This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: h/rWhZAwbP4rGOpLco+ljdEQv5wfuGsPz2eevbV538E= Subject key identifier: D8:62:6B:5B:4A:0F:1E:99:7E:2E:1C:65:CA:1E:91:72:82:05:B4:FB Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 6FCB012E1D7162D016241F76D3D8249E11F87B4F Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:13 +0000 ROA not before: Tue 06 Jan 2026 20:44:13 +0000 ROA not after: Tue 05 Jan 2027 20:49:13 +0000 asID: 273072 IP address blocks: 2803:cf90:3200::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 15:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cb:01:2e:1d:71:62:d0:16:24:1f:76:d3:d8:24:9e:11:f8:7b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:13 2026 GMT Not After : Jan 5 20:49:13 2027 GMT Subject: CN=D8626B5B4A0F1E997E2E1C65CA1E91728205B4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:d2:11:c6:fe:6a:dd:cb:71:e0:9d:d1:37: 7b:ac:e8:3f:5a:e1:e3:87:c5:a8:9c:6c:8d:97:59: 3c:22:23:9f:4d:9c:32:24:e5:18:b7:1b:d8:c9:a9: 7b:f8:44:b8:ee:04:04:59:22:b9:d5:76:6e:09:2c: fe:e4:8d:93:cf:e5:b2:e6:f9:00:d2:0a:6e:33:27: a5:c9:bb:ce:87:d7:45:cf:ee:08:b4:b6:66:94:57: 24:56:79:20:2b:26:9a:c2:d2:3d:70:4d:87:44:4c: 5f:d1:69:27:99:58:28:7a:66:dc:94:5d:81:8b:8e: f6:4e:ed:24:85:10:47:6b:e3:e7:1d:81:dd:b6:45: ed:99:3a:74:71:97:96:f5:3a:82:d3:88:8b:f7:ba: d8:9c:33:de:a0:31:e7:51:31:2c:a2:20:a8:c6:eb: 15:c1:f7:1a:07:ec:f4:59:0e:7c:77:da:dc:01:81: bd:ce:a9:fe:de:37:38:fd:2e:e2:3d:d5:e2:90:42: 04:85:77:d9:23:ac:77:b0:e0:d9:f0:9e:91:5d:9a: b6:a0:8c:a1:1a:88:ad:9f:6c:03:36:2a:77:cd:f5: 91:6d:ac:4c:e9:44:ed:db:ef:70:9b:8b:b5:2d:16: 32:cd:2b:19:e9:86:52:39:2b:88:ec:55:9e:54:a9: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:62:6B:5B:4A:0F:1E:99:7E:2E:1C:65:CA:1E:91:72:82:05:B4:FB X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3200::/40 Signature Algorithm: sha256WithRSAEncryption 56:8a:1f:29:9c:7c:6b:b4:c4:96:f4:27:0d:66:a3:0f:c4:1d: dd:47:c3:11:78:12:f5:dc:36:70:b6:77:21:a8:e2:73:e0:f1: 67:45:00:d0:3b:8f:3e:e0:10:30:a0:48:f0:98:a3:2b:3c:b7: e0:70:6a:f3:64:ec:9e:03:bd:e7:91:68:ec:12:1d:0e:42:20: ef:8d:78:4a:b4:11:cd:86:d7:d1:ce:13:d8:74:73:67:64:b4: 38:ed:99:4e:8e:57:b3:d4:9a:45:c3:d6:7c:c7:97:fe:93:6f: 9f:5d:69:71:ac:3c:12:9d:fa:da:db:4d:3c:1c:c3:7a:e9:47: ce:19:55:30:d7:67:e3:21:76:57:7f:d6:92:b7:67:fb:1e:20: ec:14:56:a0:3a:1a:ec:60:75:24:b1:38:e4:2a:34:a7:ef:5d: 21:18:13:4a:22:cc:cb:80:e6:b8:ed:6f:4e:8c:d4:b2:7c:0a: f7:bf:bb:4c:9d:62:bd:29:2f:e2:5c:99:a7:40:12:65:f7:d4: 08:fa:70:42:75:e3:7d:16:b0:01:c5:f4:63:9e:15:81:fc:b4: 24:c6:de:d2:b1:51:45:a2:ce:2e:41:45:b8:47:05:78:83:b6: 9a:10:5a:6a:b2:5e:31:3b:ff:e4:71:4a:52:3b:c7:03:fd:ba: 00:d8:05:45 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUb8sBLh1xYtAWJB9209gknhH4e08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTNaFw0yNzAxMDUyMDQ5MTNaMDMxMTAvBgNV BAMTKEQ4NjI2QjVCNEEwRjFFOTk3RTJFMUM2NUNBMUU5MTcyODIwNUI0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnNIRxv5q3ctx4J3RN3us6D9a 4eOHxaicbI2XWTwiI59NnDIk5Ri3G9jJqXv4RLjuBARZIrnVdm4JLP7kjZPP5bLm +QDSCm4zJ6XJu86H10XP7gi0tmaUVyRWeSArJprC0j1wTYdETF/RaSeZWCh6ZtyU XYGLjvZO7SSFEEdr4+cdgd22Re2ZOnRxl5b1OoLTiIv3uticM96gMedRMSyiIKjG 6xXB9xoH7PRZDnx32twBgb3Oqf7eNzj9LuI91eKQQgSFd9kjrHew4NnwnpFdmrag jKEaiK2fbAM2KnfN9ZFtrEzpRO3b73Cbi7UtFjLNKxnphlI5K4jsVZ5UqagDAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU2GJrW0oPHpl+Lhxlyh6RcoIFtPswHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QMjANBgkqhkiG9w0BAQsFAAOCAQEAVoofKZx8a7TElvQnDWajD8Qd 3UfDEXgS9dw2cLZ3Iajic+DxZ0UA0DuPPuAQMKBI8JijKzy34HBq82TsngO955Fo 7BIdDkIg7414SrQRzYbX0c4T2HRzZ2S0OO2ZTo5Xs9SaRcPWfMeX/pNvn11pcaw8 Ep362ttNPBzDeulHzhlVMNdn4yF2V3/Wkrdn+x4g7BRWoDoa7GB1JLE45Co0p+9d IRgTSiLMy4DmuO1vTozUsnwK97+7TJ1ivSkv4lyZp0ASZffUCPpwQnXjfRawAcX0 Y54Vgfy0JMbe0rFRRaLOLkFFuEcFeIO2mhBaarJeMTv/5HFKUjvHA/26ANgFRQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:17:30 2026 by rpki-client