This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f33392d3430203d3e20323637373939.roa File: 323830333a626661303a666530303a3a2f33392d3430203d3e20323637373939.roa (raw, json) Hash identifier: KKXqaQVbFBuShwuC5ykcslUTs0+6afbDF0ccBsKCqSs= Subject key identifier: 21:6C:87:FD:C2:E7:D3:55:1E:E6:93:47:84:73:40:E1:C1:6D:5B:1A Certificate issuer: /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2 Certificate serial: 4A6B099667E4FC2392CDC9CAFFE495C7170BD58E Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f33392d3430203d3e20323637373939.roa Signing time: Tue 06 Jan 2026 19:46:13 +0000 ROA not before: Tue 06 Jan 2026 19:41:13 +0000 ROA not after: Tue 05 Jan 2027 19:46:13 +0000 asID: 267799 IP address blocks: 2803:bfa0:fe00::/39 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6b:09:96:67:e4:fc:23:92:cd:c9:ca:ff:e4:95:c7:17:0b:d5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2 Validity Not Before: Jan 6 19:41:13 2026 GMT Not After : Jan 5 19:46:13 2027 GMT Subject: CN=216C87FDC2E7D3551EE69347847340E1C16D5B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:2c:5c:1f:e1:16:fa:7b:2f:42:7b:09:a2: 75:6e:a4:1e:cf:78:0f:8c:9e:92:e2:2e:5b:7b:60: b2:c3:e0:7b:57:e7:7b:e7:43:a7:cc:33:04:27:16: fb:e7:81:7a:aa:1a:49:4a:3e:7c:57:9b:53:ca:18: 4f:b0:3c:89:6f:0b:ac:43:5d:1e:87:9d:b0:66:44: 73:da:1c:fa:25:84:c4:20:f0:8d:51:b5:ad:4a:a8: 3e:49:08:92:ac:d1:42:40:36:83:6e:af:84:0e:ac: fa:fd:8c:30:60:41:59:01:09:ef:e6:38:1b:27:d9: 45:72:99:06:d3:12:a8:0f:d4:a8:8f:d4:08:0b:b0: 1e:5d:22:16:b2:b0:4b:2e:2a:13:06:49:d4:53:40: 32:ad:a7:34:b6:db:71:8c:f6:84:09:0a:98:79:83: 08:e7:ce:1a:13:71:d4:e3:e4:57:ea:30:49:eb:17: 90:5f:c4:ea:4c:e7:98:9b:3d:ff:60:b3:b8:96:7d: 53:e1:19:a5:1a:53:2a:fb:ac:db:5a:ca:bf:2e:8e: e9:23:0a:87:07:c1:c6:0f:1a:2c:5d:e1:f3:7e:83: ea:8e:57:01:3b:bd:01:22:3e:99:7d:c0:32:85:0d: af:1e:03:65:9b:e2:72:13:32:e3:e4:17:3e:b0:26: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6C:87:FD:C2:E7:D3:55:1E:E6:93:47:84:73:40:E1:C1:6D:5B:1A X509v3 Authority Key Identifier: keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f33392d3430203d3e20323637373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bfa0:fe00::/39 Signature Algorithm: sha256WithRSAEncryption a1:4d:04:58:03:1c:78:8b:7e:76:5a:e4:26:e0:c9:d9:9c:bc: ac:59:ca:09:c8:d8:55:ef:11:ab:fa:dc:cb:a7:09:c7:8a:b3: 4e:36:2c:46:c7:4f:de:82:5e:0c:0c:49:ab:63:bf:b0:a5:93: 03:f6:bb:e8:39:d2:bf:b1:33:9d:2f:26:fd:58:5d:db:fe:c7: a6:f4:ea:82:38:e9:7c:42:46:59:19:ed:c9:b2:41:2c:a8:c7: 41:4f:50:33:a7:79:98:ee:24:05:7d:5c:47:e9:1b:52:16:69: ff:d0:7d:11:8b:30:d8:2c:fb:8a:be:fa:fb:8f:78:d0:bc:42: ea:c1:a1:7d:f0:91:56:38:41:89:7e:ab:c4:d5:d1:16:6a:1d: da:35:5e:d7:19:74:ac:27:6f:a9:8a:40:29:a3:fa:07:90:5b: be:b1:1d:03:04:08:41:a9:75:af:dd:e2:3f:be:83:31:77:44: 5f:c4:38:82:03:4d:c4:28:53:c6:d0:ee:80:45:ca:59:b2:f3: 28:eb:4d:18:c1:27:f4:2d:d6:13:72:7e:d5:6f:ea:ab:5f:c7: 8a:be:67:91:72:0e:16:a0:a2:e8:fa:69:e2:4e:c5:9f:bb:84: 6f:34:0d:ef:3e:43:17:e9:3f:5c:be:a5:7e:73:65:3e:fb:6f: cf:4f:7f:20 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSmsJlmfk/COSzcnK/+SVxxcL1Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MwM0UwQTVDOTgxNkI1NzRCNTRBMTYzRUM1RjZFNjg2 RDQ5OURGMjAeFw0yNjAxMDYxOTQxMTNaFw0yNzAxMDUxOTQ2MTNaMDMxMTAvBgNV BAMTKDIxNkM4N0ZEQzJFN0QzNTUxRUU2OTM0Nzg0NzM0MEUxQzE2RDVCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqCxcH+EW+nsvQnsJonVupB7P eA+MnpLiLlt7YLLD4HtX53vnQ6fMMwQnFvvngXqqGklKPnxXm1PKGE+wPIlvC6xD XR6HnbBmRHPaHPolhMQg8I1Rta1KqD5JCJKs0UJANoNur4QOrPr9jDBgQVkBCe/m OBsn2UVymQbTEqgP1KiP1AgLsB5dIhaysEsuKhMGSdRTQDKtpzS223GM9oQJCph5 gwjnzhoTcdTj5FfqMEnrF5BfxOpM55ibPf9gs7iWfVPhGaUaUyr7rNtayr8ujukj CocHwcYPGixd4fN+g+qOVwE7vQEiPpl9wDKFDa8eA2Wb4nITMuPkFz6wJmCHAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUIWyH/cLn01Ue5pNHhHNA4cFtWxowHwYDVR0j BBgwFoAUfAPgpcmBa1dLVKFj7F9uaG1JnfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RTJEQjM3NThBMTlFM0I4RTFDODc2QkY3MUZCMzJEQzg1 MDI0MzRDQjg0QjU4MTM0MkFGMTc0Qjc3ODNENURGLzAvN0MwM0UwQTVDOTgxNkI1 NzRCNTRBMTYzRUM1RjZFNjg2RDQ5OURGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzAzRTBBNUM5ODE2QjU3NEI1 NEExNjNFQzVGNkU2ODZENDk5REYyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEUyREIzNzU4QTE5RTNCOEUxQzg3NkJGNzFGQjMyREM4NTAyNDM0Q0I4 NEI1ODEzNDJBRjE3NEI3NzgzRDVERi8wLzMyMzgzMDMzM2E2MjY2NjEzMDNhNjY2 NTMwMzAzYTNhMmYzMzM5MmQzNDMwMjAzZDNlMjAzMjM2MzczNzM5Mzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEoA7+g/jANBgkqhkiG9w0BAQsFAAOCAQEAoU0EWAMceIt+dlrkJuDJ2Zy8 rFnKCcjYVe8Rq/rcy6cJx4qzTjYsRsdP3oJeDAxJq2O/sKWTA/a76DnSv7EznS8m /Vhd2/7HpvTqgjjpfEJGWRntybJBLKjHQU9QM6d5mO4kBX1cR+kbUhZp/9B9EYsw 2Cz7ir76+4940LxC6sGhffCRVjhBiX6rxNXRFmod2jVe1xl0rCdvqYpAKaP6B5Bb vrEdAwQIQal1r93iP76DMXdEX8Q4ggNNxChTxtDugEXKWbLzKOtNGMEn9C3WE3J+ 1W/qq1/Hir5nkXIOFqCi6Ppp4k7Fn7uEbzQN7z5DF+k/XL6lfnNlPvtvz09/IA== -----END CERTIFICATE-----Generated at Tue Jan 13 05:34:44 2026 by rpki-client