This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: 4qthFhXwHN+MkSHvBL1Y4RRUT0NIciJS5wnAD5oGkBY= Subject key identifier: D3:FA:99:16:FA:E7:85:B1:01:FB:DF:BB:66:75:BC:C4:12:3C:96:82 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 581DD08CB6974611FA42E1C088CBCB8F390487E7 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:14 +0000 ROA not before: Tue 06 Jan 2026 20:44:14 +0000 ROA not after: Tue 05 Jan 2027 20:49:14 +0000 asID: 273072 IP address blocks: 2803:cf90:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 15:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1d:d0:8c:b6:97:46:11:fa:42:e1:c0:88:cb:cb:8f:39:04:87:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:14 2026 GMT Not After : Jan 5 20:49:14 2027 GMT Subject: CN=D3FA9916FAE785B101FBDFBB6675BCC4123C9682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:24:b6:f5:fa:02:b3:d2:f1:2b:92:b5:b8: 1b:56:f3:22:1c:26:c2:20:61:39:a2:10:33:bb:d8: 6c:85:77:54:e4:2a:e7:a9:17:2a:20:fb:5e:19:98: cb:05:13:57:9b:c8:b4:a7:97:82:f2:1d:fe:07:45: fd:70:87:3d:36:5c:08:4e:e2:16:57:ba:99:b4:b9: 28:17:87:1d:69:dd:05:7d:a5:04:ec:48:4d:04:37: 46:9a:1c:90:7d:df:e3:54:78:5d:32:df:e1:c7:4e: 39:df:48:4d:6e:10:07:e0:6e:31:0f:86:69:78:a4: 10:c4:9c:aa:5b:38:d5:99:d5:b5:92:0c:35:da:dc: 64:13:77:9e:a9:1b:33:16:74:58:17:d3:bb:d9:9e: bc:d7:9a:ba:d0:df:8a:8d:e8:06:14:1c:35:99:c0: ea:cb:90:1e:fb:2c:9d:03:b2:9c:d8:2b:e5:03:af: 07:18:df:6f:5f:00:0e:5e:df:8d:18:bb:90:cd:ef: 76:8d:22:f4:e1:f4:97:eb:f9:3f:93:8b:76:2f:88: 28:14:3e:85:dd:0e:47:3f:d3:20:37:ed:71:dd:08: a5:58:1d:37:21:f0:95:c4:59:00:07:29:55:01:df: 7d:25:69:8a:82:04:d1:1b:ba:11:45:0e:99:0a:85: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FA:99:16:FA:E7:85:B1:01:FB:DF:BB:66:75:BC:C4:12:3C:96:82 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4800::/40 Signature Algorithm: sha256WithRSAEncryption 0a:00:9d:b5:94:f6:59:2b:da:c8:ad:6f:ef:e6:77:a9:64:70: 4d:e2:92:b7:7b:12:b4:46:a7:c0:bc:60:1d:4d:c9:b6:e1:5d: 7a:33:f6:ac:3f:9d:ff:ca:76:2f:db:5b:25:cc:37:82:2b:f6: bc:1e:a6:dd:d5:b1:27:f0:57:83:63:96:e0:e6:e2:31:be:65: 80:3c:a4:14:7d:78:b2:85:e0:12:bb:ef:7f:4d:21:12:e0:d2: 82:1e:0e:df:2a:3a:b4:86:ec:3b:46:d2:15:94:d3:5f:ea:d5: c8:d7:84:54:34:d6:37:c0:f8:d4:f5:06:66:32:9b:ab:40:5b: 8a:b9:f5:5c:94:60:d7:17:b5:e8:3e:a0:2b:ac:d4:53:72:27: 70:2e:ba:44:af:0f:51:6a:ff:af:22:7a:78:ff:3b:ff:a6:df: 25:5d:44:ad:39:c9:75:df:37:1c:18:51:50:f4:6b:b6:7c:a9: 29:04:cb:c5:08:b2:b0:b5:5c:bd:d5:2c:69:9c:bd:da:3a:4f: 74:26:69:8e:78:42:f1:56:c6:f3:c0:47:91:08:58:10:bb:1b: 40:0d:bf:f3:78:5e:1a:f8:d8:41:d0:ea:b5:9f:9b:d5:f5:9c: 0f:28:4a:56:7b:fc:02:1f:cd:a6:84:f5:dc:35:bd:87:94:6b: f6:ae:4a:8b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUWB3QjLaXRhH6QuHAiMvLjzkEh+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTRaFw0yNzAxMDUyMDQ5MTRaMDMxMTAvBgNV BAMTKEQzRkE5OTE2RkFFNzg1QjEwMUZCREZCQjY2NzVCQ0M0MTIzQzk2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5CS29foCs9LxK5K1uBtW8yIc JsIgYTmiEDO72GyFd1TkKuepFyog+14ZmMsFE1ebyLSnl4LyHf4HRf1whz02XAhO 4hZXupm0uSgXhx1p3QV9pQTsSE0EN0aaHJB93+NUeF0y3+HHTjnfSE1uEAfgbjEP hml4pBDEnKpbONWZ1bWSDDXa3GQTd56pGzMWdFgX07vZnrzXmrrQ34qN6AYUHDWZ wOrLkB77LJ0DspzYK+UDrwcY329fAA5e340Yu5DN73aNIvTh9Jfr+T+Ti3YviCgU PoXdDkc/0yA37XHdCKVYHTch8JXEWQAHKVUB330laYqCBNEbuhFFDpkKhV0zAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU0/qZFvrnhbEB+9+7ZnW8xBI8loIwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz ODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QSDANBgkqhkiG9w0BAQsFAAOCAQEACgCdtZT2WSvayK1v7+Z3qWRw TeKSt3sStEanwLxgHU3JtuFdejP2rD+d/8p2L9tbJcw3giv2vB6m3dWxJ/BXg2OW 4ObiMb5lgDykFH14soXgErvvf00hEuDSgh4O3yo6tIbsO0bSFZTTX+rVyNeEVDTW N8D41PUGZjKbq0Bbirn1XJRg1xe16D6gK6zUU3IncC66RK8PUWr/ryJ6eP87/6bf JV1ErTnJdd83HBhRUPRrtnypKQTLxQiysLVcvdUsaZy92jpPdCZpjnhC8VbG88BH kQhYELsbQA2/83heGvjYQdDqtZ+b1fWcDyhKVnv8Ah/NpoT13DW9h5Rr9q5Kiw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:49:36 2026 by rpki-client