This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: bGYYFxL1SabOpxZVT47jwZUfQYGQpu2vzJVUd2N/ohw= Subject key identifier: 7D:17:ED:95:4F:0A:E1:CE:F4:D3:B2:31:27:E7:19:E7:70:A8:33:F4 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 7B35A91A7C47C270CB7B808E6237517EF47C62C0 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:03 +0000 ROA not before: Tue 06 Jan 2026 20:44:03 +0000 ROA not after: Tue 05 Jan 2027 20:49:03 +0000 asID: 273072 IP address blocks: 2803:cf90:2f00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:35:a9:1a:7c:47:c2:70:cb:7b:80:8e:62:37:51:7e:f4:7c:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:03 2026 GMT Not After : Jan 5 20:49:03 2027 GMT Subject: CN=7D17ED954F0AE1CEF4D3B23127E719E770A833F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:15:6d:73:69:57:a1:59:39:8b:e7:32:8e: 1e:06:12:fa:41:f1:ce:0b:1b:43:04:99:6a:b5:a6: f2:7d:08:05:85:a9:50:41:a3:d5:79:b2:4a:6c:bf: f6:cc:e9:fc:48:14:05:ea:02:e0:9a:ad:87:ac:9d: b6:b1:8d:1e:e8:16:43:76:ac:31:2b:3e:3b:90:38: a2:8d:e0:45:73:ba:bc:19:07:b9:14:fc:3a:d6:2a: d9:c7:a2:06:3c:0d:a5:56:c1:46:5f:d7:e8:6f:65: 8e:c6:85:c1:53:d6:77:13:e1:10:c9:11:18:50:f0: ef:8a:a4:2c:6c:69:23:6e:55:97:48:4a:9e:fc:8f: 26:48:1c:8a:7c:66:81:e4:74:93:7a:db:79:79:00: 4d:a3:21:a3:4f:2f:35:a2:59:a6:44:57:65:45:7d: 78:1b:ec:d6:5f:ac:17:e4:9b:7c:e8:ae:a6:c9:ce: ac:d2:b8:35:a9:d6:d3:56:c4:3d:d2:c7:2e:c7:87: ca:e3:97:32:d0:be:6d:07:83:e0:de:4c:78:96:17: 43:5d:b6:bf:56:90:b1:68:b2:95:e0:6c:f3:9a:14: 05:e4:7c:01:4f:39:08:83:52:e8:8f:53:a9:ed:98: fa:6b:98:7f:98:3a:05:75:11:7d:5c:e7:eb:9c:3b: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:17:ED:95:4F:0A:E1:CE:F4:D3:B2:31:27:E7:19:E7:70:A8:33:F4 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:2f00::/40 Signature Algorithm: sha256WithRSAEncryption 2b:4c:95:18:33:a8:81:d9:54:f8:de:fc:a5:65:bd:f6:f1:99: d2:05:ee:cd:98:89:27:f9:0a:b4:03:48:d3:37:cc:a2:15:24: 05:37:45:e0:c1:3b:8b:4c:36:d8:63:6b:3a:40:6f:03:8c:c0: 19:01:35:10:7b:0b:3e:37:82:c7:0b:cc:6f:fa:ad:80:47:06: 8a:c0:67:ea:38:86:fe:53:6f:0f:aa:4d:0b:00:23:cf:c6:1d: 3a:f6:b0:fc:f6:f7:c1:a3:e5:44:f5:0e:af:66:4b:1b:60:a1: 4f:d8:d8:b1:16:ff:96:88:78:5a:dd:e8:35:d6:7f:2d:df:ce: e6:90:e0:c9:ca:39:e2:1e:4c:41:36:f0:eb:bf:83:0f:a5:77: ec:9c:0e:0c:20:7f:b3:be:79:ad:c5:00:cb:59:a7:d8:4b:2d: 46:e3:ae:c8:57:32:35:1c:0d:f9:4f:42:21:ad:d1:40:69:e6: 74:42:d2:b8:00:4d:32:e0:6d:35:ce:e6:ac:f2:8f:08:8d:e2: e7:6a:8b:bf:00:2f:23:7e:b9:62:54:2e:c9:8b:22:e5:89:d0: 17:5f:da:12:c5:00:c7:41:e7:b3:50:9a:fb:ab:33:55:21:35: f7:7d:c5:6c:38:23:67:4f:d1:e1:d1:be:1c:49:7c:aa:7a:2e: 92:44:28:0d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUezWpGnxHwnDLe4COYjdRfvR8YsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDNaFw0yNzAxMDUyMDQ5MDNaMDMxMTAvBgNV BAMTKDdEMTdFRDk1NEYwQUUxQ0VGNEQzQjIzMTI3RTcxOUU3NzBBODMzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpRVtc2lXoVk5i+cyjh4GEvpB 8c4LG0MEmWq1pvJ9CAWFqVBBo9V5skpsv/bM6fxIFAXqAuCarYesnbaxjR7oFkN2 rDErPjuQOKKN4EVzurwZB7kU/DrWKtnHogY8DaVWwUZf1+hvZY7GhcFT1ncT4RDJ ERhQ8O+KpCxsaSNuVZdISp78jyZIHIp8ZoHkdJN623l5AE2jIaNPLzWiWaZEV2VF fXgb7NZfrBfkm3zorqbJzqzSuDWp1tNWxD3Sxy7Hh8rjlzLQvm0Hg+DeTHiWF0Nd tr9WkLFospXgbPOaFAXkfAFPOQiDUuiPU6ntmPprmH+YOgV1EX1c5+ucOwhdAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfRftlU8K4c7007IxJ+cZ53CoM/QwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzI2 NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QLzANBgkqhkiG9w0BAQsFAAOCAQEAK0yVGDOogdlU+N78pWW99vGZ 0gXuzZiJJ/kKtANI0zfMohUkBTdF4ME7i0w22GNrOkBvA4zAGQE1EHsLPjeCxwvM b/qtgEcGisBn6jiG/lNvD6pNCwAjz8YdOvaw/Pb3waPlRPUOr2ZLG2ChT9jYsRb/ loh4Wt3oNdZ/Ld/O5pDgyco54h5MQTbw67+DD6V37JwODCB/s755rcUAy1mn2Est RuOuyFcyNRwN+U9CIa3RQGnmdELSuABNMuBtNc7mrPKPCI3i52qLvwAvI365YlQu yYsi5YnQF1/aEsUAx0Hns1Ca+6szVSE1933FbDgjZ0/R4dG+HEl8qnoukkQoDQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:07 2026 by rpki-client