This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333530303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333530303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: wMUNJ64qC72b9+VxPyMlvSlrROh9hlr7NyHT490kQSY= Subject key identifier: AC:F6:5E:93:3D:08:86:A8:3A:76:D4:2F:66:E0:08:90:82:14:5D:20 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 5498653F8F0D9104D3490016E01C06003C5F1924 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333530303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:09 +0000 ROA not before: Tue 06 Jan 2026 20:44:09 +0000 ROA not after: Tue 05 Jan 2027 20:49:09 +0000 asID: 273072 IP address blocks: 2803:cf90:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:98:65:3f:8f:0d:91:04:d3:49:00:16:e0:1c:06:00:3c:5f:19:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:09 2026 GMT Not After : Jan 5 20:49:09 2027 GMT Subject: CN=ACF65E933D0886A83A76D42F66E0089082145D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:ea:f2:9e:00:bc:6f:a7:40:98:69:2f:17: a9:84:1b:ff:4a:7e:7b:b9:82:98:f4:c2:05:cc:88: 74:6d:64:2c:a8:b1:36:e6:a1:8c:9a:42:a0:18:68: 8a:ec:e5:ff:0c:ae:99:76:23:cf:1b:04:c6:17:8a: 55:6d:bc:41:a4:68:a2:f3:b7:dd:fd:40:39:f9:8e: d6:94:67:e6:4c:a1:f8:1e:61:ca:b6:8a:68:90:69: c2:e5:15:10:20:46:0b:8d:c5:44:3a:15:dc:b4:19: 55:c5:cd:dc:df:6e:51:42:d2:56:c1:0a:b3:61:28: 34:7a:84:b4:89:95:12:c4:f7:81:ea:e5:43:50:3c: 2f:89:b7:a8:12:00:37:15:ac:97:97:f7:8e:ee:f5: 93:26:21:be:11:30:fd:37:0e:03:c1:df:16:eb:85: 9a:2c:60:b3:44:ce:38:c4:9a:2b:97:15:cf:e1:ac: bb:b2:30:27:24:c9:a9:76:42:a9:92:96:9c:3a:a3: 31:4a:98:c4:0c:fb:d8:03:ed:07:a1:1c:a9:cf:5f: 1e:5f:5b:c3:36:92:a3:60:16:dd:68:db:08:2d:bc: df:55:79:0c:06:95:6a:ef:2e:42:5f:fb:6c:cf:78: 23:05:5a:1a:4c:08:a9:d9:35:58:0c:2d:eb:fe:cd: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:5E:93:3D:08:86:A8:3A:76:D4:2F:66:E0:08:90:82:14:5D:20 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333530303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3500::/40 Signature Algorithm: sha256WithRSAEncryption 0a:f4:f7:3c:a7:94:7f:8c:24:06:6b:7a:9d:8e:72:6e:62:a7: 97:99:ef:36:a9:67:9c:8c:a2:20:68:dc:0c:ad:58:ea:46:c8: fa:9b:32:6c:f9:df:b8:2c:25:16:0c:87:80:63:da:d1:c6:a9: 4d:5a:73:33:5d:51:64:cb:1e:37:ef:6a:b8:21:c5:16:fa:60: bf:14:8a:6e:a4:65:85:8f:a5:1d:a5:e2:54:a9:87:17:60:89: 28:d0:cb:d4:ff:96:eb:38:11:86:af:87:73:fc:16:f3:1c:19: 2b:e6:b6:20:06:18:3d:40:89:19:59:1e:b4:89:09:ff:fb:8e: c2:b8:0b:cc:c0:4e:60:df:97:fc:8e:16:56:27:be:77:ed:0c: aa:bb:78:a8:04:bd:e4:57:8d:88:ef:5d:26:55:f8:1c:65:0f: 49:0b:58:3d:7e:e6:2e:52:51:e5:8d:69:95:e3:38:39:e7:2e: a6:00:c1:fb:c6:a4:f1:bc:94:19:85:76:ea:2b:8d:12:4e:ba: 05:f9:33:f3:41:74:10:a2:33:d2:ff:ea:0e:20:15:64:81:cd: f0:bf:f7:e7:28:50:c5:0d:0d:5a:ab:09:6e:30:1f:46:b3:67: 4d:ab:54:b1:75:7b:03:88:a4:3b:a1:5f:f2:38:a7:3f:a2:5f: d5:a8:61:36 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUVJhlP48NkQTTSQAW4BwGADxfGSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDlaFw0yNzAxMDUyMDQ5MDlaMDMxMTAvBgNV BAMTKEFDRjY1RTkzM0QwODg2QTgzQTc2RDQyRjY2RTAwODkwODIxNDVEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3+ryngC8b6dAmGkvF6mEG/9K fnu5gpj0wgXMiHRtZCyosTbmoYyaQqAYaIrs5f8Mrpl2I88bBMYXilVtvEGkaKLz t939QDn5jtaUZ+ZMofgeYcq2imiQacLlFRAgRguNxUQ6Fdy0GVXFzdzfblFC0lbB CrNhKDR6hLSJlRLE94Hq5UNQPC+Jt6gSADcVrJeX947u9ZMmIb4RMP03DgPB3xbr hZosYLNEzjjEmiuXFc/hrLuyMCckyal2QqmSlpw6ozFKmMQM+9gD7QehHKnPXx5f W8M2kqNgFt1o2wgtvN9VeQwGlWrvLkJf+2zPeCMFWhpMCKnZNVgMLev+zUX7AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUrPZekz0Ihqg6dtQvZuAIkIIUXSAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QNTANBgkqhkiG9w0BAQsFAAOCAQEACvT3PKeUf4wkBmt6nY5ybmKn l5nvNqlnnIyiIGjcDK1Y6kbI+psybPnfuCwlFgyHgGPa0capTVpzM11RZMseN+9q uCHFFvpgvxSKbqRlhY+lHaXiVKmHF2CJKNDL1P+W6zgRhq+Hc/wW8xwZK+a2IAYY PUCJGVketIkJ//uOwrgLzMBOYN+X/I4WVie+d+0Mqrt4qAS95FeNiO9dJlX4HGUP SQtYPX7mLlJR5Y1pleM4OecupgDB+8ak8byUGYV26iuNEk66Bfkz80F0EKIz0v/q DiAVZIHN8L/35yhQxQ0NWqsJbjAfRrNnTatUsXV7A4ikO6Ff8jinP6Jf1ahhNg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:13 2026 by rpki-client