This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa File: 323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa (raw, json) Hash identifier: x+2TKAPFYcYU8fZ4/sEqV52P4rfZj0uHjLd518mo1zU= Subject key identifier: E3:54:6E:9D:A3:D9:51:78:B0:2C:2E:F7:E5:32:19:96:19:E8:D0:08 Certificate issuer: /CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1 Certificate serial: 52A57E3E239F337F51F015C49F6488D197BEBABB Authority key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa Signing time: Tue 06 Jan 2026 20:57:38 +0000 ROA not before: Tue 06 Jan 2026 20:52:38 +0000 ROA not after: Tue 05 Jan 2027 20:57:38 +0000 asID: 263710 IP address blocks: 2801:0:210::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 09:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a5:7e:3e:23:9f:33:7f:51:f0:15:c4:9f:64:88:d1:97:be:ba:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1 Validity Not Before: Jan 6 20:52:38 2026 GMT Not After : Jan 5 20:57:38 2027 GMT Subject: CN=E3546E9DA3D95178B02C2EF7E532199619E8D008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:1a:d1:31:8c:5e:c0:79:59:49:f6:36:fe: be:ed:05:b9:a4:29:a7:b0:e2:54:ae:5e:13:8e:43: 7c:84:45:b8:c6:71:aa:f6:2d:ff:c8:39:f8:ed:84: 87:f1:44:1b:6a:2c:1e:e0:f7:4e:18:42:58:eb:b9: 24:0b:1c:96:2d:68:24:de:90:75:94:1f:9c:c4:a7: d2:56:aa:07:fe:64:75:ca:fd:f5:cd:df:c4:a7:a2: 22:4b:e0:1d:6b:a4:06:59:76:11:8d:62:40:1a:12: 32:2c:c1:e1:35:71:cb:3e:a2:a4:5f:4f:88:2c:2c: a7:d8:8b:7c:3a:6d:47:40:f1:43:33:33:0a:f6:c1: aa:9e:20:a0:70:e5:cf:56:d4:e1:8f:80:30:8e:c6: e0:dd:d8:7a:6b:fc:33:03:ee:23:69:f9:0f:9d:85: f7:b6:41:6e:d7:c7:a8:17:bd:34:eb:10:7d:c4:37: 0d:46:fd:43:26:90:f0:74:07:2e:4e:4a:8d:86:37: bd:93:2f:32:b7:b8:c2:2a:11:63:84:28:48:20:98: 6a:7d:a8:67:66:43:d8:fa:33:fa:0d:e5:96:d6:7b: 2e:08:b5:47:4d:87:78:2a:97:e1:fb:0e:d4:40:ef: 1d:0f:a5:5b:cd:0d:3a:53:8d:19:b4:f6:19:49:2f: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:54:6E:9D:A3:D9:51:78:B0:2C:2E:F7:E5:32:19:96:19:E8:D0:08 X509v3 Authority Key Identifier: keyid:18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/323830313a303a3231303a3a2f34382d3438203d3e20323633373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:0:210::/48 Signature Algorithm: sha256WithRSAEncryption 75:3d:7c:38:35:73:07:c5:c8:76:ea:55:29:c0:58:c6:b7:c5: 09:82:20:6f:2f:61:74:3c:4f:7a:4e:b2:f2:f0:e8:fe:a4:8e: 0d:84:e9:82:cf:f4:07:93:50:05:1b:59:1c:ec:46:93:ba:ad: 15:2e:01:f3:6b:9d:c7:e1:2a:7c:91:52:c5:25:4e:70:fe:76: c2:1e:72:42:79:b4:b7:33:c4:70:dd:ac:dc:18:a1:72:d9:43: 68:58:2a:a8:83:46:08:6b:5c:68:86:d1:40:71:da:51:8a:24: 7c:a1:df:c5:e4:fc:32:71:73:94:ee:74:71:17:c3:6e:59:ef: 71:45:62:89:29:ae:84:56:97:90:92:48:e2:9b:2c:8b:e1:53: 9d:10:f8:9c:e7:51:d5:74:f3:8d:38:1a:29:40:73:79:0b:95: 19:9b:30:63:db:c2:14:3f:cd:b1:9e:cb:64:de:96:c0:61:5f: 75:48:80:92:28:a3:68:99:19:28:dd:c0:60:6c:0f:72:50:25: da:75:da:c3:fd:22:28:a2:6d:59:7b:41:26:c5:77:83:ce:f0: cd:57:df:31:9a:25:b5:80:54:0d:32:66:79:1f:98:cd:f2:48: 9d:58:55:c3:39:17:a5:fd:50:1e:df:25:4a:de:b9:b0:fb:5c: b7:92:c1:29 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUUqV+PiOfM39R8BXEn2SI0Ze+urswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkYxRTcwQTM3M0Q2RTE2MkY5QzkwQkM0RDlCRUI4 NEFBN0RBMTAeFw0yNjAxMDYyMDUyMzhaFw0yNzAxMDUyMDU3MzhaMDMxMTAvBgNV BAMTKEUzNTQ2RTlEQTNEOTUxNzhCMDJDMkVGN0U1MzIxOTk2MTlFOEQwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0xrRMYxewHlZSfY2/r7tBbmk Kaew4lSuXhOOQ3yERbjGcar2Lf/IOfjthIfxRBtqLB7g904YQljruSQLHJYtaCTe kHWUH5zEp9JWqgf+ZHXK/fXN38SnoiJL4B1rpAZZdhGNYkAaEjIsweE1ccs+oqRf T4gsLKfYi3w6bUdA8UMzMwr2waqeIKBw5c9W1OGPgDCOxuDd2Hpr/DMD7iNp+Q+d hfe2QW7Xx6gXvTTrEH3ENw1G/UMmkPB0By5OSo2GN72TLzK3uMIqEWOEKEggmGp9 qGdmQ9j6M/oN5ZbWey4ItUdNh3gql+H7DtRA7x0PpVvNDTpTjRm09hlJLwsvAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQU41RunaPZUXiwLC735TIZlhno0AgwHwYDVR0j BBgwFoAUGJ/x5wo3PW4WL5yQvE2b64SqfaEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkI3QTM4ODQyN0EwQTIyNjlBRjlFMEI0QzU3M0NCRUYx RDA0NkJERjM0RDdCNUYzODQ2NzkwNTEwRjY2RTEzLzAvMTg5RkYxRTcwQTM3M0Q2 RTE2MkY5QzkwQkM0RDlCRUI4NEFBN0RBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODlGRjFFNzBBMzczRDZFMTYy RjlDOTBCQzREOUJFQjg0QUE3REExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZCN0EzODg0MjdBMEEyMjY5QUY5RTBCNEM1NzNDQkVGMUQwNDZCREYz NEQ3QjVGMzg0Njc5MDUxMEY2NkUxMy8wLzMyMzgzMDMxM2EzMDNhMzIzMTMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMzMzczMTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA AAIQMA0GCSqGSIb3DQEBCwUAA4IBAQB1PXw4NXMHxch26lUpwFjGt8UJgiBvL2F0 PE96TrLy8Oj+pI4NhOmCz/QHk1AFG1kc7EaTuq0VLgHza53H4Sp8kVLFJU5w/nbC HnJCebS3M8Rw3azcGKFy2UNoWCqog0YIa1xohtFAcdpRiiR8od/F5PwycXOU7nRx F8NuWe9xRWKJKa6EVpeQkkjimyyL4VOdEPic51HVdPONOBopQHN5C5UZmzBj28IU P82xnstk3pbAYV91SICSKKNomRko3cBgbA9yUCXaddrD/SIoom1Ze0EmxXeDzvDN V98xmiW1gFQNMmZ5H5jN8kidWFXDORel/VAe3yVK3rmw+1y3ksEp -----END CERTIFICATE-----Generated at Tue Jan 13 09:26:45 2026 by rpki-client