This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a343030303a3a2f33362d3336203d3e20323639383030.roa File: 323830333a373336303a343030303a3a2f33362d3336203d3e20323639383030.roa (raw, json) Hash identifier: FvobO22g+NUZPoR5TXigRzItlUw7N+oiVBPpQUTzqdE= Subject key identifier: 2E:04:F9:37:80:1A:B5:25:DF:E3:32:4A:4A:10:84:2D:31:58:E8:A0 Certificate issuer: /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5 Certificate serial: 0CD084F1D7023B7BC4CA6668B46E84DA5AAC16FA Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a343030303a3a2f33362d3336203d3e20323639383030.roa Signing time: Tue 06 Jan 2026 19:06:52 +0000 ROA not before: Tue 06 Jan 2026 19:01:52 +0000 ROA not after: Tue 05 Jan 2027 19:06:52 +0000 asID: 269800 IP address blocks: 2803:7360:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 13:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d0:84:f1:d7:02:3b:7b:c4:ca:66:68:b4:6e:84:da:5a:ac:16:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5 Validity Not Before: Jan 6 19:01:52 2026 GMT Not After : Jan 5 19:06:52 2027 GMT Subject: CN=2E04F937801AB525DFE3324A4A10842D3158E8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:b4:54:6a:66:b9:3b:9f:bb:4f:b4:ad:18: e9:0e:be:9d:d9:e1:4f:e5:c9:a5:53:0c:07:84:f1: da:3f:c3:88:fa:0b:4d:d6:7e:15:ee:4d:0f:51:a8: 0c:21:c7:f4:dd:80:45:aa:02:ec:d3:84:da:e7:d0: 66:87:c3:b1:65:ea:a2:6c:bd:68:39:76:9e:45:7a: ff:41:22:f6:17:5b:5c:2b:72:38:12:c7:bb:b2:c4: cc:8a:65:b7:1f:51:55:b4:75:5a:71:34:f7:21:79: 3b:70:2b:b7:06:8d:ab:48:f7:3e:e2:fe:e5:48:a6: a0:16:24:2c:8b:68:46:4b:c6:9d:66:93:16:d3:e3: e7:a6:a0:84:c0:b4:12:e8:4e:e5:ee:a3:9c:59:9d: 29:0e:c0:81:06:2b:03:17:2a:8f:f7:e6:32:37:90: 0b:28:28:b9:b2:cd:da:9f:43:29:fd:ae:01:ab:dc: a3:38:53:0c:ce:8f:22:5e:fa:15:1e:1d:66:69:5c: 7d:de:4c:fd:fe:e3:ef:b0:78:5a:c7:81:34:e2:7e: 77:33:ba:3e:97:13:b9:7c:7d:47:ef:93:8b:01:6f: 1a:e7:2e:b9:cb:ee:a7:d5:2b:7b:08:5f:07:9b:8e: cd:cc:7a:40:c0:a2:38:f0:64:b1:a0:21:87:92:f4: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:F9:37:80:1A:B5:25:DF:E3:32:4A:4A:10:84:2D:31:58:E8:A0 X509v3 Authority Key Identifier: keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a343030303a3a2f33362d3336203d3e20323639383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7360:4000::/36 Signature Algorithm: sha256WithRSAEncryption 40:b6:3f:0c:5d:8f:60:4b:78:5e:a7:3f:53:16:2c:a1:af:00: 9a:20:82:ba:ec:4b:73:02:72:f5:1b:78:ad:c8:81:c4:ee:58: 43:c1:5e:2e:e5:9a:0a:c1:2e:97:d0:fe:72:dd:77:eb:d0:8f: 2e:57:9f:b5:d2:b1:5c:6b:d6:84:2b:8a:ea:a1:f0:62:7c:63: dc:5c:0d:57:46:55:3c:58:5e:41:f7:9f:5a:b1:ce:2b:0e:02: 87:62:74:7b:b2:b2:0d:2f:33:05:5d:04:62:36:21:04:23:af: 3c:ee:f6:45:9f:de:d8:63:ed:f4:f9:9e:28:e3:fa:31:9a:ec: ac:28:5e:0e:27:8b:e7:ce:72:62:fd:62:a1:ab:0d:20:06:91: 19:51:9c:7e:72:2a:27:30:65:19:12:28:cc:5c:ba:4d:a4:e3: 2f:d0:65:d5:5c:fc:ac:94:ce:36:0f:11:69:ba:89:bf:f8:36: 63:8e:a7:af:f1:a8:19:1c:bf:b7:98:fe:cf:81:fd:72:68:cf: ad:63:56:3e:cc:02:8f:77:f1:dc:62:8d:54:44:22:33:ca:d2: d2:c9:fb:3e:80:70:bf:07:d3:fd:73:dd:66:21:bf:74:51:15: fd:1c:85:24:ea:83:59:be:1c:80:6e:b9:9f:76:f4:51:bb:77: 0e:95:c5:17 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUDNCE8dcCO3vEymZotG6E2lqsFvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVEMUYwMDgwQjdDMkExNkIyRjU0MUQ0NEE0MjNDQUM3 NDFFM0VDNTAeFw0yNjAxMDYxOTAxNTJaFw0yNzAxMDUxOTA2NTJaMDMxMTAvBgNV BAMTKDJFMDRGOTM3ODAxQUI1MjVERkUzMzI0QTRBMTA4NDJEMzE1OEU4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoyLRUama5O5+7T7StGOkOvp3Z 4U/lyaVTDAeE8do/w4j6C03WfhXuTQ9RqAwhx/TdgEWqAuzThNrn0GaHw7Fl6qJs vWg5dp5Fev9BIvYXW1wrcjgSx7uyxMyKZbcfUVW0dVpxNPcheTtwK7cGjatI9z7i /uVIpqAWJCyLaEZLxp1mkxbT4+emoITAtBLoTuXuo5xZnSkOwIEGKwMXKo/35jI3 kAsoKLmyzdqfQyn9rgGr3KM4UwzOjyJe+hUeHWZpXH3eTP3+4++weFrHgTTifncz uj6XE7l8fUfvk4sBbxrnLrnL7qfVK3sIXwebjs3MekDAojjwZLGgIYeS9H01AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQULgT5N4AatSXf4zJKShCELTFY6KAwHwYDVR0j BBgwFoAUDtHwCAt8Khay9UHUSkI8rHQePsUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTg2N0RFMkVCOTU2ODEwMEIyNUQwRDQ2REE3NTcwMzVF QUU5NjFEQ0I0QjdGRTgyN0ExN0EwRURFOUQ5M0M0LzAvMEVEMUYwMDgwQjdDMkEx NkIyRjU0MUQ0NEE0MjNDQUM3NDFFM0VDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRUQxRjAwODBCN0MyQTE2QjJG NTQxRDQ0QTQyM0NBQzc0MUUzRUM1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE4NjdERTJFQjk1NjgxMDBCMjVEMEQ0NkRBNzU3MDM1RUFFOTYxRENC NEI3RkU4MjdBMTdBMEVERTlEOTNDNC8wLzMyMzgzMDMzM2EzNzMzMzYzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA3NgQDANBgkqhkiG9w0BAQsFAAOCAQEAQLY/DF2PYEt4Xqc/UxYsoa8A miCCuuxLcwJy9Rt4rciBxO5YQ8FeLuWaCsEul9D+ct1369CPLleftdKxXGvWhCuK 6qHwYnxj3FwNV0ZVPFheQfefWrHOKw4Ch2J0e7KyDS8zBV0EYjYhBCOvPO72RZ/e 2GPt9PmeKOP6MZrsrCheDieL585yYv1ioasNIAaRGVGcfnIqJzBlGRIozFy6TaTj L9Bl1Vz8rJTONg8RabqJv/g2Y46nr/GoGRy/t5j+z4H9cmjPrWNWPswCj3fx3GKN VEQiM8rS0sn7PoBwvwfT/XPdZiG/dFEV/RyFJOqDWb4cgG65n3b0Ubt3DpXFFw== -----END CERTIFICATE-----Generated at Tue Jan 13 03:10:09 2026 by rpki-client