This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: 53nMYaJ05DX8Mdm7Zl05dbsOWW5sjXMqya/SkBTeG3s= Subject key identifier: EB:5E:76:C6:E6:B8:9C:2D:3A:5F:E6:AB:F5:58:54:AB:55:03:42:51 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 1D1AFA28C766D0A0E25526A5C73D1BDD7858EC01 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:19 +0000 ROA not before: Tue 06 Jan 2026 20:44:19 +0000 ROA not after: Tue 05 Jan 2027 20:49:19 +0000 asID: 273072 IP address blocks: 2803:cf90:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1a:fa:28:c7:66:d0:a0:e2:55:26:a5:c7:3d:1b:dd:78:58:ec:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:19 2026 GMT Not After : Jan 5 20:49:19 2027 GMT Subject: CN=EB5E76C6E6B89C2D3A5FE6ABF55854AB55034251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:18:12:55:44:1c:b3:e5:cd:87:e6:8d:8b: 92:7d:90:8e:15:da:50:de:73:35:78:a1:65:fd:84: 4d:19:ce:6e:3c:3c:29:30:d0:67:e3:7c:37:47:0b: ad:82:87:19:16:ca:d7:15:5e:82:91:ef:56:5e:74: 05:44:f6:60:ac:85:27:de:c2:d2:c6:ee:cb:cd:71: 44:2e:d2:1c:64:0d:7b:1f:ea:cf:6d:07:1e:4c:2f: 03:8b:48:f2:67:57:aa:e5:d3:e0:3a:ef:45:8e:88: 42:eb:99:d8:87:4f:06:a6:ee:df:b3:8a:1e:be:ce: f2:32:bb:04:44:74:79:ad:c9:ab:7c:cc:8d:ac:19: 6b:26:70:02:96:a7:df:bd:e4:3f:4a:1f:2d:62:31: 25:02:ec:d3:bb:53:1b:c4:ef:c0:86:ff:73:c3:0d: a0:40:57:e4:0a:9e:77:7c:41:d8:1d:72:fe:a1:ce: fa:d8:43:44:0e:8e:d8:10:de:5b:cf:f9:2a:a9:7e: bd:f0:3e:89:ca:a5:b0:bd:9e:04:e2:57:19:0f:f0: a2:2e:31:8a:1c:44:46:f8:2f:64:9e:f0:87:c9:31: 35:ba:31:72:9e:83:2c:73:90:d2:b3:16:71:4f:d4: c6:55:c8:fc:3f:ef:db:15:8f:d4:71:99:ac:fa:6e: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5E:76:C6:E6:B8:9C:2D:3A:5F:E6:AB:F5:58:54:AB:55:03:42:51 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3300::/40 Signature Algorithm: sha256WithRSAEncryption 0e:6c:1b:db:c5:9b:de:2b:87:b0:47:75:14:21:bc:ae:a4:0e: 9a:92:95:57:6f:dd:4f:3c:8b:6f:f1:13:35:ce:1f:af:33:ef: 05:de:c0:e3:5f:8c:d5:a9:fe:07:0f:40:54:58:12:55:28:d1: ac:a2:d1:b1:67:7b:bb:97:5c:d5:4e:fd:b1:8b:ef:18:d8:db: 8f:de:a1:07:bb:4b:74:a5:e2:59:2e:db:c9:2e:f8:f6:da:ce: b3:43:00:ba:a9:b0:ae:56:3a:af:21:c5:3a:d1:c8:35:44:1b: 9f:c5:3e:10:2d:98:22:1c:59:08:01:22:2b:51:96:15:8c:fa: 92:bd:76:aa:b4:c5:af:3b:4f:14:fb:47:02:a6:1c:c4:12:15: 39:6c:90:e0:8c:7a:8d:7b:af:5a:6a:71:81:eb:8f:f6:84:dd: 35:0a:e1:9a:e9:0c:ec:e4:ed:99:39:de:65:2d:9a:a6:ce:5e: 09:f5:b3:fc:d3:ef:84:3a:45:13:2c:99:e8:f2:0d:41:21:0b: 36:82:3a:aa:71:c6:00:47:f4:60:d8:d4:f7:6a:cb:9e:32:87: 85:df:e6:6f:0b:90:47:d4:62:23:4c:dc:04:3b:16:70:dd:d5: 4f:bc:92:b3:20:e7:d4:24:5b:14:38:93:52:c3:b5:9d:3f:4e: 7c:8e:6c:28 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHRr6KMdm0KDiVSalxz0b3XhY7AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTlaFw0yNzAxMDUyMDQ5MTlaMDMxMTAvBgNV BAMTKEVCNUU3NkM2RTZCODlDMkQzQTVGRTZBQkY1NTg1NEFCNTUwMzQyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGxgSVUQcs+XNh+aNi5J9kI4V 2lDeczV4oWX9hE0Zzm48PCkw0GfjfDdHC62ChxkWytcVXoKR71ZedAVE9mCshSfe wtLG7svNcUQu0hxkDXsf6s9tBx5MLwOLSPJnV6rl0+A670WOiELrmdiHTwam7t+z ih6+zvIyuwREdHmtyat8zI2sGWsmcAKWp9+95D9KHy1iMSUC7NO7UxvE78CG/3PD DaBAV+QKnnd8Qdgdcv6hzvrYQ0QOjtgQ3lvP+Sqpfr3wPonKpbC9ngTiVxkP8KIu MYocREb4L2Se8IfJMTW6MXKegyxzkNKzFnFP1MZVyPw/79sVj9Rxmaz6bh+7AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU6152xua4nC06X+ar9VhUq1UDQlEwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QMzANBgkqhkiG9w0BAQsFAAOCAQEADmwb28Wb3iuHsEd1FCG8rqQO mpKVV2/dTzyLb/ETNc4frzPvBd7A41+M1an+Bw9AVFgSVSjRrKLRsWd7u5dc1U79 sYvvGNjbj96hB7tLdKXiWS7byS749trOs0MAuqmwrlY6ryHFOtHINUQbn8U+EC2Y IhxZCAEiK1GWFYz6kr12qrTFrztPFPtHAqYcxBIVOWyQ4Ix6jXuvWmpxgeuP9oTd NQrhmukM7OTtmTneZS2aps5eCfWz/NPvhDpFEyyZ6PINQSELNoI6qnHGAEf0YNjU 92rLnjKHhd/mbwuQR9RiI0zcBDsWcN3VT7ySsyDn1CRbFDiTUsO1nT9OfI5sKA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client