This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: s/c3i/3eau8BsOsL6J26kIc1y/9Wbt2eIomzC+2+zBk= Subject key identifier: E0:37:68:8D:84:95:ED:0F:43:CA:C1:7C:C5:AB:1E:6C:7E:47:1D:C8 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 1F6FB3A798C90FA06D9279C15B1FFFFD87A5C93C Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:16 +0000 ROA not before: Tue 06 Jan 2026 20:44:16 +0000 ROA not after: Tue 05 Jan 2027 20:49:16 +0000 asID: 273072 IP address blocks: 2803:cf90:4300::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6f:b3:a7:98:c9:0f:a0:6d:92:79:c1:5b:1f:ff:fd:87:a5:c9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:16 2026 GMT Not After : Jan 5 20:49:16 2027 GMT Subject: CN=E037688D8495ED0F43CAC17CC5AB1E6C7E471DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:02:69:87:04:7f:c5:9f:6b:43:eb:17:7d: 7c:9a:7a:59:04:a5:a6:5f:7b:3a:3c:65:94:b8:3f: 99:22:4e:ca:6c:92:43:6d:1a:78:dc:89:1b:69:22: 3d:d1:c3:21:93:54:87:b1:d7:ba:4a:34:a2:72:1a: 26:fd:be:30:49:46:27:86:c1:51:ea:3e:74:ce:65: fa:24:ca:d9:05:f8:24:e9:2e:8c:9a:ca:83:5c:7f: 30:81:81:ab:4d:f2:14:a1:e6:e5:58:11:5f:57:a2: ec:e2:b8:07:4e:df:a9:1f:e0:ac:5c:d9:2c:b7:8f: d5:db:ce:73:0d:83:43:b0:9e:6a:33:1c:b7:f1:c9: a2:21:e4:be:e4:f4:90:23:34:1b:26:0b:5e:dc:fb: 19:8a:b0:8e:97:e0:8c:a5:b5:c0:4b:b1:df:fc:31: 72:4e:8a:2c:c7:7b:5e:1a:cd:ad:be:80:5a:3b:80: 38:c6:85:a4:e2:cb:d6:fc:42:8b:ce:93:8d:3d:8a: 70:82:ea:79:8e:30:d8:5e:3e:fc:01:41:09:da:b7: a3:91:88:eb:c3:7f:a5:d6:e9:e2:f8:4b:11:23:42: 1d:92:63:de:a5:93:a7:5a:f4:4e:bc:9b:95:1e:08: 3e:6c:73:8f:9b:26:77:8a:1b:96:4f:99:5f:7a:e2: dc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:37:68:8D:84:95:ED:0F:43:CA:C1:7C:C5:AB:1E:6C:7E:47:1D:C8 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4300::/40 Signature Algorithm: sha256WithRSAEncryption 85:91:60:6d:a6:07:fc:8a:53:73:6f:51:98:ba:08:be:19:da: c7:95:50:dc:a0:39:56:ab:0a:4e:d0:6d:07:97:20:5e:87:97: 37:5e:46:ea:7c:8c:bb:82:d2:f8:91:26:f1:81:4e:66:03:3d: 12:12:40:d6:5f:7b:54:f5:77:54:d0:02:76:7a:ab:27:06:74: c7:5b:c6:e5:c6:00:1b:87:fc:07:ce:fa:73:9f:67:7e:4c:68: c2:3f:80:a1:8c:17:94:91:71:17:2d:63:bf:f0:8d:53:3d:eb: e4:75:03:13:7b:61:83:8d:36:5b:35:81:7c:cc:aa:1d:b4:1c: 2f:ce:42:dc:5c:58:74:12:bd:05:e8:09:5b:72:fd:09:e6:8e: 0c:d2:33:0b:a8:ed:53:b0:ce:de:ae:f1:8a:c1:cd:f6:15:ed: 2b:b9:6c:0d:b6:28:3e:eb:be:d4:29:0e:1f:f1:90:47:6f:a9: 2e:3e:df:04:8b:23:e2:df:c3:3d:1e:7a:56:e7:cd:64:e8:58: eb:41:14:ca:03:c8:18:d4:dc:98:1e:79:13:41:b8:ee:33:82: 7b:ca:50:e8:47:66:bc:31:4a:02:25:63:bd:c6:da:01:2a:44: 81:1b:c3:30:50:28:26:6e:b8:cc:9c:c0:e9:bb:39:68:dc:1b: df:51:9f:b2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUH2+zp5jJD6BtknnBWx///YelyTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTZaFw0yNzAxMDUyMDQ5MTZaMDMxMTAvBgNV BAMTKEUwMzc2ODhEODQ5NUVEMEY0M0NBQzE3Q0M1QUIxRTZDN0U0NzFEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/AJphwR/xZ9rQ+sXfXyaelkE paZfezo8ZZS4P5kiTspskkNtGnjciRtpIj3RwyGTVIex17pKNKJyGib9vjBJRieG wVHqPnTOZfokytkF+CTpLoyayoNcfzCBgatN8hSh5uVYEV9XouziuAdO36kf4Kxc 2Sy3j9XbznMNg0OwnmozHLfxyaIh5L7k9JAjNBsmC17c+xmKsI6X4IyltcBLsd/8 MXJOiizHe14aza2+gFo7gDjGhaTiy9b8QovOk409inCC6nmOMNhePvwBQQnat6OR iOvDf6XW6eL4SxEjQh2SY96lk6da9E68m5UeCD5sc4+bJneKG5ZPmV964txVAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU4DdojYSV7Q9DysF8xasebH5HHcgwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QQzANBgkqhkiG9w0BAQsFAAOCAQEAhZFgbaYH/IpTc29RmLoIvhna x5VQ3KA5VqsKTtBtB5cgXoeXN15G6nyMu4LS+JEm8YFOZgM9EhJA1l97VPV3VNAC dnqrJwZ0x1vG5cYAG4f8B876c59nfkxowj+AoYwXlJFxFy1jv/CNUz3r5HUDE3th g402WzWBfMyqHbQcL85C3FxYdBK9BegJW3L9CeaODNIzC6jtU7DO3q7xisHN9hXt K7lsDbYoPuu+1CkOH/GQR2+pLj7fBIsj4t/DPR56VufNZOhY60EUygPIGNTcmB55 E0G47jOCe8pQ6EdmvDFKAiVjvcbaASpEgRvDMFAoJm64zJzA6bs5aNwb31Gfsg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:10 2026 by rpki-client