This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: KenGMUi08lshKfbRRTfDmzqAlS+TCDgBHVrepTBq9Cw= Subject key identifier: AB:49:B2:B3:22:7E:20:1B:A6:01:80:19:9F:5D:15:3D:CD:4F:D8:FC Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 7D16A8290A98F828CA1C37D85F43BF4130D1C3D9 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:13 +0000 ROA not before: Tue 06 Jan 2026 20:44:13 +0000 ROA not after: Tue 05 Jan 2027 20:49:13 +0000 asID: 273072 IP address blocks: 2803:cf90:4400::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:16:a8:29:0a:98:f8:28:ca:1c:37:d8:5f:43:bf:41:30:d1:c3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:13 2026 GMT Not After : Jan 5 20:49:13 2027 GMT Subject: CN=AB49B2B3227E201BA60180199F5D153DCD4FD8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:d8:9d:cd:c6:bd:be:81:ce:9c:aa:d7:8c: 79:29:a9:91:a6:1f:64:f7:0b:1f:38:60:e4:ea:68: c5:a6:73:cb:7b:96:14:0e:7f:41:82:1b:9f:ba:fa: cc:66:3a:61:c6:9b:97:b5:10:eb:99:e3:1e:b6:05: d8:47:31:e0:d9:4a:bb:96:11:42:20:f6:d9:62:db: f5:b3:45:2d:a8:b4:79:43:d2:fd:11:15:6f:f3:6d: f0:a6:ea:ad:51:a4:e1:ca:2d:bb:cf:b9:3b:c1:6e: 93:8e:af:59:cc:05:20:c2:02:ea:bb:07:5f:9d:d2: 84:f8:12:fb:cf:e5:ad:b9:cd:aa:ef:23:29:2f:88: 4a:fb:57:e4:09:7d:0a:3c:1f:98:81:9d:29:d9:d2: a4:d9:b2:65:80:d0:a4:fd:35:29:9f:28:a3:7f:71: 13:d5:9b:10:e8:45:f7:3e:0e:78:8d:85:02:6a:47: 4f:02:42:e4:a6:07:a1:43:c2:7b:dc:e1:c6:59:b0: c1:11:cd:f5:1d:51:c4:ff:30:35:07:80:58:42:22: d9:9c:ff:9d:ff:ae:18:3c:7c:46:d5:56:02:53:64: a5:77:67:da:c6:b6:3c:ee:ee:a7:c4:7c:3d:b6:fb: 06:4f:7f:93:df:5b:10:14:ef:37:16:41:62:26:3b: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:B2:B3:22:7E:20:1B:A6:01:80:19:9F:5D:15:3D:CD:4F:D8:FC X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4400::/40 Signature Algorithm: sha256WithRSAEncryption 89:74:df:08:20:3a:b4:ef:ca:25:c7:48:8f:2c:ae:ce:4d:79: 0b:7a:d7:e6:56:eb:0e:1f:c8:a0:7c:62:69:bb:65:47:e3:aa: 9f:3a:10:b7:72:42:65:4a:2f:d8:9b:a1:2f:7f:7d:d9:f2:f6: 2e:7a:11:9f:a8:ca:25:f4:44:4f:e9:ce:fd:74:09:2a:ca:7f: 91:92:66:9a:e7:df:79:90:43:c9:23:5d:5d:f7:d5:48:15:75: eb:5a:6d:9e:0d:4a:3a:1f:0a:6f:bf:43:06:d7:24:0b:9f:50: a5:63:41:f1:24:d8:83:db:03:7e:1d:19:c0:d7:44:80:c5:eb: 99:4e:d9:cf:63:2c:5b:eb:95:f2:42:18:ea:10:3b:78:e3:ef: 7b:af:81:4a:70:8f:c2:25:89:c1:df:65:8e:78:78:a0:05:67: b0:37:19:4a:fb:f1:b2:70:ca:48:3b:ee:75:a8:63:96:64:75: 00:ae:92:ef:30:f8:98:e1:c7:8a:7c:f9:49:83:da:27:e6:cc: 9f:ca:28:fe:0a:f2:64:9f:a1:ff:06:d2:b3:96:b3:12:d1:aa: 13:b0:79:fb:6b:70:c4:af:db:a6:82:73:00:12:04:4c:40:34: 08:a0:0d:c4:d0:e3:06:2f:69:5c:0e:41:a6:4f:38:a5:e2:a4: a3:6c:48:fe -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfRaoKQqY+CjKHDfYX0O/QTDRw9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTNaFw0yNzAxMDUyMDQ5MTNaMDMxMTAvBgNV BAMTKEFCNDlCMkIzMjI3RTIwMUJBNjAxODAxOTlGNUQxNTNEQ0Q0RkQ4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWX9idzca9voHOnKrXjHkpqZGm H2T3Cx84YOTqaMWmc8t7lhQOf0GCG5+6+sxmOmHGm5e1EOuZ4x62BdhHMeDZSruW EUIg9tli2/WzRS2otHlD0v0RFW/zbfCm6q1RpOHKLbvPuTvBbpOOr1nMBSDCAuq7 B1+d0oT4EvvP5a25zarvIykviEr7V+QJfQo8H5iBnSnZ0qTZsmWA0KT9NSmfKKN/ cRPVmxDoRfc+DniNhQJqR08CQuSmB6FDwnvc4cZZsMERzfUdUcT/MDUHgFhCItmc /53/rhg8fEbVVgJTZKV3Z9rGtjzu7qfEfD22+wZPf5PfWxAU7zcWQWImO5RhAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUq0mysyJ+IBumAYAZn10VPc1P2PwwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QRDANBgkqhkiG9w0BAQsFAAOCAQEAiXTfCCA6tO/KJcdIjyyuzk15 C3rX5lbrDh/IoHxiabtlR+OqnzoQt3JCZUov2JuhL3992fL2LnoRn6jKJfRET+nO /XQJKsp/kZJmmuffeZBDySNdXffVSBV161ptng1KOh8Kb79DBtckC59QpWNB8STY g9sDfh0ZwNdEgMXrmU7Zz2MsW+uV8kIY6hA7eOPve6+BSnCPwiWJwd9ljnh4oAVn sDcZSvvxsnDKSDvudahjlmR1AK6S7zD4mOHHinz5SYPaJ+bMn8oo/gryZJ+h/wbS s5azEtGqE7B5+2twxK/bpoJzABIETEA0CKANxNDjBi9pXA5Bpk84peKko2xI/g== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client