This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: NNL+TEQRFVLP0GN1hIMKeikJASES8pb8X9PvB6odS9E= Subject key identifier: C8:E7:F1:C2:A5:BB:C4:21:12:AE:B9:68:0E:D6:2C:19:61:70:0F:A7 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 4689F638339AE0543FB6B4F038D7F349B7890C0C Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:13 +0000 ROA not before: Tue 06 Jan 2026 20:44:13 +0000 ROA not after: Tue 05 Jan 2027 20:49:13 +0000 asID: 273072 IP address blocks: 2803:cf90:3900::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:89:f6:38:33:9a:e0:54:3f:b6:b4:f0:38:d7:f3:49:b7:89:0c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:13 2026 GMT Not After : Jan 5 20:49:13 2027 GMT Subject: CN=C8E7F1C2A5BBC42112AEB9680ED62C1961700FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:80:43:0f:6c:dc:07:06:23:58:5b:73:60: 07:c0:b5:c4:01:bf:3d:82:21:e6:7e:c7:c9:20:05: 44:b9:6f:6b:9e:aa:e1:5b:b0:8d:2f:65:c2:89:1b: 03:0d:d7:f3:df:ed:9b:c6:48:38:86:e6:79:ad:3d: 2a:38:84:f9:6f:c2:f2:c3:42:fa:26:14:27:d4:66: 62:ec:18:11:f0:2c:01:74:97:98:b2:8a:75:18:39: 91:a1:b2:68:ff:7f:65:8a:f1:22:c7:d1:75:82:db: 84:74:83:eb:1d:bf:be:99:ea:76:4a:8b:1f:89:c3: c1:4e:c1:57:b9:86:96:b1:11:36:64:c3:c4:a3:0f: b8:ad:2c:6a:7a:35:87:8a:08:ef:13:28:c6:80:29: 53:57:b9:27:dd:bc:9e:85:04:33:e5:1b:3d:38:a4: 3c:f8:27:6a:1f:20:f8:21:db:73:28:9a:47:6a:4a: 8a:49:63:56:ae:3d:7a:f3:b8:58:4e:75:26:ae:21: 4f:1f:d9:b0:e8:37:9f:16:52:7b:bf:48:44:78:66: 55:26:bd:ba:e4:ae:56:9d:1f:c8:fb:b7:b7:96:b7: 60:cc:2c:9b:5d:4b:c6:21:75:57:4e:ac:66:9d:12: c8:2d:49:b1:31:57:54:39:ed:91:a0:f6:ee:e1:bd: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E7:F1:C2:A5:BB:C4:21:12:AE:B9:68:0E:D6:2C:19:61:70:0F:A7 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3900::/40 Signature Algorithm: sha256WithRSAEncryption 24:42:da:f4:9e:46:82:50:2f:60:49:1b:e5:5a:50:5d:bd:cc: 73:fb:e8:46:3e:ac:15:a1:60:69:d0:87:3e:fa:f7:de:35:6a: ec:22:f0:3c:17:80:c6:62:4e:4a:15:c9:e3:a6:9f:f9:b1:ec: c9:ca:f4:99:9d:f1:1e:19:3c:01:33:b0:2c:28:82:4c:25:8d: 59:9c:09:ea:d3:33:61:47:91:cb:84:d4:de:5d:6c:77:65:fa: 15:48:c8:09:b8:8e:af:63:85:66:f3:15:d4:99:9c:96:28:ac: 8f:74:b5:7a:2c:94:6c:d5:8a:88:a2:59:7b:98:7e:be:d7:64: ed:af:c3:a0:37:f1:b3:b1:69:cd:f5:ee:75:d7:41:45:5b:54: 51:31:c1:82:7e:a4:85:ac:54:a0:2a:36:fe:86:21:f3:4d:5a: 14:18:e2:e8:df:aa:b6:4f:07:cd:a0:f3:f1:55:b2:9a:8f:8d: cf:7f:b4:ce:71:42:e2:db:88:21:02:8f:07:c2:90:1e:92:00: b8:a7:fe:a7:13:38:fc:96:f2:a1:a0:f1:59:0c:31:3b:08:5f: a8:3f:df:d9:0e:79:2e:de:fd:3f:4f:80:7b:b3:d4:d4:f0:5e: c4:75:18:e4:a8:d8:02:0c:7e:6c:6d:cf:5a:4e:d2:5c:d0:12: 20:4b:8d:db -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIURon2ODOa4FQ/trTwONfzSbeJDAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTNaFw0yNzAxMDUyMDQ5MTNaMDMxMTAvBgNV BAMTKEM4RTdGMUMyQTVCQkM0MjExMkFFQjk2ODBFRDYyQzE5NjE3MDBGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUv4BDD2zcBwYjWFtzYAfAtcQB vz2CIeZ+x8kgBUS5b2uequFbsI0vZcKJGwMN1/Pf7ZvGSDiG5nmtPSo4hPlvwvLD QvomFCfUZmLsGBHwLAF0l5iyinUYOZGhsmj/f2WK8SLH0XWC24R0g+sdv76Z6nZK ix+Jw8FOwVe5hpaxETZkw8SjD7itLGp6NYeKCO8TKMaAKVNXuSfdvJ6FBDPlGz04 pDz4J2ofIPgh23MomkdqSopJY1auPXrzuFhOdSauIU8f2bDoN58WUnu/SER4ZlUm vbrkrladH8j7t7eWt2DMLJtdS8YhdVdOrGadEsgtSbExV1Q57ZGg9u7hvTuPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUyOfxwqW7xCESrrloDtYsGWFwD6cwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QOTANBgkqhkiG9w0BAQsFAAOCAQEAJELa9J5GglAvYEkb5VpQXb3M c/voRj6sFaFgadCHPvr33jVq7CLwPBeAxmJOShXJ46af+bHsycr0mZ3xHhk8ATOw LCiCTCWNWZwJ6tMzYUeRy4TU3l1sd2X6FUjICbiOr2OFZvMV1Jmcliisj3S1eiyU bNWKiKJZe5h+vtdk7a/DoDfxs7FpzfXudddBRVtUUTHBgn6khaxUoCo2/oYh801a FBji6N+qtk8HzaDz8VWymo+Nz3+0znFC4tuIIQKPB8KQHpIAuKf+pxM4/JbyoaDx WQwxOwhfqD/f2Q55Lt79P0+Ae7PU1PBexHUY5KjYAgx+bG3PWk7SXNASIEuN2w== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client