This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: Pj9p6jQQPuNcFxksK18NmfQeulwP0EJeaPr/opnkQAc= Subject key identifier: 19:EF:0A:00:A3:7E:12:07:D9:B0:68:1E:9D:EC:FE:A1:95:AD:93:B3 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 07636B3A8048D2D302D9A5DA37B6D47C3EB2D893 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:00 +0000 ROA not before: Tue 06 Jan 2026 20:44:00 +0000 ROA not after: Tue 05 Jan 2027 20:49:00 +0000 asID: 273072 IP address blocks: 2803:cf90:3700::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:63:6b:3a:80:48:d2:d3:02:d9:a5:da:37:b6:d4:7c:3e:b2:d8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:00 2026 GMT Not After : Jan 5 20:49:00 2027 GMT Subject: CN=19EF0A00A37E1207D9B0681E9DECFEA195AD93B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:d2:51:49:da:f4:e9:42:6d:fd:48:9f:3c: b2:47:fd:53:6a:b4:30:8e:c5:47:58:2f:e3:1e:e2: 92:fa:4a:5a:58:15:21:13:56:38:54:b8:e3:ad:84: d7:2c:79:7c:bf:12:78:eb:42:06:21:d0:73:b3:ba: 1d:09:12:83:9f:61:0f:e4:bd:6f:5e:43:06:2e:68: 65:ad:0e:06:94:a4:bc:0b:73:c7:0d:44:e4:97:db: 09:93:d3:7f:b7:cc:9f:c8:ca:58:9b:eb:d0:2a:28: 2b:3b:dc:e8:7f:63:4c:c0:c5:38:1c:72:00:87:e4: 05:2c:70:8b:16:4d:92:53:b6:28:c2:a1:6a:92:80: 7d:b9:11:18:cc:e6:68:c6:3b:7f:ac:2b:24:cd:4c: d8:51:d1:94:4c:0f:5b:b5:0c:22:6e:7d:e4:d4:b4: 5e:c2:8b:bf:a2:36:9d:64:55:a0:8b:12:cd:43:ee: 3f:08:e6:d8:52:3b:b6:0d:c1:03:66:07:7e:94:21: 64:35:89:9e:38:48:8b:e8:a7:2e:2b:59:a3:df:6b: 32:4f:f2:33:f4:55:c5:d6:bb:d8:b7:d1:a0:00:e7: 8c:f6:7c:d1:1e:8e:d0:c9:94:24:6a:04:cd:9f:30: 75:9c:43:a5:a3:95:fe:ca:cd:e7:14:3d:34:2f:a4: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:0A:00:A3:7E:12:07:D9:B0:68:1E:9D:EC:FE:A1:95:AD:93:B3 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3700::/40 Signature Algorithm: sha256WithRSAEncryption 6b:85:df:b6:ff:60:4f:c4:da:bc:bd:3e:5e:b7:b1:79:ec:a5: e1:a2:07:aa:ca:b2:5a:14:ad:cd:f0:91:19:bc:01:0b:76:99: 3a:58:45:cc:88:03:9b:6d:f3:04:62:ac:01:e4:e4:7a:a9:bf: b5:1e:68:2e:0d:b2:d6:b1:29:dc:bf:b1:11:6f:2a:4e:42:e0: 6f:42:76:6f:56:63:8f:c3:1c:4a:3b:b5:bb:b1:ec:17:9a:77: 91:a0:e6:07:c1:29:b5:14:3e:2b:55:cb:28:b7:75:cc:2c:f3: 16:25:c9:44:76:89:ba:e5:3e:5b:6b:4b:c4:7f:11:15:1e:df: 65:8a:34:e4:c0:9f:c4:d9:03:a0:17:b9:08:d2:0f:d7:7c:be: 0f:6d:ad:8d:ba:c9:6e:94:f4:83:1c:d4:47:8a:d9:c1:4f:13: 25:39:da:45:b2:3b:f1:26:c6:5e:f5:53:35:ad:d5:fa:f6:c3: 7d:22:dd:e8:68:7c:b2:c2:42:56:55:b7:88:9e:82:20:87:07: 38:bb:21:4a:16:2e:99:03:2d:d9:ea:85:ea:63:19:89:f2:cc: 59:37:ba:4e:13:a1:88:3b:f7:73:7d:25:1d:5e:3e:5b:85:c2: ea:c7:ad:07:62:73:06:36:14:d0:61:4a:c4:87:83:56:13:eb: dd:ef:92:fb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUB2NrOoBI0tMC2aXaN7bUfD6y2JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDBaFw0yNzAxMDUyMDQ5MDBaMDMxMTAvBgNV BAMTKDE5RUYwQTAwQTM3RTEyMDdEOUIwNjgxRTlERUNGRUExOTVBRDkzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUtJRSdr06UJt/UifPLJH/VNq tDCOxUdYL+Me4pL6SlpYFSETVjhUuOOthNcseXy/EnjrQgYh0HOzuh0JEoOfYQ/k vW9eQwYuaGWtDgaUpLwLc8cNROSX2wmT03+3zJ/Iylib69AqKCs73Oh/Y0zAxTgc cgCH5AUscIsWTZJTtijCoWqSgH25ERjM5mjGO3+sKyTNTNhR0ZRMD1u1DCJufeTU tF7Ci7+iNp1kVaCLEs1D7j8I5thSO7YNwQNmB36UIWQ1iZ44SIvopy4rWaPfazJP 8jP0VcXWu9i30aAA54z2fNEejtDJlCRqBM2fMHWcQ6Wjlf7KzecUPTQvpCsjAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGe8KAKN+EgfZsGgenez+oZWtk7MwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz NzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QNzANBgkqhkiG9w0BAQsFAAOCAQEAa4Xftv9gT8TavL0+Xrexeeyl 4aIHqsqyWhStzfCRGbwBC3aZOlhFzIgDm23zBGKsAeTkeqm/tR5oLg2y1rEp3L+x EW8qTkLgb0J2b1Zjj8McSju1u7HsF5p3kaDmB8EptRQ+K1XLKLd1zCzzFiXJRHaJ uuU+W2tLxH8RFR7fZYo05MCfxNkDoBe5CNIP13y+D22tjbrJbpT0gxzUR4rZwU8T JTnaRbI78SbGXvVTNa3V+vbDfSLd6Gh8ssJCVlW3iJ6CIIcHOLshShYumQMt2eqF 6mMZifLMWTe6ThOhiDv3c30lHV4+W4XC6setB2JzBjYU0GFKxIeDVhPr3e+S+w== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:23 2026 by rpki-client