This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: IHH/HUAdbEIy7xA0Q8DjSY4f4gU8/6aVqIpBicQRUBE= Subject key identifier: 2A:AB:AA:83:35:7A:B9:72:62:CA:74:C0:46:47:AD:F3:FD:47:0B:7A Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 49D1097C710365207CE6AF800069D229A05F8BE2 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:01 +0000 ROA not before: Tue 06 Jan 2026 20:44:01 +0000 ROA not after: Tue 05 Jan 2027 20:49:01 +0000 asID: 273072 IP address blocks: 2803:cf90:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d1:09:7c:71:03:65:20:7c:e6:af:80:00:69:d2:29:a0:5f:8b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:01 2026 GMT Not After : Jan 5 20:49:01 2027 GMT Subject: CN=2AABAA83357AB97262CA74C04647ADF3FD470B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:10:15:ef:75:86:6d:95:78:ca:e4:99:02: 6c:16:15:0a:d0:26:cd:ba:69:40:c0:ab:d5:a2:61: 50:a8:eb:ed:e0:f8:0a:be:10:53:0e:c4:64:5a:64: 1c:7d:9e:8e:b8:c6:e0:23:af:76:5e:1d:76:37:71: ca:76:92:0e:2b:43:60:77:fb:32:cc:93:36:66:db: bb:3f:d6:63:36:a6:66:94:a9:0e:90:86:78:96:22: 76:db:8f:5f:0f:20:85:0c:27:31:42:f4:15:46:4c: 16:86:cb:61:69:64:05:06:3b:94:f1:45:c6:7e:cd: d4:c6:64:58:0c:15:96:a8:0b:ef:da:11:7b:7d:99: 1a:60:67:75:00:fa:ec:3c:c2:e6:f4:db:a7:ec:be: 4d:2d:eb:9c:73:76:b4:5b:6f:73:95:46:fd:a4:53: 94:96:20:7c:7f:8a:3c:09:00:d9:1f:75:f3:9b:09: 32:1d:5d:9a:70:20:f5:2d:b2:97:c0:30:e9:45:51: 15:29:c2:53:07:56:b4:e4:5c:ba:bf:21:6e:32:c9: 1f:2c:f3:bb:f6:3f:23:2f:5e:a9:b2:9e:0e:92:11: 3d:9f:06:83:cb:98:8f:ba:5c:36:ab:a0:da:dc:ec: fe:ba:08:23:8a:d7:ce:f1:26:0d:76:ec:18:27:f3: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:AA:83:35:7A:B9:72:62:CA:74:C0:46:47:AD:F3:FD:47:0B:7A X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3600::/40 Signature Algorithm: sha256WithRSAEncryption 54:29:b0:d0:2e:44:7e:4e:4b:11:28:04:f7:0b:66:fd:f9:98: ef:e7:80:2a:f2:d4:0b:15:39:f9:b8:d2:2b:d4:81:76:fe:0f: 43:56:8b:88:86:05:11:1e:84:38:e4:11:e7:29:c8:34:65:26: 30:35:53:67:7c:cf:0b:83:9a:53:76:06:b6:72:c9:82:d4:a6: 2d:01:18:32:73:ce:0b:56:e6:e2:8a:53:06:71:f7:8b:4c:00: 1f:fb:81:66:e0:0e:bf:ff:dd:e2:38:56:28:4d:3b:95:12:80: 2d:3d:06:ed:31:f8:27:4b:79:7d:99:f6:72:6c:50:d8:6e:d2: a6:2d:9c:0f:80:98:5a:59:e2:43:41:6d:fd:84:68:9f:18:25: a5:e4:0c:e5:03:99:72:d5:59:c4:21:25:03:98:93:a4:8a:60: d3:81:c2:a9:cd:73:44:39:e3:bb:22:67:cc:2d:59:a4:91:8a: b1:c2:b7:72:1c:01:4f:1b:ab:c6:27:d8:b2:fd:96:1c:a9:a9: d4:ce:a5:37:a5:25:7b:27:24:11:0f:2c:27:18:99:66:7e:ff: 34:95:b8:20:77:0e:91:66:0f:75:17:3d:fa:5f:51:a8:11:1b: 2f:85:01:09:a5:eb:19:66:0f:0e:a8:e1:ab:ea:ee:6d:cc:76: 01:47:8a:95 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSdEJfHEDZSB85q+AAGnSKaBfi+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDFaFw0yNzAxMDUyMDQ5MDFaMDMxMTAvBgNV BAMTKDJBQUJBQTgzMzU3QUI5NzI2MkNBNzRDMDQ2NDdBREYzRkQ0NzBCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfThAV73WGbZV4yuSZAmwWFQrQ Js26aUDAq9WiYVCo6+3g+Aq+EFMOxGRaZBx9no64xuAjr3ZeHXY3ccp2kg4rQ2B3 +zLMkzZm27s/1mM2pmaUqQ6QhniWInbbj18PIIUMJzFC9BVGTBaGy2FpZAUGO5Tx RcZ+zdTGZFgMFZaoC+/aEXt9mRpgZ3UA+uw8wub026fsvk0t65xzdrRbb3OVRv2k U5SWIHx/ijwJANkfdfObCTIdXZpwIPUtspfAMOlFURUpwlMHVrTkXLq/IW4yyR8s 87v2PyMvXqmyng6SET2fBoPLmI+6XDaroNrc7P66CCOK187xJg127Bgn89oZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUKquqgzV6uXJiynTARket8/1HC3owHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QNjANBgkqhkiG9w0BAQsFAAOCAQEAVCmw0C5Efk5LESgE9wtm/fmY 7+eAKvLUCxU5+bjSK9SBdv4PQ1aLiIYFER6EOOQR5ynINGUmMDVTZ3zPC4OaU3YG tnLJgtSmLQEYMnPOC1bm4opTBnH3i0wAH/uBZuAOv//d4jhWKE07lRKALT0G7TH4 J0t5fZn2cmxQ2G7Spi2cD4CYWlniQ0Ft/YRonxglpeQM5QOZctVZxCElA5iTpIpg 04HCqc1zRDnjuyJnzC1ZpJGKscK3chwBTxurxifYsv2WHKmp1M6lN6UleyckEQ8s JxiZZn7/NJW4IHcOkWYPdRc9+l9RqBEbL4UBCaXrGWYPDqjhq+rubcx2AUeKlQ== -----END CERTIFICATE-----Generated at Mon Jan 12 10:53:36 2026 by rpki-client