This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: EmUN4zlQOqm5jBX1e65Xw+Lzxwhwy0vnPRRS9DBcubg= Subject key identifier: 11:85:E2:FC:50:66:52:EC:31:22:1D:13:5C:1A:E6:4F:77:0B:95:95 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 70DB749F14FD4E08E845C7EE21FA6CA3B10AF94D Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:08 +0000 ROA not before: Tue 06 Jan 2026 20:44:08 +0000 ROA not after: Tue 05 Jan 2027 20:49:08 +0000 asID: 273072 IP address blocks: 2803:cf90:3100::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:db:74:9f:14:fd:4e:08:e8:45:c7:ee:21:fa:6c:a3:b1:0a:f9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:08 2026 GMT Not After : Jan 5 20:49:08 2027 GMT Subject: CN=1185E2FC506652EC31221D135C1AE64F770B9595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:44:27:89:09:c6:7c:aa:aa:d2:ef:d8:88: 17:3d:0a:87:9e:45:27:96:c0:94:db:67:cb:29:51: 61:11:d4:e6:8d:6e:87:1f:b7:0f:fc:ed:43:4e:f9: 89:28:f0:b3:39:d5:df:79:cf:00:2a:be:c5:52:00: a5:da:0f:8a:07:4c:38:a7:50:44:54:08:4f:c0:ef: 0c:4e:81:80:53:6e:55:39:ab:98:dd:92:8f:dd:d4: ce:c4:df:77:61:23:c8:17:2c:d9:c0:58:da:bb:2a: 8c:e1:1b:16:7c:ba:f3:a6:c6:85:23:54:df:fa:4c: 32:ba:4b:0f:ff:50:d6:cf:4d:8f:6b:47:fa:3f:14: f8:f9:b4:4e:bd:dd:82:d3:74:a0:04:f0:99:20:7d: c2:59:b3:10:72:bc:81:d1:e1:b6:88:6e:34:ed:b0: 60:33:76:49:89:4b:8f:f0:74:27:43:8e:c5:1f:d4: df:61:83:c8:fc:56:8e:5a:0a:b7:6b:0c:70:b0:2c: 0b:cf:e9:ee:12:fb:94:d8:c8:df:25:99:0b:27:f9: 07:38:e3:60:30:1c:19:d5:7a:6a:2f:80:5f:28:78: d9:95:56:06:04:6d:fc:46:80:e5:73:7f:b9:df:2e: 55:af:e1:16:bf:03:d2:1a:01:44:af:64:25:a5:85: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:85:E2:FC:50:66:52:EC:31:22:1D:13:5C:1A:E6:4F:77:0B:95:95 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3100::/40 Signature Algorithm: sha256WithRSAEncryption 77:3f:58:21:d4:77:56:60:46:a7:61:e1:3c:86:dd:99:03:3e: b5:d3:ab:15:61:94:a2:4d:87:be:47:35:ac:d8:b5:68:d2:96: b4:8d:9a:13:dd:7d:62:f6:a1:0b:bc:1b:09:9f:82:fb:d7:3e: 53:b7:28:04:e5:a9:a7:a8:fc:55:10:db:b0:5d:47:ed:45:53: f0:fc:59:71:79:1c:04:60:2b:5d:1f:33:33:ad:e7:73:94:55: d5:15:46:ae:8a:c3:4d:ed:28:76:cf:f4:fb:0c:f8:89:00:ec: f3:34:fc:ef:d5:82:c4:7e:00:e7:d0:e3:05:cf:4b:10:2b:cf: c2:6e:33:ac:13:09:d7:35:e8:0d:2d:57:cc:11:42:1a:a1:36: 16:38:05:a8:65:13:b8:4b:dd:e3:7f:8c:01:09:67:24:74:ed: 02:5e:af:85:b8:93:69:42:52:e2:d1:9c:07:16:1f:20:97:56: c1:22:3b:8b:75:23:c3:5a:ab:60:b6:2e:74:9c:f6:d5:4b:c5: 00:e1:57:90:15:eb:0d:f4:e3:57:90:56:a1:e1:5b:4d:f1:7a: 1d:54:fc:4c:1e:0f:dd:f7:be:7c:bc:3d:bf:a6:a6:0c:24:b2: 6f:11:4f:35:6d:a2:23:9a:46:9d:a7:50:cc:c0:c1:b0:18:23: db:df:12:7c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUcNt0nxT9TgjoRcfuIfpso7EK+U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDhaFw0yNzAxMDUyMDQ5MDhaMDMxMTAvBgNV BAMTKDExODVFMkZDNTA2NjUyRUMzMTIyMUQxMzVDMUFFNjRGNzcwQjk1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BkQniQnGfKqq0u/YiBc9Coee RSeWwJTbZ8spUWER1OaNbocftw/87UNO+Yko8LM51d95zwAqvsVSAKXaD4oHTDin UERUCE/A7wxOgYBTblU5q5jdko/d1M7E33dhI8gXLNnAWNq7KozhGxZ8uvOmxoUj VN/6TDK6Sw//UNbPTY9rR/o/FPj5tE693YLTdKAE8JkgfcJZsxByvIHR4baIbjTt sGAzdkmJS4/wdCdDjsUf1N9hg8j8Vo5aCrdrDHCwLAvP6e4S+5TYyN8lmQsn+Qc4 42AwHBnVemovgF8oeNmVVgYEbfxGgOVzf7nfLlWv4Ra/A9IaAUSvZCWlhUvDAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUEYXi/FBmUuwxIh0TXBrmT3cLlZUwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QMTANBgkqhkiG9w0BAQsFAAOCAQEAdz9YIdR3VmBGp2HhPIbdmQM+ tdOrFWGUok2Hvkc1rNi1aNKWtI2aE919YvahC7wbCZ+C+9c+U7coBOWpp6j8VRDb sF1H7UVT8PxZcXkcBGArXR8zM63nc5RV1RVGrorDTe0ods/0+wz4iQDs8zT879WC xH4A59DjBc9LECvPwm4zrBMJ1zXoDS1XzBFCGqE2FjgFqGUTuEvd43+MAQlnJHTt Al6vhbiTaUJS4tGcBxYfIJdWwSI7i3Ujw1qrYLYudJz21UvFAOFXkBXrDfTjV5BW oeFbTfF6HVT8TB4P3fe+fLw9v6amDCSybxFPNW2iI5pGnadQzMDBsBgj298SfA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client