This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: NsP+TSQDKbD4fxtz4BlKqqYsXUi5/7qm1TKuyrnmdNQ= Subject key identifier: 1A:B9:FD:D1:47:A5:48:0C:E6:53:29:A2:FB:2D:B6:6B:F4:90:CB:58 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 7FA5620755445210E8A4DFC88325074E88C7F16F Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:19 +0000 ROA not before: Tue 06 Jan 2026 20:44:19 +0000 ROA not after: Tue 05 Jan 2027 20:49:19 +0000 asID: 273072 IP address blocks: 2803:cf90:4600::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a5:62:07:55:44:52:10:e8:a4:df:c8:83:25:07:4e:88:c7:f1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:19 2026 GMT Not After : Jan 5 20:49:19 2027 GMT Subject: CN=1AB9FDD147A5480CE65329A2FB2DB66BF490CB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:dc:fa:84:1f:f0:18:1d:6f:fb:f1:9e:91: 61:1a:2f:cd:8b:e8:1b:a9:3a:30:73:6d:ff:c5:af: 5a:04:33:30:b7:c4:f8:21:63:34:67:f7:10:7b:f5: b7:36:54:5e:13:42:c2:b9:4a:d0:d5:f2:4d:92:96: f8:f9:64:e9:88:05:a7:82:86:21:10:06:23:a5:48: bd:29:7a:7e:df:f0:58:96:02:c4:eb:fd:40:41:9d: 23:06:28:db:cb:02:c0:7a:d8:4a:d6:b8:b8:c3:c2: ee:e4:98:ce:db:dc:da:e3:00:ea:0e:de:96:8d:5a: 17:78:13:cb:01:b3:a5:c9:d3:1b:b4:87:e8:9b:2b: ef:ac:fc:b1:1d:11:90:82:c6:5d:98:db:77:e4:9b: 90:bf:a3:00:c8:f1:b1:15:b3:22:01:cb:b8:8d:d6: b2:9e:67:be:1c:77:09:17:2d:bd:fc:8f:75:36:7f: 92:3f:03:66:c7:44:af:8d:a7:05:0e:42:06:e7:1f: 91:14:82:62:27:3a:88:51:5c:64:f9:cf:94:53:65: 97:e6:22:76:1e:87:10:90:7f:2b:9a:77:26:a9:4c: 1f:f4:b5:6f:2c:86:b7:35:e2:7c:d6:52:da:bd:b4: 74:b5:7b:de:90:7c:63:28:93:dd:41:6f:83:a3:f3: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:FD:D1:47:A5:48:0C:E6:53:29:A2:FB:2D:B6:6B:F4:90:CB:58 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4600::/40 Signature Algorithm: sha256WithRSAEncryption 9c:cf:fb:1d:77:39:b1:20:ef:88:3e:e0:40:7c:b8:de:22:40: 25:1d:b3:9d:c9:35:91:ff:ff:20:d3:b9:d2:47:94:cb:5a:61: 7a:1c:e0:9e:c6:99:39:86:32:4f:7a:00:e4:83:e6:6a:b0:50: e3:e2:24:8a:e8:93:c6:6d:3c:5e:a3:8d:09:69:4c:d3:94:6b: a4:77:29:25:50:b4:4a:40:de:3f:98:0e:8a:e3:62:07:5a:55: d8:8b:6c:37:f7:93:fe:87:86:93:17:33:0b:88:e4:35:8e:b6: 13:d1:ab:27:f4:59:80:4d:ed:60:f8:ab:5e:d4:2b:97:05:41: fb:ac:4b:00:51:9f:47:c7:be:fc:c1:59:82:a1:b8:24:db:46: ed:0f:9c:77:94:5c:14:26:74:6a:2f:5c:58:17:a0:62:80:23: bd:19:8a:1c:ca:a9:98:60:ad:bd:a4:bb:ef:62:6a:39:fe:08: 3e:f1:b1:ed:c4:6f:89:46:f3:fe:c6:f7:56:ac:7e:23:fe:bc: de:cd:d1:56:35:63:74:bf:3f:5b:5a:8c:d7:c2:c3:d6:6c:bd: 7d:4b:bf:b7:81:b3:da:11:14:91:16:a8:29:69:8c:cb:83:6c: b6:1b:cb:71:81:d2:f2:ae:f7:91:59:70:e5:6d:4c:45:71:d3: 74:b2:a0:69 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUf6ViB1VEUhDopN/IgyUHTojH8W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTlaFw0yNzAxMDUyMDQ5MTlaMDMxMTAvBgNV BAMTKDFBQjlGREQxNDdBNTQ4MENFNjUzMjlBMkZCMkRCNjZCRjQ5MENCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXNz6hB/wGB1v+/GekWEaL82L 6BupOjBzbf/Fr1oEMzC3xPghYzRn9xB79bc2VF4TQsK5StDV8k2Slvj5ZOmIBaeC hiEQBiOlSL0pen7f8FiWAsTr/UBBnSMGKNvLAsB62ErWuLjDwu7kmM7b3NrjAOoO 3paNWhd4E8sBs6XJ0xu0h+ibK++s/LEdEZCCxl2Y23fkm5C/owDI8bEVsyIBy7iN 1rKeZ74cdwkXLb38j3U2f5I/A2bHRK+NpwUOQgbnH5EUgmInOohRXGT5z5RTZZfm InYehxCQfyuadyapTB/0tW8shrc14nzWUtq9tHS1e96QfGMok91Bb4Oj89+1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGrn90UelSAzmUymi+y22a/SQy1gwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QRjANBgkqhkiG9w0BAQsFAAOCAQEAnM/7HXc5sSDviD7gQHy43iJA JR2znck1kf//INO50keUy1phehzgnsaZOYYyT3oA5IPmarBQ4+IkiuiTxm08XqON CWlM05RrpHcpJVC0SkDeP5gOiuNiB1pV2ItsN/eT/oeGkxczC4jkNY62E9GrJ/RZ gE3tYPirXtQrlwVB+6xLAFGfR8e+/MFZgqG4JNtG7Q+cd5RcFCZ0ai9cWBegYoAj vRmKHMqpmGCtvaS772JqOf4IPvGx7cRviUbz/sb3Vqx+I/683s3RVjVjdL8/W1qM 18LD1my9fUu/t4Gz2hEUkRaoKWmMy4NsthvLcYHS8q73kVlw5W1MRXHTdLKgaQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client