This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343930303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343930303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: pS9AGIA2+tUgBC870zAd/BEQTk+g+YVu0oobmI4GauI= Subject key identifier: 1E:06:A5:3E:69:1B:75:84:50:74:1D:53:43:BE:7E:A0:BF:62:1F:21 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 6ECAA16A82642F1CA5DD7DAAA2743BFDACE5C9B9 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343930303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:20 +0000 ROA not before: Tue 06 Jan 2026 20:44:20 +0000 ROA not after: Tue 05 Jan 2027 20:49:20 +0000 asID: 273072 IP address blocks: 2803:cf90:4900::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ca:a1:6a:82:64:2f:1c:a5:dd:7d:aa:a2:74:3b:fd:ac:e5:c9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:20 2026 GMT Not After : Jan 5 20:49:20 2027 GMT Subject: CN=1E06A53E691B758450741D5343BE7EA0BF621F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:ec:8d:a9:a0:a8:e0:70:0a:54:c5:33:06: 69:18:42:9a:0c:91:31:ae:ef:75:82:b0:68:d3:76: fa:68:c5:b3:23:d4:6c:4b:40:8d:e2:63:e0:0e:e7: 7b:6b:06:37:18:01:f9:ca:d5:ea:58:c9:d3:dd:09: 06:53:df:80:09:17:aa:ce:a5:61:56:3d:f8:a5:0f: 50:41:bc:ec:e3:9f:48:ed:b2:92:5f:22:aa:b8:49: f4:e8:05:df:da:9c:ab:3f:3f:85:24:c7:f7:7f:d7: 3e:81:bf:07:da:7c:82:bf:50:e8:a7:1d:9e:64:e0: 78:8b:5d:01:56:51:1c:c3:8e:e7:6c:56:52:5e:30: 9d:ee:e7:8d:c6:1a:b0:d9:6a:aa:3e:bd:1d:36:fb: 49:4d:59:8f:14:35:71:c5:0a:b4:5a:c0:9e:cd:37: a5:2c:11:d9:a7:ca:af:70:2b:4a:40:4d:aa:7f:a0: ff:36:98:6b:b7:59:33:88:90:cf:c5:c5:42:03:54: bc:2b:bc:98:94:40:f0:fb:8c:58:b5:37:08:12:16: 54:bc:91:5f:75:2e:76:e4:c3:fe:42:5b:38:6e:09: 14:0c:38:11:b5:32:a1:47:d7:a9:03:7d:0f:01:d1: ae:f3:b9:80:a3:e4:73:50:1d:9e:b3:1a:0d:93:5f: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:A5:3E:69:1B:75:84:50:74:1D:53:43:BE:7E:A0:BF:62:1F:21 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343930303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4900::/40 Signature Algorithm: sha256WithRSAEncryption 43:0f:06:2b:00:9b:5f:02:dd:de:2c:3a:5a:0b:a8:13:9a:1a: a6:84:1c:fd:7c:f3:c3:01:6b:4a:00:8a:ad:21:ab:d8:9c:f5: 4b:c9:17:f0:43:1d:8f:26:ce:ad:25:11:f0:8b:fb:70:ef:0b: 13:47:77:18:09:2a:c9:d2:01:7f:c8:d2:e9:d2:06:f1:6b:3e: 34:8f:92:63:f2:cc:8b:ce:9d:61:e8:14:0d:2c:ea:76:5a:da: e7:db:ff:3f:95:5b:b3:10:6c:ff:03:02:33:c6:e4:47:5d:2a: 91:0a:08:4c:63:f9:84:8c:7f:ff:8a:02:39:0f:d1:54:96:26: 37:21:d0:df:8d:da:cb:b3:0a:ed:e4:96:41:ac:5e:9c:3b:64: 3a:01:8b:72:b1:21:7d:ea:69:3f:87:eb:df:21:ae:74:7a:fa: 9d:e5:ce:32:3a:91:23:c7:d7:a7:ce:36:4a:b9:b1:39:dc:e8: 5f:d1:91:01:ab:22:a2:c0:7a:29:4f:ff:6e:7b:11:f5:92:03: f3:51:16:95:d7:30:79:93:f4:1b:45:7e:2f:64:1b:be:e8:78: b1:83:bd:d3:79:4b:dc:5c:9c:57:5f:c5:de:5e:3d:dc:09:10: 5e:27:84:83:46:0a:ad:79:94:81:cc:3e:0a:e3:ca:dc:e2:41: 47:d7:ab:02 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUbsqhaoJkLxyl3X2qonQ7/azlybkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MjBaFw0yNzAxMDUyMDQ5MjBaMDMxMTAvBgNV BAMTKDFFMDZBNTNFNjkxQjc1ODQ1MDc0MUQ1MzQzQkU3RUEwQkY2MjFGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05+yNqaCo4HAKVMUzBmkYQpoM kTGu73WCsGjTdvpoxbMj1GxLQI3iY+AO53trBjcYAfnK1epYydPdCQZT34AJF6rO pWFWPfilD1BBvOzjn0jtspJfIqq4SfToBd/anKs/P4Ukx/d/1z6BvwfafIK/UOin HZ5k4HiLXQFWURzDjudsVlJeMJ3u543GGrDZaqo+vR02+0lNWY8UNXHFCrRawJ7N N6UsEdmnyq9wK0pATap/oP82mGu3WTOIkM/FxUIDVLwrvJiUQPD7jFi1NwgSFlS8 kV91Lnbkw/5CWzhuCRQMOBG1MqFH16kDfQ8B0a7zuYCj5HNQHZ6zGg2TX1lBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUHgalPmkbdYRQdB1TQ75+oL9iHyEwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QSTANBgkqhkiG9w0BAQsFAAOCAQEAQw8GKwCbXwLd3iw6WguoE5oa poQc/XzzwwFrSgCKrSGr2Jz1S8kX8EMdjybOrSUR8Iv7cO8LE0d3GAkqydIBf8jS 6dIG8Ws+NI+SY/LMi86dYegUDSzqdlra59v/P5VbsxBs/wMCM8bkR10qkQoITGP5 hIx//4oCOQ/RVJYmNyHQ343ay7MK7eSWQaxenDtkOgGLcrEhfeppP4fr3yGudHr6 neXOMjqRI8fXp842SrmxOdzoX9GRAasiosB6KU//bnsR9ZID81EWldcweZP0G0V+ L2Qbvuh4sYO903lL3FycV1/F3l493AkQXieEg0YKrXmUgcw+CuPK3OJBR9erAg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:07 2026 by rpki-client