This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a336630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: r7In9MVurryXLQMs62kMyTQrpO6E+dkTYf+e9DqwKCw= Subject key identifier: 0A:DD:89:CB:64:E4:CF:F9:E5:3A:E5:A1:EE:C8:6D:D4:5F:98:AF:2D Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 36563AEF6E3E9E8AFB09F2E342DA172AB2540C74 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:00 +0000 ROA not before: Tue 06 Jan 2026 20:44:00 +0000 ROA not after: Tue 05 Jan 2027 20:49:00 +0000 asID: 273072 IP address blocks: 2803:cf90:3f00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:56:3a:ef:6e:3e:9e:8a:fb:09:f2:e3:42:da:17:2a:b2:54:0c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:00 2026 GMT Not After : Jan 5 20:49:00 2027 GMT Subject: CN=0ADD89CB64E4CFF9E53AE5A1EEC86DD45F98AF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:31:77:0f:ee:ec:74:a4:77:8a:56:47:38: 08:6f:58:4e:75:12:0b:b9:9d:ad:bc:4a:0d:ff:29: d2:72:96:fb:65:f7:40:40:36:f9:83:51:1e:ce:2a: fd:f9:39:eb:96:fb:22:8b:5c:95:7e:6b:cc:d8:99: cd:51:56:da:98:fe:d5:c2:fc:f4:a5:58:28:21:40: 73:70:26:aa:db:77:3a:6b:2b:20:9d:3b:a6:58:5a: bd:01:5d:49:00:f4:64:3c:4a:16:e0:ef:1c:af:84: 5d:de:84:33:23:87:60:c5:f8:73:b3:6b:a2:8b:bb: 58:25:aa:7c:7b:e8:9a:6f:0d:52:de:da:68:96:8a: 01:10:47:f2:a2:26:99:52:14:d9:f7:89:eb:cc:f3: 5b:d7:20:0c:88:fd:1f:85:59:77:c5:51:fe:5b:d4: cf:00:ee:9d:61:73:96:a5:6b:52:47:cb:a6:2f:e6: 51:97:73:b7:43:6b:4a:8c:b4:45:9a:6f:a6:8e:b4: 83:4f:ec:44:72:50:1e:f8:74:5d:37:9c:e1:5e:fa: 05:38:e6:7f:ac:46:14:9a:8a:a2:7f:3e:1e:79:d8: b0:87:9f:72:a6:59:6e:82:54:6c:4d:9d:fe:ac:ee: 06:44:85:48:f6:4b:9c:3b:57:86:e0:71:e7:67:32: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:89:CB:64:E4:CF:F9:E5:3A:E5:A1:EE:C8:6D:D4:5F:98:AF:2D X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 60:07:82:d5:97:91:62:23:96:04:fb:cb:38:29:5b:96:17:e9: 62:2e:f5:2b:cb:19:09:1b:e2:f6:bc:90:d4:7e:d2:7a:29:a3: c2:c1:fd:55:58:dd:b5:69:04:e8:ae:07:09:1a:d8:5f:ae:4b: e5:2b:66:2d:ea:1a:48:45:2d:e9:3c:bd:4c:cb:1f:5a:cd:7f: cb:92:f9:3b:a0:b9:02:84:9d:19:a9:09:c2:1c:b6:49:f0:3b: e7:90:64:87:f5:20:b4:d3:dc:f1:d2:42:53:29:55:fc:7d:06: 5e:65:a6:0d:a1:08:63:79:2c:14:7c:18:01:0e:e2:88:ed:5b: 03:e3:df:b8:b2:25:f6:15:e8:3a:61:42:b4:c9:d6:e8:52:b2: 85:f6:00:db:9d:d1:70:83:f1:27:07:8c:d2:9a:38:28:c8:9b: 73:5a:60:98:cf:c1:f0:86:be:c7:67:ce:2d:3f:a4:8d:49:ef: 8e:f0:e3:07:09:40:d7:fc:00:c8:43:30:ae:c1:bc:46:61:dc: 17:ef:50:b2:6d:27:bf:ea:6f:40:67:e8:84:f5:fe:7d:97:c3: 2d:b4:4c:d1:f7:e4:db:6f:39:1f:fa:77:13:67:6b:46:ea:05: 5c:c6:52:b9:76:11:ea:99:5c:5d:4f:66:95:79:b6:24:f1:3d: 9e:f5:d0:5f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNlY6724+nor7CfLjQtoXKrJUDHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDBaFw0yNzAxMDUyMDQ5MDBaMDMxMTAvBgNV BAMTKDBBREQ4OUNCNjRFNENGRjlFNTNBRTVBMUVFQzg2REQ0NUY5OEFGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYTF3D+7sdKR3ilZHOAhvWE51 Egu5na28Sg3/KdJylvtl90BANvmDUR7OKv35OeuW+yKLXJV+a8zYmc1RVtqY/tXC /PSlWCghQHNwJqrbdzprKyCdO6ZYWr0BXUkA9GQ8Shbg7xyvhF3ehDMjh2DF+HOz a6KLu1glqnx76JpvDVLe2miWigEQR/KiJplSFNn3ievM81vXIAyI/R+FWXfFUf5b 1M8A7p1hc5ala1JHy6Yv5lGXc7dDa0qMtEWab6aOtINP7ERyUB74dF03nOFe+gU4 5n+sRhSaiqJ/Ph552LCHn3KmWW6CVGxNnf6s7gZEhUj2S5w7V4bgcednMlgPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUCt2Jy2Tkz/nlOuWh7sht1F+Yry0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2 NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QPzANBgkqhkiG9w0BAQsFAAOCAQEAYAeC1ZeRYiOWBPvLOClblhfp Yi71K8sZCRvi9ryQ1H7SeimjwsH9VVjdtWkE6K4HCRrYX65L5StmLeoaSEUt6Ty9 TMsfWs1/y5L5O6C5AoSdGakJwhy2SfA755Bkh/UgtNPc8dJCUylV/H0GXmWmDaEI Y3ksFHwYAQ7iiO1bA+PfuLIl9hXoOmFCtMnW6FKyhfYA253RcIPxJweM0po4KMib c1pgmM/B8Ia+x2fOLT+kjUnvjvDjBwlA1/wAyEMwrsG8RmHcF+9Qsm0nv+pvQGfo hPX+fZfDLbRM0ffk2285H/p3E2drRuoFXMZSuXYR6plcXU9mlXm2JPE9nvXQXw== -----END CERTIFICATE-----Generated at Mon Jan 12 15:20:54 2026 by rpki-client