This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: z8KIBEHt8Y8Zi9IOFaygHqpnk+BQ9qS7UeT/P0QTGsE= Subject key identifier: 33:7A:55:CB:CE:1A:1B:FB:23:51:65:7E:AE:4C:F4:E0:0C:9E:16:F2 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 1EC32E68D1C3B509BA2752D6093574A802C6827A Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:15 +0000 ROA not before: Tue 06 Jan 2026 20:44:15 +0000 ROA not after: Tue 05 Jan 2027 20:49:15 +0000 asID: 273072 IP address blocks: 2803:cf90:3b00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c3:2e:68:d1:c3:b5:09:ba:27:52:d6:09:35:74:a8:02:c6:82:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:15 2026 GMT Not After : Jan 5 20:49:15 2027 GMT Subject: CN=337A55CBCE1A1BFB2351657EAE4CF4E00C9E16F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8b:72:fa:f7:4d:4e:0a:6f:49:ba:cf:df:02: bc:ba:e5:4d:05:08:0a:84:87:67:93:5e:04:5f:de: aa:59:49:66:ec:b7:d7:cf:db:a9:7d:76:4d:3b:43: 9f:58:0a:bd:d6:fd:ff:74:99:7a:ad:54:9f:f8:a0: f7:b9:c0:5d:16:c4:20:74:82:27:a5:9d:32:dc:a0: ca:77:27:68:9f:59:d5:89:db:0a:9a:31:2c:78:b4: 34:fd:e3:84:cd:da:9b:95:99:32:61:74:c5:6e:c2: 14:ea:94:84:f7:94:b0:db:79:f3:d1:ea:05:dd:f0: d4:fd:b0:0d:82:f6:ca:98:7f:11:d5:55:e9:2f:29: 38:1f:90:17:2e:dd:76:79:25:8f:c2:a1:0b:d7:58: 92:db:03:36:15:36:9e:ab:dc:c5:1b:a9:0a:72:74: 00:6b:b7:d2:75:30:94:8f:b0:27:f4:f4:c6:59:6b: de:97:d7:b1:89:64:63:4e:9e:97:f4:65:6b:8d:61: d4:ea:b1:83:d6:c9:b7:b9:4f:3c:72:88:42:7f:0f: e7:ab:57:d4:2f:fe:77:ca:03:d0:7f:9a:9e:67:22: 6d:97:ac:d1:bb:14:2c:90:63:f7:48:7d:28:da:54: ee:c3:53:43:3e:b4:f1:90:bd:94:6b:cc:ad:15:84: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7A:55:CB:CE:1A:1B:FB:23:51:65:7E:AE:4C:F4:E0:0C:9E:16:F2 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3b00::/40 Signature Algorithm: sha256WithRSAEncryption 06:83:c7:46:a3:ff:1d:80:b3:1d:fb:42:80:69:8a:7b:60:f5: 25:08:e8:0f:e2:9a:9e:1d:96:f6:a9:9e:eb:b7:81:e8:b6:55: 6b:0c:cb:7f:b6:90:cc:ef:7c:fd:89:8f:f8:b8:b4:37:30:95: 56:75:5e:64:73:4c:3b:17:8d:6b:24:e1:28:b9:09:8c:e8:48: cd:89:fb:56:cf:de:ee:74:f3:c8:cf:57:b0:08:da:4e:f8:d5: 9e:b7:13:42:ec:32:e5:85:76:0d:d1:13:d6:35:7a:4a:00:ca: 99:49:da:ee:57:2f:f9:39:ff:6c:c6:a2:ab:ff:ce:61:82:7d: 74:94:e7:ee:bd:10:95:60:3e:4b:3e:0e:7f:8d:08:c3:d1:b1: a8:57:68:4d:c9:c8:7c:12:de:c1:3e:c7:79:71:9b:2a:ab:52: cd:a3:dc:57:20:25:93:97:1d:64:41:07:6a:eb:9c:82:d6:7d: ef:d0:e2:ae:a1:ef:9a:b1:d7:cc:89:69:fd:72:4a:60:9f:8e: 74:d8:26:a0:fc:36:c5:65:27:55:ce:3f:ef:3a:88:1a:1e:1d: 6d:b8:4c:05:b0:05:47:c2:bb:82:91:81:4b:12:0c:56:fc:d1: 86:b8:d3:e1:94:fe:0e:83:f2:dc:01:26:0a:05:5e:5a:e0:e5: 59:82:00:ed -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHsMuaNHDtQm6J1LWCTV0qALGgnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTVaFw0yNzAxMDUyMDQ5MTVaMDMxMTAvBgNV BAMTKDMzN0E1NUNCQ0UxQTFCRkIyMzUxNjU3RUFFNENGNEUwMEM5RTE2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCai3L6901OCm9Jus/fAry65U0F CAqEh2eTXgRf3qpZSWbst9fP26l9dk07Q59YCr3W/f90mXqtVJ/4oPe5wF0WxCB0 gielnTLcoMp3J2ifWdWJ2wqaMSx4tDT944TN2puVmTJhdMVuwhTqlIT3lLDbefPR 6gXd8NT9sA2C9sqYfxHVVekvKTgfkBcu3XZ5JY/CoQvXWJLbAzYVNp6r3MUbqQpy dABrt9J1MJSPsCf09MZZa96X17GJZGNOnpf0ZWuNYdTqsYPWybe5TzxyiEJ/D+er V9Qv/nfKA9B/mp5nIm2XrNG7FCyQY/dIfSjaVO7DU0M+tPGQvZRrzK0VhKxBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUM3pVy84aG/sjUWV+rkz04AyeFvIwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2 MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QOzANBgkqhkiG9w0BAQsFAAOCAQEABoPHRqP/HYCzHftCgGmKe2D1 JQjoD+Kanh2W9qme67eB6LZVawzLf7aQzO98/YmP+Li0NzCVVnVeZHNMOxeNayTh KLkJjOhIzYn7Vs/e7nTzyM9XsAjaTvjVnrcTQuwy5YV2DdET1jV6SgDKmUna7lcv +Tn/bMaiq//OYYJ9dJTn7r0QlWA+Sz4Of40Iw9GxqFdoTcnIfBLewT7HeXGbKqtS zaPcVyAlk5cdZEEHauucgtZ979DirqHvmrHXzIlp/XJKYJ+OdNgmoPw2xWUnVc4/ 7zqIGh4dbbhMBbAFR8K7gpGBSxIMVvzRhrjT4ZT+DoPy3AEmCgVeWuDlWYIA7Q== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:07 2026 by rpki-client