This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a336130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: pT0ApvzO7/NPC9i1mPKHAleI3BLvItbwsa5upbsYldc= Subject key identifier: 25:24:F5:5D:83:65:4D:81:48:7D:83:01:41:D2:28:65:E0:BE:55:BD Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 4C884752C7280BC71B61D9B773D5898FBACAB04F Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:03 +0000 ROA not before: Tue 06 Jan 2026 20:44:03 +0000 ROA not after: Tue 05 Jan 2027 20:49:03 +0000 asID: 273072 IP address blocks: 2803:cf90:3a00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:88:47:52:c7:28:0b:c7:1b:61:d9:b7:73:d5:89:8f:ba:ca:b0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:03 2026 GMT Not After : Jan 5 20:49:03 2027 GMT Subject: CN=2524F55D83654D81487D830141D22865E0BE55BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:69:ea:d4:21:b1:9c:fe:87:37:12:47:27: bf:02:5a:32:23:c2:ca:30:01:bd:df:12:d9:d1:45: c5:04:e0:7e:ef:02:f2:f7:a8:74:2b:22:4b:0a:ef: 19:f0:f3:cd:6f:4d:75:7e:16:d8:11:f6:5c:56:33: 14:6d:bd:56:e5:68:89:d3:b1:54:a2:b1:a5:a8:cb: 42:9f:be:21:81:8e:82:5b:41:60:99:23:77:57:2e: 9b:10:e9:56:81:6a:20:23:ec:60:43:6b:89:a6:97: a0:66:0e:e6:a5:d7:4c:09:09:d7:73:ac:61:25:3b: 52:74:25:f2:02:cf:7e:e1:94:6b:e7:cf:82:ce:9d: 27:e6:24:8d:18:a7:5b:c8:71:ff:a5:3e:97:13:83: 85:83:31:5c:62:6b:41:bc:c4:f7:a2:78:02:4d:ea: 7a:0d:cd:0b:b9:9e:18:f1:b3:29:be:b1:c9:bf:fc: 81:a7:c6:df:09:61:c4:c2:fc:6a:bb:20:7b:8c:dd: 2b:3a:00:6b:6e:b4:37:8c:84:f9:1d:74:27:30:fe: 63:0f:a6:d7:3d:d1:73:08:c8:13:f8:a7:e1:23:4d: 39:8d:48:8a:fb:0f:93:7a:b4:46:d6:75:0a:df:1d: c5:dc:ff:02:12:48:e0:c0:99:66:ca:89:4e:5d:fb: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:24:F5:5D:83:65:4D:81:48:7D:83:01:41:D2:28:65:E0:BE:55:BD X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3a00::/40 Signature Algorithm: sha256WithRSAEncryption 6e:e7:d7:77:52:fd:b6:19:e3:70:33:66:00:97:9c:62:7c:08: b9:b5:36:aa:7d:31:f3:7a:a2:b7:0c:2d:b4:09:a5:16:2b:14: 87:ae:00:9e:5c:f4:7c:5e:9d:cd:5f:08:56:51:ac:4e:5a:fa: f2:40:55:c7:29:85:81:08:2b:7d:da:19:bc:cb:e3:61:5f:9b: ff:f9:cc:7d:e4:26:ba:14:53:34:c2:e4:1b:7e:4a:7a:bd:2b: 05:13:a2:84:d9:93:84:54:bd:34:42:39:f9:7e:55:ff:f7:cf: f8:2f:5d:c5:68:ba:db:f1:cb:58:10:ed:aa:d8:91:22:24:d8: 86:a1:ed:76:a4:4c:93:be:68:de:50:e3:08:4b:a3:a8:54:cc: 4b:9d:3c:76:6e:b5:a4:a3:ab:af:db:50:7c:dc:4f:80:35:59: d6:42:50:1d:e0:3b:e8:d7:8f:55:06:c0:c9:0a:b2:6e:2f:34: 67:13:3c:a5:31:d7:2f:25:a8:4a:8d:ae:ae:93:ab:0c:12:28: 10:6f:4f:30:f8:8c:bd:33:e5:0e:d4:65:64:1c:9d:79:8e:a2: 63:80:2d:c2:de:da:0e:35:12:13:33:39:9f:96:cc:77:b7:70: d9:96:45:b2:4c:a6:4a:c1:8e:c0:1a:a0:fb:86:8e:fc:f1:f9: d2:e3:5a:3e -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTIhHUscoC8cbYdm3c9WJj7rKsE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDNaFw0yNzAxMDUyMDQ5MDNaMDMxMTAvBgNV BAMTKDI1MjRGNTVEODM2NTREODE0ODdEODMwMTQxRDIyODY1RTBCRTU1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOG2nq1CGxnP6HNxJHJ78CWjIj wsowAb3fEtnRRcUE4H7vAvL3qHQrIksK7xnw881vTXV+FtgR9lxWMxRtvVblaInT sVSisaWoy0KfviGBjoJbQWCZI3dXLpsQ6VaBaiAj7GBDa4mml6BmDual10wJCddz rGElO1J0JfICz37hlGvnz4LOnSfmJI0Yp1vIcf+lPpcTg4WDMVxia0G8xPeieAJN 6noNzQu5nhjxsym+scm//IGnxt8JYcTC/Gq7IHuM3Ss6AGtutDeMhPkddCcw/mMP ptc90XMIyBP4p+EjTTmNSIr7D5N6tEbWdQrfHcXc/wISSODAmWbKiU5d+7uZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUJST1XYNlTYFIfYMBQdIoZeC+Vb0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2 MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QOjANBgkqhkiG9w0BAQsFAAOCAQEAbufXd1L9thnjcDNmAJecYnwI ubU2qn0x83qitwwttAmlFisUh64Anlz0fF6dzV8IVlGsTlr68kBVxymFgQgrfdoZ vMvjYV+b//nMfeQmuhRTNMLkG35Ker0rBROihNmThFS9NEI5+X5V//fP+C9dxWi6 2/HLWBDtqtiRIiTYhqHtdqRMk75o3lDjCEujqFTMS508dm61pKOrr9tQfNxPgDVZ 1kJQHeA76NePVQbAyQqybi80ZxM8pTHXLyWoSo2urpOrDBIoEG9PMPiMvTPlDtRl ZBydeY6iY4Atwt7aDjUSEzM5n5bMd7dw2ZZFskymSsGOwBqg+4aO/PH50uNaPg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client