This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa File: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (raw, json) Hash identifier: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI= Subject key identifier: A6:E4:30:EC:C7:DC:CC:B3:1E:61:93:0A:04:64:33:D0:D6:BE:05:52 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 3BFCF88679BB59F17F46FC2F36F73E6B11236DF7 Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa Signing time: Tue 06 Jan 2026 19:22:49 +0000 ROA not before: Tue 06 Jan 2026 19:17:49 +0000 ROA not after: Tue 05 Jan 2027 19:22:49 +0000 asID: 265598 IP address blocks: 2806:348::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 14:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fc:f8:86:79:bb:59:f1:7f:46:fc:2f:36:f7:3e:6b:11:23:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Jan 6 19:17:49 2026 GMT Not After : Jan 5 19:22:49 2027 GMT Subject: CN=A6E430ECC7DCCCB31E61930A046433D0D6BE0552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:dd:eb:97:dc:3b:0c:e2:93:66:3c:4c:b8: 4a:f8:21:81:65:93:b2:a2:66:46:a3:76:ee:f0:12: 74:3f:5b:8b:3f:88:cf:b7:49:e8:5a:28:40:91:1e: 80:f1:3b:0d:ae:67:be:7f:9e:1a:c5:63:cf:16:4c: 9b:ec:e8:48:0d:ac:d6:ea:95:58:fa:12:09:c5:df: 54:f3:51:16:7f:da:43:f1:4a:82:d2:ac:79:d9:01: a5:7d:7f:02:76:b9:e7:8e:2a:f8:86:02:86:1d:d0: db:42:1a:7b:13:e8:ba:9d:a4:96:dc:f9:35:62:ca: 05:4d:e7:00:30:9f:e6:7d:72:24:8a:02:26:b3:78: 0b:14:8e:24:86:bf:1f:42:a1:1d:a5:bd:63:94:42: 60:55:46:44:9d:e8:84:90:78:86:b5:b9:fc:c5:20: d4:9b:f1:8a:44:a0:68:4a:97:d6:8f:9e:82:02:9c: ec:99:47:6d:59:c3:32:c2:60:d7:34:53:19:de:d6: e1:a8:c1:f0:84:e0:52:8c:82:ce:b1:b0:f7:19:fa: 51:92:75:5e:89:fb:29:1f:23:d3:90:f7:35:10:b9: 66:50:b8:f9:f6:eb:95:24:02:e3:d0:4d:5b:f6:f6: 80:5a:dd:1d:5e:04:83:0e:10:64:f7:45:0a:f2:20: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E4:30:EC:C7:DC:CC:B3:1E:61:93:0A:04:64:33:D0:D6:BE:05:52 X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:348::/32 Signature Algorithm: sha256WithRSAEncryption 36:a8:17:c3:4e:de:5d:dc:02:f0:48:c1:c5:15:e8:da:87:50: 70:6e:67:1b:bd:27:ce:98:08:64:11:ff:db:db:9b:54:b6:3d: f1:9d:93:6f:39:8c:c4:4f:3e:76:5b:4d:0c:41:9f:2d:b6:d3: a5:19:e5:50:cb:14:fb:c3:f6:cd:8a:2b:77:40:16:bc:be:6a: 64:29:71:bc:ea:41:5a:14:88:a9:b4:f5:5b:1d:96:f6:c1:7b: 7c:b2:89:b7:63:75:e8:c0:68:fa:00:46:26:c0:1d:e9:e0:eb: ed:9d:e4:36:75:a9:c6:ec:82:c9:21:43:63:dc:b7:7f:03:b4: b4:6c:34:a7:eb:f1:e7:08:71:07:9d:5e:94:7e:5c:42:0b:f7: 0a:b1:a2:6d:61:0a:89:ec:f6:60:e3:92:d7:40:5c:fc:cb:b2: 89:3e:a6:c8:77:67:96:37:3e:59:de:a9:c6:85:e9:14:b3:18: 3b:23:c7:24:53:12:23:d5:6c:6e:a7:0b:db:8d:ad:aa:ad:6a: 7d:27:59:c8:aa:e3:82:4c:e0:7b:57:df:58:8d:5d:7f:50:13: c1:e8:57:bb:e6:bb:f3:e1:4d:67:30:55:32:82:85:f0:96:61: 91:05:2f:c7:b8:0f:12:0f:64:8f:eb:a2:5b:d2:aa:b7:9f:7c: c5:0e:17:bf -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUO/z4hnm7WfF/RvwvNvc+axEjbfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNjAxMDYxOTE3NDlaFw0yNzAxMDUxOTIyNDlaMDMxMTAvBgNV BAMTKEE2RTQzMEVDQzdEQ0NDQjMxRTYxOTMwQTA0NjQzM0QwRDZCRTA1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5d3rl9w7DOKTZjxMuEr4IYFl k7KiZkajdu7wEnQ/W4s/iM+3SehaKECRHoDxOw2uZ75/nhrFY88WTJvs6EgNrNbq lVj6EgnF31TzURZ/2kPxSoLSrHnZAaV9fwJ2ueeOKviGAoYd0NtCGnsT6LqdpJbc +TViygVN5wAwn+Z9ciSKAiazeAsUjiSGvx9CoR2lvWOUQmBVRkSd6ISQeIa1ufzF INSb8YpEoGhKl9aPnoICnOyZR21ZwzLCYNc0Uxne1uGowfCE4FKMgs6xsPcZ+lGS dV6J+ykfI9OQ9zUQuWZQuPn265UkAuPQTVv29oBa3R1eBIMOEGT3RQryIKEJAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUpuQw7MfczLMeYZMKBGQz0Na+BVIwHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wLzMyMzgzMDM2M2EzMzM0MzgzYTNhMmYz MzMyMmQzNjM0MjAzZDNlMjAzMjM2MzUzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgNIMA0G CSqGSIb3DQEBCwUAA4IBAQA2qBfDTt5d3ALwSMHFFejah1BwbmcbvSfOmAhkEf/b 25tUtj3xnZNvOYzETz52W00MQZ8tttOlGeVQyxT7w/bNiit3QBa8vmpkKXG86kFa FIiptPVbHZb2wXt8som3Y3XowGj6AEYmwB3p4OvtneQ2danG7ILJIUNj3Ld/A7S0 bDSn6/HnCHEHnV6UflxCC/cKsaJtYQqJ7PZg45LXQFz8y7KJPqbId2eWNz5Z3qnG hekUsxg7I8ckUxIj1Wxupwvbja2qrWp9J1nIquOCTOB7V99YjV1/UBPB6Fe75rvz 4U1nMFUygoXwlmGRBS/HuA8SD2SP66Jb0qq3n3zFDhe/ -----END CERTIFICATE-----Generated at Tue Jan 13 11:53:16 2026 by rpki-client