This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346630303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a346630303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: usd6CYDemZyscGKkF6/2I4UNJse9+d5+nG+/xnDPl8E= Subject key identifier: F8:84:2C:74:F4:9A:D9:71:42:D9:6B:35:13:45:12:5F:7F:25:21:66 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 428F2AB6F8BFD81395AC92A27274248124BDFE58 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346630303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:16 +0000 ROA not before: Tue 06 Jan 2026 20:44:16 +0000 ROA not after: Tue 05 Jan 2027 20:49:16 +0000 asID: 273072 IP address blocks: 2803:cf90:4f00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8f:2a:b6:f8:bf:d8:13:95:ac:92:a2:72:74:24:81:24:bd:fe:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:16 2026 GMT Not After : Jan 5 20:49:16 2027 GMT Subject: CN=F8842C74F49AD97142D96B351345125F7F252166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:fa:48:ce:b1:96:41:99:6b:b4:e0:82:70: 3e:78:62:7e:3c:87:bc:fa:7a:d6:7f:a6:1f:cd:65: 70:7b:5f:2d:0e:c8:2a:da:4a:c9:ce:19:71:7f:a3: 5c:d1:8e:60:30:ea:56:6e:12:6d:26:6a:32:9f:94: 23:21:e9:ae:a0:00:e1:61:b7:b2:7b:e7:19:ce:26: 5e:7e:f5:4c:05:f5:d6:ec:a1:d9:91:c5:09:42:0c: ec:cb:ff:3d:26:65:53:03:56:d8:83:bc:55:2a:c5: b1:d8:59:7c:00:d9:a8:7e:36:fa:6d:cc:2c:b4:cc: f6:dc:46:92:95:cb:5a:ea:db:a0:c1:18:a8:a4:87: 88:9f:30:82:ad:e3:4f:54:f6:d0:b5:bb:47:d5:e0: 1e:c9:2c:d6:02:a4:f0:e8:c2:52:f9:98:0c:14:98: 53:98:3e:3e:5d:d5:9b:56:9e:df:0a:4b:c8:70:77: 03:e5:25:10:14:3c:7f:90:5d:b3:4d:58:f4:78:9b: b3:39:fc:3f:29:37:59:7a:ec:1a:bb:7c:be:9e:82: a4:af:20:b2:0d:61:8c:3b:4e:71:4f:9a:04:3e:31: 05:c2:b8:6c:2c:08:e1:5c:22:e2:bf:d8:5e:f1:83: e5:5e:af:01:91:1e:1d:29:94:68:87:1f:34:8f:ae: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:2C:74:F4:9A:D9:71:42:D9:6B:35:13:45:12:5F:7F:25:21:66 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346630303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4f00::/40 Signature Algorithm: sha256WithRSAEncryption 7e:fb:27:e1:03:a9:1a:8d:49:6d:3c:fc:ee:9a:de:5f:60:39: b6:4c:d6:50:fa:69:b5:4f:1c:11:30:6c:57:44:91:a2:20:e8: 55:8b:b9:5e:26:4b:98:36:e4:58:97:d4:94:58:0a:0e:40:dd: 75:a0:3c:0a:8c:64:af:e1:1f:c7:e6:a5:c7:f7:b1:4c:29:98: bf:3f:36:11:f0:74:8c:7b:33:24:e9:e9:3f:1e:a1:2d:63:9c: d2:a9:fe:51:7a:8b:5e:b5:28:52:38:bf:6a:ae:fe:33:c6:6b: 23:66:b1:50:59:2e:06:15:93:02:93:a8:d1:8d:be:14:f9:2c: d2:55:72:03:67:ea:a8:f7:82:c5:65:95:2d:d4:60:4f:09:b2: fc:ed:12:63:e7:1a:3e:9e:17:7d:57:e5:60:09:62:9e:88:d8: 69:5c:08:2d:56:5f:ac:0a:c5:2e:66:17:07:89:f1:30:ed:92: 0b:b5:d7:fd:3f:22:88:4a:50:b4:5a:54:b8:d8:0d:5f:74:b9: bf:5d:35:5d:6d:d6:59:43:30:ae:18:5e:e2:d6:ca:65:55:0d: d7:f7:89:dc:20:4f:a4:34:fe:d7:ab:88:d1:64:48:c0:29:85: 58:c9:2a:1c:19:31:0f:5b:59:bf:b5:e1:a1:de:55:ed:45:a8: 38:2d:d6:c2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQo8qtvi/2BOVrJKicnQkgSS9/lgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTZaFw0yNzAxMDUyMDQ5MTZaMDMxMTAvBgNV BAMTKEY4ODQyQzc0RjQ5QUQ5NzE0MkQ5NkIzNTEzNDUxMjVGN0YyNTIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1/pIzrGWQZlrtOCCcD54Yn48 h7z6etZ/ph/NZXB7Xy0OyCraSsnOGXF/o1zRjmAw6lZuEm0majKflCMh6a6gAOFh t7J75xnOJl5+9UwF9dbsodmRxQlCDOzL/z0mZVMDVtiDvFUqxbHYWXwA2ah+Nvpt zCy0zPbcRpKVy1rq26DBGKikh4ifMIKt409U9tC1u0fV4B7JLNYCpPDowlL5mAwU mFOYPj5d1ZtWnt8KS8hwdwPlJRAUPH+QXbNNWPR4m7M5/D8pN1l67Bq7fL6egqSv ILINYYw7TnFPmgQ+MQXCuGwsCOFcIuK/2F7xg+VerwGRHh0plGiHHzSPrpVxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU+IQsdPSa2XFC2Ws1E0USX38lIWYwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQ2 NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QTzANBgkqhkiG9w0BAQsFAAOCAQEAfvsn4QOpGo1JbTz87preX2A5 tkzWUPpptU8cETBsV0SRoiDoVYu5XiZLmDbkWJfUlFgKDkDddaA8Coxkr+Efx+al x/exTCmYvz82EfB0jHszJOnpPx6hLWOc0qn+UXqLXrUoUji/aq7+M8ZrI2axUFku BhWTApOo0Y2+FPks0lVyA2fqqPeCxWWVLdRgTwmy/O0SY+caPp4XfVflYAlinojY aVwILVZfrArFLmYXB4nxMO2SC7XX/T8iiEpQtFpUuNgNX3S5v101XW3WWUMwrhhe 4tbKZVUN1/eJ3CBPpDT+16uI0WRIwCmFWMkqHBkxD1tZv7Xhod5V7UWoOC3Wwg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client