This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f34302d3430203d3e20323632353839.roa File: 323830333a626661303a666530303a3a2f34302d3430203d3e20323632353839.roa (raw, json) Hash identifier: Gqbb6jSWdEwHbGH2qCFSV/GkoLg5ZjQIPzaLetRyZF0= Subject key identifier: 87:CA:81:A9:42:28:5F:7C:F7:98:93:32:A2:27:25:A4:38:D0:85:7F Certificate issuer: /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2 Certificate serial: 0B202EF5360839DC38B6E951966855C870B30BC1 Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f34302d3430203d3e20323632353839.roa Signing time: Tue 06 Jan 2026 19:46:13 +0000 ROA not before: Tue 06 Jan 2026 19:41:13 +0000 ROA not after: Tue 05 Jan 2027 19:46:13 +0000 asID: 262589 IP address blocks: 2803:bfa0:fe00::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 07:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:2e:f5:36:08:39:dc:38:b6:e9:51:96:68:55:c8:70:b3:0b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2 Validity Not Before: Jan 6 19:41:13 2026 GMT Not After : Jan 5 19:46:13 2027 GMT Subject: CN=87CA81A942285F7CF7989332A22725A438D0857F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:12:93:72:54:5d:c2:55:06:2b:b9:c0:39: 72:53:73:ce:d6:79:30:bc:c4:75:49:9a:60:ae:56: 36:31:20:2a:bd:f8:14:a7:27:e0:f3:12:16:3a:8b: 17:a5:7e:6c:8b:00:f9:f8:36:ce:b5:ae:9c:ab:2b: d6:39:67:57:e1:51:0f:67:17:13:51:8d:be:62:c4: 3c:74:df:23:92:19:92:76:ad:b0:76:ea:52:a6:8a: b1:00:5b:69:80:2d:f2:92:8d:ff:c6:fa:56:81:00: 38:a1:37:16:65:13:c6:1c:93:15:51:65:a0:02:e8: da:40:81:fd:0f:4a:aa:53:44:e3:2b:98:16:91:58: ed:05:3a:66:d9:c8:f9:35:92:89:72:0f:f6:f1:4c: 25:94:a6:8f:7b:d6:a8:f7:d2:24:3f:f0:eb:dc:60: 49:a1:00:75:e5:7d:fd:c9:18:e2:86:29:66:65:d0: 45:14:53:0c:b7:3e:05:fc:a6:cb:9d:e3:14:b6:ae: 83:b6:2e:6e:1a:d9:fd:c5:a6:3f:30:4f:7d:a9:21: ec:cf:1c:a0:05:f4:e8:78:c7:43:71:85:79:94:e1: b1:11:be:8d:68:eb:cb:32:bb:93:91:af:ba:43:ad: 7b:0a:7e:dd:18:d9:86:d6:77:85:44:0d:48:b9:67: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CA:81:A9:42:28:5F:7C:F7:98:93:32:A2:27:25:A4:38:D0:85:7F X509v3 Authority Key Identifier: keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666530303a3a2f34302d3430203d3e20323632353839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bfa0:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 61:e9:70:19:a6:61:4b:c8:1d:4d:49:3a:d1:ae:c9:bc:c3:6f: 68:1d:f4:7a:b2:81:d8:5e:d0:5f:34:a9:be:eb:c2:51:bd:f9: 38:92:83:79:3d:18:05:f7:1f:9b:2a:04:17:b5:1a:30:40:53: 20:e0:a3:ce:2f:46:b4:b1:4b:22:18:93:e6:82:7d:36:eb:ce: e3:70:f9:3c:c9:e6:de:37:b0:fa:a6:c3:f3:d3:ed:16:f8:a6: ee:2a:35:ff:97:19:86:86:ec:e2:e5:4d:93:13:0a:a6:3f:52: 32:a4:72:e3:40:70:40:4c:28:df:13:46:60:be:c4:71:16:95: 44:b3:24:3c:b1:f7:35:aa:ef:cd:67:1b:36:92:05:01:48:4f: 06:9b:f0:7b:bf:75:7c:c4:aa:29:dd:c2:b1:c8:72:c6:86:65: 97:5e:cd:f3:a8:dc:f9:e6:5f:a3:a4:d5:6b:89:8b:b0:20:6c: 9a:31:3a:4e:27:73:94:f0:8d:d1:e9:7b:cf:e4:1c:da:7a:2c: 5f:08:4f:e6:0e:d6:35:a5:e9:3a:b7:e0:ab:be:14:88:fe:48: 0c:da:c5:05:1a:71:fb:80:74:e2:ba:7b:76:32:3b:1b:c3:52: 7a:fc:5e:0b:06:09:ac:9c:66:82:95:3e:68:de:84:4c:4d:2d: 73:79:5b:ee -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUCyAu9TYIOdw4tulRlmhVyHCzC8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MwM0UwQTVDOTgxNkI1NzRCNTRBMTYzRUM1RjZFNjg2 RDQ5OURGMjAeFw0yNjAxMDYxOTQxMTNaFw0yNzAxMDUxOTQ2MTNaMDMxMTAvBgNV BAMTKDg3Q0E4MUE5NDIyODVGN0NGNzk4OTMzMkEyMjcyNUE0MzhEMDg1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBRKTclRdwlUGK7nAOXJTc87W eTC8xHVJmmCuVjYxICq9+BSnJ+DzEhY6ixelfmyLAPn4Ns61rpyrK9Y5Z1fhUQ9n FxNRjb5ixDx03yOSGZJ2rbB26lKmirEAW2mALfKSjf/G+laBADihNxZlE8YckxVR ZaAC6NpAgf0PSqpTROMrmBaRWO0FOmbZyPk1kolyD/bxTCWUpo971qj30iQ/8Ovc YEmhAHXlff3JGOKGKWZl0EUUUwy3PgX8psud4xS2roO2Lm4a2f3Fpj8wT32pIezP HKAF9Oh4x0NxhXmU4bERvo1o68syu5ORr7pDrXsKft0Y2YbWd4VEDUi5Z1MNAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUh8qBqUIoX3z3mJMyoiclpDjQhX8wHwYDVR0j BBgwFoAUfAPgpcmBa1dLVKFj7F9uaG1JnfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RTJEQjM3NThBMTlFM0I4RTFDODc2QkY3MUZCMzJEQzg1 MDI0MzRDQjg0QjU4MTM0MkFGMTc0Qjc3ODNENURGLzAvN0MwM0UwQTVDOTgxNkI1 NzRCNTRBMTYzRUM1RjZFNjg2RDQ5OURGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzAzRTBBNUM5ODE2QjU3NEI1 NEExNjNFQzVGNkU2ODZENDk5REYyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEUyREIzNzU4QTE5RTNCOEUxQzg3NkJGNzFGQjMyREM4NTAyNDM0Q0I4 NEI1ODEzNDJBRjE3NEI3NzgzRDVERi8wLzMyMzgzMDMzM2E2MjY2NjEzMDNhNjY2 NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA7+g/jANBgkqhkiG9w0BAQsFAAOCAQEAYelwGaZhS8gdTUk60a7JvMNv aB30erKB2F7QXzSpvuvCUb35OJKDeT0YBfcfmyoEF7UaMEBTIOCjzi9GtLFLIhiT 5oJ9NuvO43D5PMnm3jew+qbD89PtFvim7io1/5cZhobs4uVNkxMKpj9SMqRy40Bw QEwo3xNGYL7EcRaVRLMkPLH3NarvzWcbNpIFAUhPBpvwe791fMSqKd3CschyxoZl l17N86jc+eZfo6TVa4mLsCBsmjE6TidzlPCN0el7z+Qc2nosXwhP5g7WNaXpOrfg q74UiP5IDNrFBRpx+4B04rp7djI7G8NSevxeCwYJrJxmgpU+aN6ETE0tc3lb7g== -----END CERTIFICATE-----Generated at Tue Jan 13 11:53:01 2026 by rpki-client