This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: l5Mx+Bd6s8diyAH4s+zI5uzn4+O81uWzr3is/r0kMu4= Subject key identifier: 6B:AA:7E:DE:8C:84:AC:1B:2C:20:56:82:8D:C7:C3:08:73:AE:BF:81 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 12F09754A86D6D9A5A49FC0C347E18006EC8C616 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:04 +0000 ROA not before: Tue 06 Jan 2026 20:44:04 +0000 ROA not after: Tue 05 Jan 2027 20:49:04 +0000 asID: 273072 IP address blocks: 2803:cf90:3d00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f0:97:54:a8:6d:6d:9a:5a:49:fc:0c:34:7e:18:00:6e:c8:c6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:04 2026 GMT Not After : Jan 5 20:49:04 2027 GMT Subject: CN=6BAA7EDE8C84AC1B2C2056828DC7C30873AEBF81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:be:0d:d5:4d:53:0f:50:8c:a6:d4:1a:b5: ee:92:07:5b:75:cb:74:64:f5:a6:c3:61:a3:e4:17: ba:03:4c:0c:7a:d3:f8:c7:3b:2e:9d:12:56:16:1d: bd:48:85:07:a5:bb:a4:cf:56:16:8c:64:ac:0f:b2: b8:13:07:7b:19:34:ce:c0:06:9c:50:d4:ba:34:19: e5:82:55:d3:37:60:83:40:ee:cc:7f:2c:4b:86:39: 60:95:dd:1d:68:1c:bd:82:d1:85:15:1d:71:23:f5: aa:cb:3d:d0:28:8d:2f:63:34:ca:fb:21:52:78:fa: b2:c0:0a:af:46:bf:4a:f7:8d:59:d3:03:1d:58:3a: 56:9f:09:5d:fb:62:6b:99:20:90:13:6a:c0:b9:82: 98:c4:cf:47:fa:8d:0d:d5:d7:73:dc:59:d6:45:e8: d3:f5:3b:8e:fc:ea:cc:aa:9f:6c:d8:52:d1:2f:93: 31:1c:84:19:07:dd:6f:bc:12:24:d7:94:12:88:24: 3f:6d:9f:84:8e:38:9e:05:af:30:0f:3e:f7:46:21: d8:8b:32:1b:4b:9d:6a:42:20:dc:b2:d1:69:9e:e2: a5:fa:5c:cf:7c:a9:ee:cd:22:3d:1f:8c:11:ef:af: 72:7e:66:da:f5:7c:11:10:44:b0:9a:cb:3b:72:2d: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AA:7E:DE:8C:84:AC:1B:2C:20:56:82:8D:C7:C3:08:73:AE:BF:81 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3d00::/40 Signature Algorithm: sha256WithRSAEncryption 84:2d:a2:df:62:ed:9c:a5:13:bb:84:dd:ea:5a:1d:2d:23:7c: 02:b9:e9:75:22:11:3d:9b:f4:f7:cf:50:d6:cf:b9:e0:37:26: 32:a6:3a:75:99:12:5c:27:62:0b:9f:88:de:9b:76:6d:f1:2c: d9:0c:f0:44:74:8f:2a:26:77:c5:28:36:0e:9d:0a:e9:a8:9d: 80:12:4f:91:fd:01:6c:b2:1a:f4:13:5e:cf:d1:f9:24:e4:39: 8b:5d:3f:3f:43:82:75:11:7a:5e:b3:bf:dc:45:9d:8e:8e:8f: bc:f2:dc:60:56:6a:89:8d:51:8a:09:c0:90:3a:59:4a:80:9d: 8b:3b:a4:dc:ed:15:a4:e3:fd:98:8b:23:6d:13:a0:90:f7:25: c1:92:b1:b1:85:2b:1d:2f:fa:37:f7:98:82:89:a0:7d:ed:1b: 93:ce:6e:1f:0e:d3:27:61:8a:ec:cf:61:6a:4c:b1:4f:0c:ee: 03:36:39:87:91:23:16:3a:c6:ad:52:5f:59:43:4a:3c:9d:15: af:17:a0:74:da:8e:79:e7:68:e4:f7:78:f7:24:77:f5:74:3a: 6a:42:55:c7:c1:0b:00:9c:78:00:b6:e9:b8:0f:0a:af:6b:f2: 29:4f:6a:77:e5:ba:c5:3e:1e:c3:3b:e9:7a:e6:c4:67:44:ba: 05:f6:eb:cf -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEvCXVKhtbZpaSfwMNH4YAG7IxhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDRaFw0yNzAxMDUyMDQ5MDRaMDMxMTAvBgNV BAMTKDZCQUE3RURFOEM4NEFDMUIyQzIwNTY4MjhEQzdDMzA4NzNBRUJGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGb4N1U1TD1CMptQate6SB1t1 y3Rk9abDYaPkF7oDTAx60/jHOy6dElYWHb1IhQelu6TPVhaMZKwPsrgTB3sZNM7A BpxQ1Lo0GeWCVdM3YINA7sx/LEuGOWCV3R1oHL2C0YUVHXEj9arLPdAojS9jNMr7 IVJ4+rLACq9Gv0r3jVnTAx1YOlafCV37YmuZIJATasC5gpjEz0f6jQ3V13PcWdZF 6NP1O4786syqn2zYUtEvkzEchBkH3W+8EiTXlBKIJD9tn4SOOJ4FrzAPPvdGIdiL MhtLnWpCINyy0Wme4qX6XM98qe7NIj0fjBHvr3J+Ztr1fBEQRLCayztyLdmbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUa6p+3oyErBssIFaCjcfDCHOuv4EwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2 NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QPTANBgkqhkiG9w0BAQsFAAOCAQEAhC2i32LtnKUTu4Td6lodLSN8 ArnpdSIRPZv0989Q1s+54DcmMqY6dZkSXCdiC5+I3pt2bfEs2QzwRHSPKiZ3xSg2 Dp0K6aidgBJPkf0BbLIa9BNez9H5JOQ5i10/P0OCdRF6XrO/3EWdjo6PvPLcYFZq iY1RignAkDpZSoCdizuk3O0VpOP9mIsjbROgkPclwZKxsYUrHS/6N/eYgomgfe0b k85uHw7TJ2GK7M9hakyxTwzuAzY5h5EjFjrGrVJfWUNKPJ0VrxegdNqOeedo5Pd4 9yR39XQ6akJVx8ELAJx4ALbpuA8Kr2vyKU9qd+W6xT4ewzvpeubEZ0S6Bfbrzw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client