This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: QompVpBwDbzOcmz0XrEgQPvQCR0dtjM3SjbMbsDYNtk= Subject key identifier: 46:76:FD:2A:5E:0A:C9:C4:DD:7E:66:BA:41:E6:AE:84:B3:3B:D0:A6 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 774E87365B886FA34C38DDA2FFB3F16F57A5D275 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:04 +0000 ROA not before: Tue 06 Jan 2026 20:44:04 +0000 ROA not after: Tue 05 Jan 2027 20:49:04 +0000 asID: 273072 IP address blocks: 2803:cf90:3c00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4e:87:36:5b:88:6f:a3:4c:38:dd:a2:ff:b3:f1:6f:57:a5:d2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:04 2026 GMT Not After : Jan 5 20:49:04 2027 GMT Subject: CN=4676FD2A5E0AC9C4DD7E66BA41E6AE84B33BD0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:df:92:a6:66:f0:08:35:1f:bc:c1:f5:5d:53: b7:c1:3b:6f:45:6f:1b:9e:6c:d3:a1:f0:88:51:8e: ce:c0:a5:82:3c:08:08:e3:ff:11:10:ae:1a:56:94: 03:bd:23:97:96:f3:18:3a:55:85:f8:58:d9:91:b6: b2:92:5b:5a:88:0a:5e:03:18:7f:a3:f7:24:a1:81: 5f:d6:88:4a:98:96:0f:20:1a:d0:51:fe:77:68:d6: ef:24:d8:5c:4a:db:38:69:ee:e7:99:ae:db:35:e3: 0f:5f:bc:d3:a3:db:4c:b6:f5:a9:6c:04:d5:83:c7: 07:32:c2:e8:94:ab:9f:86:a2:51:20:52:a5:51:50: 5a:f6:3e:e1:5c:94:e4:eb:28:93:5a:15:b1:96:ba: 2e:21:d8:10:9c:7d:0e:a6:3b:7a:c5:d5:da:6e:f9: b8:cd:05:f8:98:f5:2f:b8:86:e8:cd:b8:38:34:04: e5:b3:15:d7:32:86:7a:ed:64:e9:a0:c2:84:03:02: 26:64:5a:4c:54:3b:68:e4:e9:db:69:32:3d:67:22: b3:1a:53:06:9b:d8:a1:c8:9c:50:b0:dd:24:25:b2: 00:bc:9b:1f:0b:a7:73:cb:9e:58:90:bd:7b:a9:03: 35:03:f1:f2:43:4e:0d:6a:eb:b3:86:09:fe:b4:88: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:76:FD:2A:5E:0A:C9:C4:DD:7E:66:BA:41:E6:AE:84:B3:3B:D0:A6 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3c00::/40 Signature Algorithm: sha256WithRSAEncryption 9a:95:87:cb:97:f3:b5:eb:d1:e8:1c:fd:08:56:cb:5b:be:17: 4d:04:3a:2b:a5:7b:8b:07:90:c2:ab:6c:a9:f2:dd:fb:0c:18: b0:1d:6d:9d:bd:d5:98:1e:96:c1:8c:73:09:33:a4:88:bc:96: 80:fc:f7:7b:1c:eb:6a:2d:64:d3:69:2a:ff:fe:7b:ec:86:07: ff:1a:cb:e2:5a:df:ff:cf:68:12:c1:05:5a:d9:76:65:53:20: 86:e0:4b:f3:41:28:4a:d4:9f:da:01:7a:62:a7:c0:ad:b0:1f: d0:fd:81:4d:3c:1b:a6:3c:f5:b0:2e:5e:0f:ec:5b:ce:7e:c8: 21:b2:12:45:dc:71:46:39:ff:e6:26:cd:53:29:b6:aa:75:f3: 4f:ea:8d:4e:4e:51:7a:38:b0:8c:7a:e7:cd:b1:64:cc:de:0f: db:f2:ef:4e:58:09:aa:9d:f3:9b:4c:75:20:0a:c8:12:d2:ac: f7:f7:1e:da:8e:8e:7b:1c:ba:f3:16:f2:ac:71:e5:38:81:04: 85:7e:41:70:2b:a1:2a:73:ec:11:d9:5e:c6:7e:26:d5:2f:90: 30:c0:cb:54:39:18:c1:02:a2:3d:de:b1:ff:b2:69:53:d4:9b: 9c:ec:fb:55:e7:e4:31:05:98:db:93:5f:6d:a6:e3:d0:6b:66: eb:ef:96:9b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUd06HNluIb6NMON2i/7Pxb1el0nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDRaFw0yNzAxMDUyMDQ5MDRaMDMxMTAvBgNV BAMTKDQ2NzZGRDJBNUUwQUM5QzRERDdFNjZCQTQxRTZBRTg0QjMzQkQwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt35KmZvAINR+8wfVdU7fBO29F bxuebNOh8IhRjs7ApYI8CAjj/xEQrhpWlAO9I5eW8xg6VYX4WNmRtrKSW1qICl4D GH+j9yShgV/WiEqYlg8gGtBR/ndo1u8k2FxK2zhp7ueZrts14w9fvNOj20y29als BNWDxwcywuiUq5+GolEgUqVRUFr2PuFclOTrKJNaFbGWui4h2BCcfQ6mO3rF1dpu +bjNBfiY9S+4hujNuDg0BOWzFdcyhnrtZOmgwoQDAiZkWkxUO2jk6dtpMj1nIrMa Uwab2KHInFCw3SQlsgC8mx8Lp3PLnliQvXupAzUD8fJDTg1q67OGCf60iFSPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQURnb9Kl4KycTdfma6QeauhLM70KYwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2 MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QPDANBgkqhkiG9w0BAQsFAAOCAQEAmpWHy5fztevR6Bz9CFbLW74X TQQ6K6V7iweQwqtsqfLd+wwYsB1tnb3VmB6WwYxzCTOkiLyWgPz3exzrai1k02kq //577IYH/xrL4lrf/89oEsEFWtl2ZVMghuBL80EoStSf2gF6YqfArbAf0P2BTTwb pjz1sC5eD+xbzn7IIbISRdxxRjn/5ibNUym2qnXzT+qNTk5RejiwjHrnzbFkzN4P 2/LvTlgJqp3zm0x1IArIEtKs9/ce2o6Oexy68xbyrHHlOIEEhX5BcCuhKnPsEdle xn4m1S+QMMDLVDkYwQKiPd6x/7JpU9SbnOz7VefkMQWY25Nfbabj0Gtm6++Wmw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:10 2026 by rpki-client