This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: ZyDsces+KTPqVbZaDOrPjIJPZ+lFh4Lc8zkSSYOp6q0= Subject key identifier: 7D:5F:EB:AA:AC:E7:CE:5C:83:CE:7D:F1:AC:7C:17:49:D0:D4:25:F9 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 4E80EC393CF1EB1A2C547D7CF95A855E2D219F7C Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:11 +0000 ROA not before: Tue 06 Jan 2026 20:44:11 +0000 ROA not after: Tue 05 Jan 2027 20:49:11 +0000 asID: 273072 IP address blocks: 2803:cf90:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:80:ec:39:3c:f1:eb:1a:2c:54:7d:7c:f9:5a:85:5e:2d:21:9f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:11 2026 GMT Not After : Jan 5 20:49:11 2027 GMT Subject: CN=7D5FEBAAACE7CE5C83CE7DF1AC7C1749D0D425F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:47:75:95:a7:7f:41:92:7f:97:7d:17:2e: 30:ef:51:24:72:91:73:ad:2c:9f:1c:de:92:aa:a9: de:6e:7d:91:d4:02:bb:c6:9d:8e:e3:b1:76:03:4d: 7a:ab:88:7e:dc:24:66:8a:53:42:8e:37:68:23:55: 0a:90:e3:c6:60:34:eb:f0:be:06:35:4a:d0:7a:b1: 42:a9:fd:3e:f9:21:b1:28:d6:76:51:8a:cc:74:8c: 8c:08:cd:84:db:74:18:af:8b:9b:63:4e:2f:6d:35: 2c:72:60:0e:73:a7:a5:df:44:47:83:03:98:87:b6: 5a:8b:54:40:78:05:dd:7e:d6:2e:c1:8a:9e:ab:99: 96:48:c5:ca:d4:f8:3e:68:3e:f4:75:15:a3:c2:be: 29:c7:52:5c:fe:7f:3b:65:72:d0:56:e4:96:56:80: ae:8c:7b:e2:ae:51:48:03:f6:e2:73:6a:92:13:79: 6f:42:79:07:12:4b:93:98:8b:c7:a6:15:13:77:5b: 2f:ba:55:d7:41:eb:e2:e1:e6:5c:7d:a5:2c:39:af: de:6e:1a:d5:a3:0a:db:71:2c:80:f4:9c:0d:74:d6: 11:34:65:d2:b2:2b:19:77:98:65:6c:73:16:07:86: 73:f4:10:cd:19:39:d4:ce:8e:dd:14:d0:89:10:43: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5F:EB:AA:AC:E7:CE:5C:83:CE:7D:F1:AC:7C:17:49:D0:D4:25:F9 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4100::/40 Signature Algorithm: sha256WithRSAEncryption 26:33:2c:56:cf:41:d5:33:5c:9f:f7:64:f9:2d:23:79:e1:be: 6e:ad:5e:82:eb:14:76:e0:56:a0:c4:78:ee:01:11:63:62:5a: ee:50:d5:37:cb:54:b0:2f:89:42:b7:e4:eb:a7:21:43:3a:97: db:42:fb:6f:f1:96:11:78:9b:a9:7a:3c:fb:89:71:55:7f:ba: 8c:8f:ba:31:dc:8c:de:0c:e3:93:5e:34:85:9b:c7:13:76:62: 1c:3c:bc:72:47:c1:32:d3:a6:93:49:b8:b7:83:25:6a:71:64: 63:ca:7d:ab:bf:03:a2:0f:d7:fd:7c:90:e6:2f:bd:56:ec:67: 11:c1:88:e8:28:3e:bd:58:4a:a7:1e:30:4f:69:92:3f:b2:b4: ad:69:51:08:30:eb:3d:fc:f1:72:bb:81:c6:d0:b2:ec:56:ce: d9:44:ab:53:82:06:95:57:69:6d:ca:5a:35:52:65:5b:6a:5e: cb:96:99:89:a4:f3:e0:df:62:04:10:8a:33:3f:93:8e:3c:75: 79:c5:05:65:e9:70:88:07:6b:d6:1d:fe:7d:42:a8:23:22:d2: 57:75:de:23:da:eb:09:33:2d:c3:19:aa:84:3e:45:e9:25:86: 8e:b9:15:3f:76:92:03:ee:e4:20:fb:d5:9c:05:f8:5e:17:bd: 2c:22:7c:71 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUToDsOTzx6xosVH18+VqFXi0hn3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTFaFw0yNzAxMDUyMDQ5MTFaMDMxMTAvBgNV BAMTKDdENUZFQkFBQUNFN0NFNUM4M0NFN0RGMUFDN0MxNzQ5RDBENDI1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vkd1lad/QZJ/l30XLjDvUSRy kXOtLJ8c3pKqqd5ufZHUArvGnY7jsXYDTXqriH7cJGaKU0KON2gjVQqQ48ZgNOvw vgY1StB6sUKp/T75IbEo1nZRisx0jIwIzYTbdBivi5tjTi9tNSxyYA5zp6XfREeD A5iHtlqLVEB4Bd1+1i7Bip6rmZZIxcrU+D5oPvR1FaPCvinHUlz+fztlctBW5JZW gK6Me+KuUUgD9uJzapITeW9CeQcSS5OYi8emFRN3Wy+6VddB6+Lh5lx9pSw5r95u GtWjCttxLID0nA101hE0ZdKyKxl3mGVscxYHhnP0EM0ZOdTOjt0U0IkQQ95dAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfV/rqqznzlyDzn3xrHwXSdDUJfkwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QQTANBgkqhkiG9w0BAQsFAAOCAQEAJjMsVs9B1TNcn/dk+S0jeeG+ bq1egusUduBWoMR47gERY2Ja7lDVN8tUsC+JQrfk66chQzqX20L7b/GWEXibqXo8 +4lxVX+6jI+6MdyM3gzjk140hZvHE3ZiHDy8ckfBMtOmk0m4t4MlanFkY8p9q78D og/X/XyQ5i+9VuxnEcGI6Cg+vVhKpx4wT2mSP7K0rWlRCDDrPfzxcruBxtCy7FbO 2USrU4IGlVdpbcpaNVJlW2pey5aZiaTz4N9iBBCKMz+Tjjx1ecUFZelwiAdr1h3+ fUKoIyLSV3XeI9rrCTMtwxmqhD5F6SWGjrkVP3aSA+7kIPvVnAX4Xhe9LCJ8cQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client