This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: U7vsR0WP5Bdwy/mgMa8bzMUWbB6juzpd9K1FQw+ev/s= Subject key identifier: 5A:D9:5B:F8:68:CB:3D:DC:67:B1:EE:77:27:A0:DB:7C:BC:2A:D6:FD Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 3A2D626639B7F384184E7291534395EF20612587 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:20 +0000 ROA not before: Tue 06 Jan 2026 20:44:20 +0000 ROA not after: Tue 05 Jan 2027 20:49:20 +0000 asID: 273072 IP address blocks: 2803:cf90:4200::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2d:62:66:39:b7:f3:84:18:4e:72:91:53:43:95:ef:20:61:25:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:20 2026 GMT Not After : Jan 5 20:49:20 2027 GMT Subject: CN=5AD95BF868CB3DDC67B1EE7727A0DB7CBC2AD6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:74:1f:66:56:84:41:6c:a7:f0:a4:c4:34: ab:79:ba:00:57:58:70:72:87:c9:c7:26:1b:9a:32: 29:c8:c2:83:b9:04:08:13:7c:66:82:e0:a5:c5:c3: 74:49:af:b3:d0:ed:f7:3a:e4:34:2f:31:df:4e:58: ae:22:1f:f7:00:30:e4:92:32:fd:56:50:61:82:82: 22:f3:28:5c:f7:0c:fe:2a:85:d4:0c:8b:fe:8c:f4: 77:0b:56:0b:50:5c:a2:40:e6:d8:81:4b:16:70:e9: 7c:48:72:94:e4:f9:c0:4e:18:ea:e2:50:5d:9a:7d: 39:74:7a:db:3d:67:0d:fa:5e:ba:07:dc:6d:35:f4: 49:a5:f5:bd:70:e3:8c:7c:51:51:d4:d9:f0:d4:78: 60:77:80:22:4e:ea:c5:23:94:ec:05:49:16:6d:e1: a6:a7:91:0a:84:cc:d8:b0:45:fe:27:a2:46:51:58: 5d:05:7a:81:a6:92:17:90:21:a5:05:bd:09:6d:20: d5:87:d6:fa:cf:d5:31:cb:d5:9d:e6:5b:62:b3:e8: f2:c1:8a:2e:9f:2c:79:83:f6:36:b6:98:88:0d:4f: ea:a1:68:d5:0c:f6:c9:0e:6a:50:20:51:9a:ba:06: 72:3d:20:47:0c:9f:0d:b4:53:bf:b8:c0:98:b0:3c: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:5B:F8:68:CB:3D:DC:67:B1:EE:77:27:A0:DB:7C:BC:2A:D6:FD X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4200::/40 Signature Algorithm: sha256WithRSAEncryption 71:31:c4:f3:3f:2b:13:52:50:ed:fb:aa:bc:bc:21:aa:a1:9a: 52:be:04:3d:29:34:ef:6c:ef:ff:24:cb:d1:9c:de:ce:82:0c: 77:73:2a:e0:fe:d4:94:bf:2f:1b:74:74:c8:75:47:34:c8:21: 4f:06:79:7a:57:2d:80:c2:b3:98:16:6c:8a:55:a8:34:a1:6d: ba:0b:68:2c:a3:df:18:e2:29:fe:bc:bc:d7:09:ee:c2:63:fc: dc:89:48:5f:d6:00:82:03:9b:ed:73:84:db:20:df:3a:51:f3: a1:32:f5:5d:c8:44:94:12:db:e1:e5:6d:a8:ca:2b:b8:b0:2a: 8a:f6:44:55:42:04:73:13:13:d5:5b:b9:71:23:72:32:4e:d8: 19:50:20:fd:f8:60:0c:9a:11:d0:ce:cf:06:23:9d:b1:60:58: bd:ce:ce:1c:6c:d3:e2:1b:b5:04:fd:9a:12:fa:82:f2:a1:ad: bc:22:c8:3f:66:77:a0:7e:61:c8:af:70:be:9f:39:59:8a:6c: 45:7d:17:d2:a7:9e:f9:32:3b:54:c9:bf:6f:75:ee:c2:a1:13: 07:6e:cf:ea:d8:f4:ba:ae:aa:cd:99:13:52:3b:7d:55:8a:19: 0c:42:96:af:76:92:69:f3:f3:97:34:ca:68:6b:6c:42:0d:6d: 2f:b0:96:6b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUOi1iZjm384QYTnKRU0OV7yBhJYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MjBaFw0yNzAxMDUyMDQ5MjBaMDMxMTAvBgNV BAMTKDVBRDk1QkY4NjhDQjNEREM2N0IxRUU3NzI3QTBEQjdDQkMyQUQ2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPtnQfZlaEQWyn8KTENKt5ugBX WHByh8nHJhuaMinIwoO5BAgTfGaC4KXFw3RJr7PQ7fc65DQvMd9OWK4iH/cAMOSS Mv1WUGGCgiLzKFz3DP4qhdQMi/6M9HcLVgtQXKJA5tiBSxZw6XxIcpTk+cBOGOri UF2afTl0ets9Zw36XroH3G019Eml9b1w44x8UVHU2fDUeGB3gCJO6sUjlOwFSRZt 4aankQqEzNiwRf4nokZRWF0FeoGmkheQIaUFvQltINWH1vrP1THL1Z3mW2Kz6PLB ii6fLHmD9ja2mIgNT+qhaNUM9skOalAgUZq6BnI9IEcMnw20U7+4wJiwPHurAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWtlb+GjLPdxnse53J6DbfLwq1v0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QQjANBgkqhkiG9w0BAQsFAAOCAQEAcTHE8z8rE1JQ7fuqvLwhqqGa Ur4EPSk072zv/yTL0ZzezoIMd3Mq4P7UlL8vG3R0yHVHNMghTwZ5elctgMKzmBZs ilWoNKFtugtoLKPfGOIp/ry81wnuwmP83IlIX9YAggOb7XOE2yDfOlHzoTL1XchE lBLb4eVtqMoruLAqivZEVUIEcxMT1Vu5cSNyMk7YGVAg/fhgDJoR0M7PBiOdsWBY vc7OHGzT4hu1BP2aEvqC8qGtvCLIP2Z3oH5hyK9wvp85WYpsRX0X0qee+TI7VMm/ b3XuwqETB27P6tj0uq6qzZkTUjt9VYoZDEKWr3aSafPzlzTKaGtsQg1tL7CWaw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client