08:77:3c:f9:2b:cc:7e:28:0c:8c:71:85: bc:0a:bc:3a:b9:12:56:00:8c:e0:e4:db:2d:00:a6: 07:94:0f:55:f8:28:47:94:de:2f:f2:bd:1c:c7:55: fa:4f:0a:71:f7:64:37:37:6b:4a:64:f7:16:11:5e: b1:c3:ae:dd:fe:43:7b:1a:e6:8c:3f:cb:0b:05:33: c7:ea:b4:2a:0d:c8:b3:bc:52:92:ef:8b:9e:53:60: 66:79:a4:ec:d6:f1:ed:5e:0c:12:b4:16:3f:79:5f: 93:88:69:6d:1d:d0:f3:58:4c:dd:ff:32:aa:d6:96: f7:29:da:e6:29:df:58:08:eb:8e:ba:f0:a8:07:f9: 0e:e2:15:25:c4:a7:52:04:05:b0:d1:c4:fe:b3:40: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:BC:9C:0F:50:71:6F:B7:95:73:EE:EE:5A:33:F3:A4:BE:0A:C0 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 58:b1:97:9e:98:3c:d9:bf:93:fd:7c:9a:c0:c4:3a:c5:b1:83: a3:31:60:4c:68:de:6b:0e:71:8a:f1:87:72:39:11:6e:34:21: f4:af:95:05:a8:35:f1:ed:b6:42:36:28:91:df:a2:da:ff:9a: ad:70:cf:a1:7a:e3:eb:80:24:9b:64:de:e8:66:7d:1a:a5:07: f0:29:0f:bf:dc:09:71:53:05:77:8a:9a:3b:20:ea:a0:0f:e8: 49:3a:3d:27:ff:81:e9:72:5f:ef:d8:71:0f:00:db:96:cd:67: ca:9c:12:c1:e4:e2:52:09:96:79:b3:3c:61:39:3a:25:d6:48: bc:38:1b:6b:db:a2:8d:37:84:50:59:3a:77:4a:2d:e7:f7:1e: a9:f9:bf:02:23:a4:48:73:94:29:c8:74:df:1e:1d:89:b1:71: 6f:66:e1:a6:a7:3f:f6:20:05:36:5e:87:83:8a:43:ec:7c:f4: 2c:ed:cc:2f:27:66:e9:e5:6a:20:38:fd:b0:f9:74:83:5b:21: 01:0d:9b:8f:72:7f:94:19:4a:c9:74:5e:9f:d7:86:c5:4d:10: d3:1e:b1:b6:be:6f:86:5d:18:a1:9e:91:fb:19:a4:5c:35:23: 84:9e:f9:20:a9:6c:6f:55:ef:ff:5e:70:f6:54:a6:68:11:56: 6a:74:ca:79 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUD1/W0LbbEw+k7JtN6LahT3FVZQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTdaFw0yNzAxMDUyMDQ5MTdaMDMxMTAvBgNV BAMTKDdDOTVCQzlDMEY1MDcxNkZCNzk1NzNFRUVFNUEzM0YzQTRCRTBBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5ptVcGSAOdmv7xFta5768Qmg n8BgtjeP+1k5xSaxGapgA94ES7mXqlAxtOMF5mb/Ew6FoTFlUfhnW+WodUa1b+8V RbXR5/f2ApI00cXdoihxHgefPdvYuY1DUjgMYuxHtqC9Q9FgExYkzAh3PPkrzH4o DIxxhbwKvDq5ElYAjODk2y0ApgeUD1X4KEeU3i/yvRzHVfpPCnH3ZDc3a0pk9xYR XrHDrt3+Q3sa5ow/ywsFM8fqtCoNyLO8UpLvi55TYGZ5pOzW8e1eDBK0Fj95X5OI aW0d0PNYTN3/MqrWlvcp2uYp31gI64668KgH+Q7iFSXEp1IEBbDRxP6zQK5NAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfJW8nA9QcW+3lXPu7loz86S+CsAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2 NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QLjANBgkqhkiG9w0BAQsFAAOCAQEAWLGXnpg82b+T/XyawMQ6xbGD ozFgTGjeaw5xivGHcjkRbjQh9K+VBag18e22QjYokd+i2v+arXDPoXrj64Akm2Te 6GZ9GqUH8CkPv9wJcVMFd4qaOyDqoA/oSTo9J/+B6XJf79hxDwDbls1nypwSweTi UgmWebM8YTk6JdZIvDgba9uijTeEUFk6d0ot5/ceqfm/AiOkSHOUKch03x4dibFx b2bhpqc/9iAFNl6Hg4pD7Hz0LO3MLydm6eVqIDj9sPl0g1shAQ2bj3J/lBlKyXRe n9eGxU0Q0x6xtr5vhl0YoZ6R+xmkXDUjhJ75IKlsb1Xv/15w9lSmaBFWanTKeQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:03 2026 by rpki-client