This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a346230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: m9xFcLvoTZwsqZ+T4KL9o/5RKKroJCKBAMa3l32qXBI= Subject key identifier: 2E:CB:7F:CC:DD:F4:7F:FA:15:AF:7F:4D:3E:62:DD:7F:5C:2C:10:7D Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 0B5C81F19DDD8B39FA7D3C1308C1960ADDE7B4F5 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:15 +0000 ROA not before: Tue 06 Jan 2026 20:44:15 +0000 ROA not after: Tue 05 Jan 2027 20:49:15 +0000 asID: 273072 IP address blocks: 2803:cf90:4b00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5c:81:f1:9d:dd:8b:39:fa:7d:3c:13:08:c1:96:0a:dd:e7:b4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:15 2026 GMT Not After : Jan 5 20:49:15 2027 GMT Subject: CN=2ECB7FCCDDF47FFA15AF7F4D3E62DD7F5C2C107D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:28:25:7f:92:7a:62:5f:62:e6:9b:ab:38: 6d:c8:1c:25:a0:39:c2:e3:9f:ec:14:f2:c7:14:b5: 9a:a2:ac:9f:70:8c:f6:fd:07:15:17:10:5d:90:c6: 92:e5:48:c4:68:36:b8:7e:63:d3:96:07:58:18:75: 1b:58:7e:f5:b9:0e:ec:98:f9:fa:ee:69:6a:5a:61: b6:18:f0:ed:65:04:65:7c:ef:88:b1:c0:57:03:20: 18:3c:57:68:a4:7d:ea:37:7c:dc:7e:24:64:21:d7: d7:f1:5b:ba:0e:6c:64:bb:6e:cd:8d:19:be:27:07: ef:84:5f:6e:bc:4d:27:26:3b:be:51:7c:db:a7:0e: 9b:1a:26:79:b2:1b:b0:f0:f6:c3:a9:65:a1:e1:c7: b5:b2:60:b4:f8:b0:b1:ec:da:7c:f9:07:cf:98:ed: 37:39:2e:19:73:fa:bb:a6:12:4e:12:5f:2d:6b:46: c0:4f:61:59:45:52:46:b2:72:68:75:b3:56:9f:e0: ca:5c:b4:1d:ef:b9:5a:29:d3:ca:7d:cc:95:2e:d3: 74:d7:79:3c:84:8c:56:49:a8:da:fa:19:45:09:c5: 77:0e:30:27:31:22:25:b2:74:15:22:1b:0b:36:ea: 15:1c:92:56:5a:b7:47:43:df:f8:b7:34:08:0a:c4: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CB:7F:CC:DD:F4:7F:FA:15:AF:7F:4D:3E:62:DD:7F:5C:2C:10:7D X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 65:8c:04:48:2d:60:51:ec:f0:6d:88:70:5e:b9:69:7c:a2:57: 8a:e6:cd:56:a9:42:b9:87:70:de:27:a8:a3:17:a7:e6:95:43: dd:b6:c9:f8:7d:e1:82:bd:e3:d9:03:07:10:e9:24:d6:4b:9a: a1:47:73:58:4f:c2:90:2e:58:a2:73:e6:ba:4f:b7:7a:f2:5f: f9:67:96:e4:20:d5:ae:94:7f:91:db:74:61:0e:bc:ad:b9:ca: 33:bd:e9:94:70:de:92:1c:8e:d1:f1:8f:48:1b:31:49:08:72: c9:22:5a:a2:8f:28:13:d7:fe:6d:16:aa:ac:0e:7d:c1:75:51: b3:52:53:f1:e5:b8:80:00:ee:25:ea:44:c2:11:20:22:9c:97: 04:c6:ee:56:db:51:70:d3:e5:a1:2f:45:39:5d:5a:13:4d:e3: 90:47:46:6c:05:7f:bd:93:7a:2b:ee:52:3c:46:b2:9a:3a:05: 54:dd:d3:28:51:a9:67:7c:f7:5a:4f:02:65:1f:de:f4:aa:53: 18:d4:76:3d:4f:f0:6a:31:ce:01:70:d4:61:06:84:d1:31:f3: 3e:bd:37:5f:0b:41:f9:86:4f:05:a4:08:78:5f:31:6f:12:7b: 4d:d1:8f:2a:fb:81:f5:ee:49:b6:bd:a5:e5:bc:19:d0:01:4b: 4a:65:25:35 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUC1yB8Z3dizn6fTwTCMGWCt3ntPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTVaFw0yNzAxMDUyMDQ5MTVaMDMxMTAvBgNV BAMTKDJFQ0I3RkNDRERGNDdGRkExNUFGN0Y0RDNFNjJERDdGNUMyQzEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGNyglf5J6Yl9i5purOG3IHCWg OcLjn+wU8scUtZqirJ9wjPb9BxUXEF2QxpLlSMRoNrh+Y9OWB1gYdRtYfvW5DuyY +fruaWpaYbYY8O1lBGV874ixwFcDIBg8V2ikfeo3fNx+JGQh19fxW7oObGS7bs2N Gb4nB++EX268TScmO75RfNunDpsaJnmyG7Dw9sOpZaHhx7WyYLT4sLHs2nz5B8+Y 7Tc5Lhlz+rumEk4SXy1rRsBPYVlFUkaycmh1s1af4MpctB3vuVop08p9zJUu03TX eTyEjFZJqNr6GUUJxXcOMCcxIiWydBUiGws26hUcklZat0dD3/i3NAgKxN9DAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQULst/zN30f/oVr39NPmLdf1wsEH0wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQ2 MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QSzANBgkqhkiG9w0BAQsFAAOCAQEAZYwESC1gUezwbYhwXrlpfKJX iubNVqlCuYdw3ieooxen5pVD3bbJ+H3hgr3j2QMHEOkk1kuaoUdzWE/CkC5YonPm uk+3evJf+WeW5CDVrpR/kdt0YQ68rbnKM73plHDekhyO0fGPSBsxSQhyySJaoo8o E9f+bRaqrA59wXVRs1JT8eW4gADuJepEwhEgIpyXBMbuVttRcNPloS9FOV1aE03j kEdGbAV/vZN6K+5SPEaymjoFVN3TKFGpZ3z3Wk8CZR/e9KpTGNR2PU/wajHOAXDU YQaE0THzPr03XwtB+YZPBaQIeF8xbxJ7TdGPKvuB9e5Jtr2l5bwZ0AFLSmUlNQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client