This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333030303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333030303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: NP96kV2nuEQpvLoXU53Z+pAWBlJDhs6E+YJ0trkA97A= Subject key identifier: 84:86:C0:10:11:11:CB:85:36:E4:B6:F1:55:73:21:A8:16:47:EE:BB Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 64C7E7B1347EFF5A5B8115374DB1925ADFFA9813 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333030303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:00 +0000 ROA not before: Tue 06 Jan 2026 20:44:00 +0000 ROA not after: Tue 05 Jan 2027 20:49:00 +0000 asID: 273072 IP address blocks: 2803:cf90:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c7:e7:b1:34:7e:ff:5a:5b:81:15:37:4d:b1:92:5a:df:fa:98:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:00 2026 GMT Not After : Jan 5 20:49:00 2027 GMT Subject: CN=8486C0101111CB8536E4B6F1557321A81647EEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:99:cd:3e:23:ee:74:24:77:b8:32:cd:f9: 95:8a:61:09:73:4f:2b:e9:50:28:14:d9:04:1b:b3: e8:1a:7a:39:7d:e2:eb:80:7c:b7:eb:a9:d8:b1:40: a1:6e:d3:96:5c:01:a1:c8:3f:55:92:0b:7c:4c:01: f3:20:e0:03:d4:2d:2a:c9:d4:8f:a1:97:53:94:7b: dc:bb:f7:a8:e5:97:59:c2:56:b0:d4:d3:c1:5f:99: 97:e3:fd:de:5a:2d:65:b0:d8:80:7a:6a:44:80:cd: b1:48:99:b4:4c:d9:5c:d3:97:fc:ac:b9:92:e7:13: dd:e8:93:fc:63:50:9c:2f:e2:a6:d7:75:a7:f1:b5: fd:97:bc:ee:3d:96:fd:35:96:36:7b:91:38:b5:81: 49:5d:42:5e:d1:7b:6b:13:a6:23:cd:90:80:ef:b1: 8f:72:8f:d2:dc:ad:fe:aa:e7:95:65:ff:fe:8e:e4: 71:e9:0c:a9:37:e1:67:65:7c:71:62:79:0c:30:5d: 66:49:02:1a:0e:c7:d4:a7:a6:35:27:c7:74:a4:b6: 67:15:66:a8:7a:b5:3a:21:bd:34:f6:ae:c5:0d:0e: 8f:41:7b:b6:4a:81:8c:c2:60:a0:16:a7:91:92:79: 77:3b:5c:3a:8a:17:8f:77:11:cd:fb:c2:54:f3:51: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:C0:10:11:11:CB:85:36:E4:B6:F1:55:73:21:A8:16:47:EE:BB X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333030303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3000::/40 Signature Algorithm: sha256WithRSAEncryption b5:c4:fb:9f:6b:08:ea:82:30:89:b1:52:c8:6a:fd:32:eb:44: 5f:75:5b:cd:c3:63:06:2c:c0:7d:b8:12:63:20:51:75:d5:ea: 88:7b:45:ca:a0:35:fe:f3:05:50:71:61:8f:ec:bb:39:5a:27: 06:ae:70:c0:22:4c:c5:f4:5f:b5:a3:6f:c5:bf:18:e2:fa:b4: 85:91:97:82:d4:31:c1:e1:9a:19:db:ab:4a:ca:60:51:b4:7b: f2:63:da:27:e2:de:ee:9b:d3:69:6d:78:93:3d:a3:92:94:b3: 2e:c7:ec:3d:bf:97:90:fa:b3:65:8c:91:3a:e1:e6:47:6d:54: b4:ca:d3:c1:e7:ee:ee:03:bd:d7:9f:42:91:f0:88:ff:8a:26: 7f:60:dd:46:77:57:3c:fb:57:ac:06:6d:4f:97:95:94:b2:00: d8:fa:8c:15:ba:ca:4a:ef:2f:0c:36:18:f0:b2:26:06:8e:c2: 15:05:1d:9c:be:92:88:26:5f:62:ff:e4:62:24:ac:c2:2f:9a: 6d:64:66:0a:1b:13:35:12:bb:50:8e:04:df:4e:af:87:1c:89: ca:7f:fb:42:b8:5b:a7:96:ad:f6:30:de:c4:da:f2:ae:0f:c0: 9d:13:26:a6:a7:a7:19:c1:f9:78:27:04:3d:2e:53:e3:1d:e1: d9:50:82:bd -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZMfnsTR+/1pbgRU3TbGSWt/6mBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDBaFw0yNzAxMDUyMDQ5MDBaMDMxMTAvBgNV BAMTKDg0ODZDMDEwMTExMUNCODUzNkU0QjZGMTU1NzMyMUE4MTY0N0VFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEWJnNPiPudCR3uDLN+ZWKYQlz TyvpUCgU2QQbs+gaejl94uuAfLfrqdixQKFu05ZcAaHIP1WSC3xMAfMg4APULSrJ 1I+hl1OUe9y796jll1nCVrDU08FfmZfj/d5aLWWw2IB6akSAzbFImbRM2VzTl/ys uZLnE93ok/xjUJwv4qbXdafxtf2XvO49lv01ljZ7kTi1gUldQl7Re2sTpiPNkIDv sY9yj9Lcrf6q55Vl//6O5HHpDKk34WdlfHFieQwwXWZJAhoOx9SnpjUnx3SktmcV Zqh6tTohvTT2rsUNDo9Be7ZKgYzCYKAWp5GSeXc7XDqKF493Ec37wlTzUXZJAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUhIbAEBERy4U25LbxVXMhqBZH7rswHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QMDANBgkqhkiG9w0BAQsFAAOCAQEAtcT7n2sI6oIwibFSyGr9MutE X3VbzcNjBizAfbgSYyBRddXqiHtFyqA1/vMFUHFhj+y7OVonBq5wwCJMxfRftaNv xb8Y4vq0hZGXgtQxweGaGdurSspgUbR78mPaJ+Le7pvTaW14kz2jkpSzLsfsPb+X kPqzZYyROuHmR21UtMrTwefu7gO9159CkfCI/4omf2DdRndXPPtXrAZtT5eVlLIA 2PqMFbrKSu8vDDYY8LImBo7CFQUdnL6SiCZfYv/kYiSswi+abWRmChsTNRK7UI4E 306vhxyJyn/7Qrhbp5at9jDexNryrg/AnRMmpqenGcH5eCcEPS5T4x3h2VCCvQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client