This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a346330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: Cohd4w0kyiupmP1V+B/JGBpYNcU5HI94MfmWcQAJEDE= Subject key identifier: F8:3B:B4:2D:92:42:BA:F0:EB:44:3F:CD:E8:5B:B5:D7:60:01:6D:8E Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 122DD0287D4F3E33B6FB783556681741320B41DF Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:11 +0000 ROA not before: Tue 06 Jan 2026 20:44:11 +0000 ROA not after: Tue 05 Jan 2027 20:49:11 +0000 asID: 273072 IP address blocks: 2803:cf90:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2d:d0:28:7d:4f:3e:33:b6:fb:78:35:56:68:17:41:32:0b:41:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:11 2026 GMT Not After : Jan 5 20:49:11 2027 GMT Subject: CN=F83BB42D9242BAF0EB443FCDE85BB5D760016D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:7e:b0:36:3e:03:65:88:c2:d8:fb:31:d6: 69:5d:00:4b:47:c1:dd:fb:b1:13:e5:1e:36:97:ea: dd:09:83:de:26:ea:1e:87:4d:79:50:66:61:c9:c6: f6:01:c4:55:88:2a:70:86:d0:42:ba:1f:55:c3:df: 57:8c:68:09:d8:60:df:1a:a5:01:63:e1:aa:f4:20: 7e:2d:64:84:ac:bb:cf:80:14:bf:23:b3:19:52:20: 14:4c:92:91:82:a0:8e:37:1e:ef:7e:1b:99:2d:9c: 39:a4:73:56:be:ae:28:7c:b1:d4:c5:8f:5b:84:7f: 8e:80:32:2a:ef:64:09:d7:ae:ff:4a:5f:b1:14:ff: bc:8d:df:2e:fb:87:01:d6:8e:b4:70:87:a0:de:77: 41:b0:64:27:9c:79:7d:bd:6e:a0:52:b7:47:36:b8: 30:f6:c0:8b:b2:77:41:93:61:26:69:59:07:e9:b5: 12:2d:58:d0:23:ed:72:e2:d1:4c:34:96:cb:ea:70: d9:ce:ed:25:1b:0a:61:38:63:0b:f4:1b:bb:e0:a9: e4:de:dc:7f:68:a2:f1:36:e0:2a:48:5c:6e:d0:12: 2b:89:08:95:9a:40:1f:9a:e9:9d:ca:6a:43:32:4e: e0:26:74:72:36:22:0e:76:21:f9:ce:e2:e6:af:5a: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3B:B4:2D:92:42:BA:F0:EB:44:3F:CD:E8:5B:B5:D7:60:01:6D:8E X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 12:f1:65:2a:0e:fc:d0:d3:57:eb:b7:d5:ce:c4:ce:6a:cb:a0: ad:fa:1f:d6:7d:4d:c9:5d:5e:73:07:6c:5f:0d:20:0e:0e:31: 29:f3:e4:c6:a2:f0:77:ba:ba:79:62:12:ff:b0:41:be:fe:af: 39:ae:d2:21:c4:85:71:6b:ac:75:4d:98:34:a4:60:ea:8a:12: 68:b5:41:db:f7:b1:6e:ed:4a:98:17:3d:f7:a1:f1:af:e4:11: 5b:03:20:3c:73:6b:15:92:c0:f4:fd:fc:e1:74:4a:01:86:34: 47:9b:fc:6e:2c:14:f4:87:45:f2:62:e3:08:02:63:a9:eb:4b: 53:f3:d5:73:7f:5f:96:59:c4:cc:cd:f9:57:b1:70:ca:d9:b2: 5c:df:c9:2c:1b:7e:87:c8:fe:2e:7f:2d:ff:a6:02:f2:61:64: 18:95:52:6e:fb:9f:3b:9d:5f:eb:65:ea:a0:f7:6e:fc:25:66: d4:6d:6c:3d:c1:91:4e:55:13:40:cf:13:6d:92:1c:5c:ba:d2: 85:63:9d:d3:ab:cf:de:cb:11:65:53:cc:66:08:53:9f:5a:a8: 3d:f8:29:33:3a:64:5d:95:9a:1d:a9:53:69:fa:c0:8c:a2:a6: 66:7c:ff:2c:92:f3:39:01:8b:ae:32:a3:27:3a:6c:91:29:f6: 6b:ff:41:9a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEi3QKH1PPjO2+3g1VmgXQTILQd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTFaFw0yNzAxMDUyMDQ5MTFaMDMxMTAvBgNV BAMTKEY4M0JCNDJEOTI0MkJBRjBFQjQ0M0ZDREU4NUJCNUQ3NjAwMTZEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXj36wNj4DZYjC2Psx1mldAEtH wd37sRPlHjaX6t0Jg94m6h6HTXlQZmHJxvYBxFWIKnCG0EK6H1XD31eMaAnYYN8a pQFj4ar0IH4tZISsu8+AFL8jsxlSIBRMkpGCoI43Hu9+G5ktnDmkc1a+rih8sdTF j1uEf46AMirvZAnXrv9KX7EU/7yN3y77hwHWjrRwh6Ded0GwZCeceX29bqBSt0c2 uDD2wIuyd0GTYSZpWQfptRItWNAj7XLi0Uw0lsvqcNnO7SUbCmE4Ywv0G7vgqeTe 3H9oovE24CpIXG7QEiuJCJWaQB+a6Z3KakMyTuAmdHI2Ig52IfnO4uavWnTfAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU+Du0LZJCuvDrRD/N6Fu112ABbY4wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQ2 MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QTDANBgkqhkiG9w0BAQsFAAOCAQEAEvFlKg780NNX67fVzsTOasug rfof1n1NyV1ecwdsXw0gDg4xKfPkxqLwd7q6eWIS/7BBvv6vOa7SIcSFcWusdU2Y NKRg6ooSaLVB2/exbu1KmBc996Hxr+QRWwMgPHNrFZLA9P384XRKAYY0R5v8biwU 9IdF8mLjCAJjqetLU/PVc39fllnEzM35V7FwytmyXN/JLBt+h8j+Ln8t/6YC8mFk GJVSbvufO51f62XqoPdu/CVm1G1sPcGRTlUTQM8TbZIcXLrShWOd06vP3ssRZVPM ZghTn1qoPfgpMzpkXZWaHalTafrAjKKmZnz/LJLzOQGLrjKjJzpskSn2a/9Bmg== -----END CERTIFICATE-----Generated at Mon Jan 12 10:53:35 2026 by rpki-client