This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: oIltIMCfBvFbJUY8vCg74/MGvyh5wJetJnI7tnJdpuc= Subject key identifier: CB:8B:1C:86:E8:8E:86:78:15:19:1E:40:AE:00:BC:DF:69:F7:21:93 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 359607EEFFB560CC6DC5034A5FF30CEB6AD05771 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:06 +0000 ROA not before: Tue 06 Jan 2026 20:44:06 +0000 ROA not after: Tue 05 Jan 2027 20:49:06 +0000 asID: 273072 IP address blocks: 2803:cf90:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:96:07:ee:ff:b5:60:cc:6d:c5:03:4a:5f:f3:0c:eb:6a:d0:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:06 2026 GMT Not After : Jan 5 20:49:06 2027 GMT Subject: CN=CB8B1C86E88E867815191E40AE00BCDF69F72193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:c9:0d:24:a1:27:be:49:95:7d:7f:00:40: 6c:2e:42:7a:99:16:ca:ea:9f:c8:39:a4:2c:e7:2f: e5:23:17:75:76:65:fa:be:d9:f2:2c:c0:9e:28:c9: cf:dd:f2:d2:63:9c:fa:1e:0e:cb:f7:41:1f:1a:7f: 2c:93:7e:d1:c5:20:49:bc:78:29:bb:ec:11:44:10: 3f:eb:c2:e3:c7:3b:b2:d3:1f:91:0a:a4:72:9b:13: 0c:24:c2:f8:5a:2d:87:d3:d6:bf:ff:08:ce:ee:84: 54:b3:0a:6d:b7:87:79:8b:4d:f7:94:df:f3:a3:b0: b1:f3:82:df:dd:74:6e:b7:51:cd:12:70:7c:fc:c1: 70:4e:08:d5:54:dd:63:60:75:3a:28:d8:ae:65:c7: c2:5f:87:8e:0c:2e:00:8f:86:c4:ca:57:1f:29:8d: ca:c0:75:77:bf:a7:fa:dc:cd:c4:88:35:eb:9d:9a: a1:7a:5d:9f:08:99:b4:02:97:bf:f2:d2:d0:27:09: 5d:73:e0:73:4c:96:a9:8a:49:a1:69:de:e7:98:03: 57:fc:34:79:db:ca:ac:2f:06:8a:88:ea:d4:a6:9d: ce:4f:40:d2:c6:d2:04:be:4a:2b:fb:bd:7d:a9:c9: d5:aa:b7:c9:7d:3f:35:57:3f:99:e8:0e:98:5a:26: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8B:1C:86:E8:8E:86:78:15:19:1E:40:AE:00:BC:DF:69:F7:21:93 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3800::/40 Signature Algorithm: sha256WithRSAEncryption 60:b3:77:14:8a:bc:7c:e5:ad:cb:f9:77:b2:e5:fb:30:f8:99: 20:14:65:c2:cb:8a:a4:fb:8d:f1:49:6f:39:95:23:44:ab:fc: c0:0d:45:7e:29:16:64:6b:3b:1e:a0:da:10:b3:38:ff:96:27: f7:54:eb:39:82:72:ae:bf:81:65:73:08:d4:94:db:c5:8c:4f: 8e:ee:db:8e:32:82:40:6b:d5:55:87:e6:33:f6:f4:1e:9c:00: 26:25:a4:e8:4e:31:38:56:ea:bb:92:d7:0d:05:5c:25:f9:42: 2f:63:85:d8:e4:98:a2:65:62:21:af:78:0d:b7:b1:93:dd:5a: 5d:ea:d9:65:c8:0e:91:19:09:55:b3:8b:ac:1c:56:eb:cc:1b: 5d:37:54:d9:cc:4e:6e:18:32:40:00:e1:4b:09:27:58:83:5c: 8e:cd:83:74:94:c7:01:20:45:1e:df:49:68:c7:56:a4:7d:3a: e7:b8:80:5f:c4:20:dc:46:50:67:15:25:82:33:6b:e4:eb:e4: f8:3c:51:d2:7e:b9:b0:7f:b8:ba:78:a4:e8:56:11:88:de:a6: b1:39:6f:34:59:4b:0f:dd:1d:48:1c:7f:57:2a:06:8c:35:5d: b7:4e:e0:55:8f:6b:d8:28:4b:d9:a3:a7:b2:ac:57:a0:30:96: 98:64:e0:da -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNZYH7v+1YMxtxQNKX/MM62rQV3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDZaFw0yNzAxMDUyMDQ5MDZaMDMxMTAvBgNV BAMTKENCOEIxQzg2RTg4RTg2NzgxNTE5MUU0MEFFMDBCQ0RGNjlGNzIxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejckNJKEnvkmVfX8AQGwuQnqZ Fsrqn8g5pCznL+UjF3V2Zfq+2fIswJ4oyc/d8tJjnPoeDsv3QR8afyyTftHFIEm8 eCm77BFEED/rwuPHO7LTH5EKpHKbEwwkwvhaLYfT1r//CM7uhFSzCm23h3mLTfeU 3/OjsLHzgt/ddG63Uc0ScHz8wXBOCNVU3WNgdToo2K5lx8Jfh44MLgCPhsTKVx8p jcrAdXe/p/rczcSINeudmqF6XZ8ImbQCl7/y0tAnCV1z4HNMlqmKSaFp3ueYA1f8 NHnbyqwvBoqI6tSmnc5PQNLG0gS+Siv7vX2pydWqt8l9PzVXP5noDphaJpqrAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUy4schuiOhngVGR5ArgC832n3IZMwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz ODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QODANBgkqhkiG9w0BAQsFAAOCAQEAYLN3FIq8fOWty/l3suX7MPiZ IBRlwsuKpPuN8UlvOZUjRKv8wA1FfikWZGs7HqDaELM4/5Yn91TrOYJyrr+BZXMI 1JTbxYxPju7bjjKCQGvVVYfmM/b0HpwAJiWk6E4xOFbqu5LXDQVcJflCL2OF2OSY omViIa94Dbexk91aXerZZcgOkRkJVbOLrBxW68wbXTdU2cxObhgyQADhSwknWINc js2DdJTHASBFHt9JaMdWpH0657iAX8Qg3EZQZxUlgjNr5Ovk+DxR0n65sH+4unik 6FYRiN6msTlvNFlLD90dSBx/VyoGjDVdt07gVY9r2ChL2aOnsqxXoDCWmGTg2g== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client