This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/323830333a383332303a3a2f33322d3332203d3e20323636373133.roa File: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (raw, json) Hash identifier: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I= Subject key identifier: DD:EE:EA:2A:47:72:AA:E0:23:F7:E9:14:A5:FA:E8:74:36:70:FC:3A Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 79245861F9992F07BD3C958EFFE0742A4D971B7A Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/323830333a383332303a3a2f33322d3332203d3e20323636373133.roa Signing time: Tue 06 Jan 2026 19:13:20 +0000 ROA not before: Tue 06 Jan 2026 19:08:20 +0000 ROA not after: Tue 05 Jan 2027 19:13:20 +0000 asID: 266713 IP address blocks: 2803:8320::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 20:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:24:58:61:f9:99:2f:07:bd:3c:95:8e:ff:e0:74:2a:4d:97:1b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Jan 6 19:08:20 2026 GMT Not After : Jan 5 19:13:20 2027 GMT Subject: CN=DDEEEA2A4772AAE023F7E914A5FAE8743670FC3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:37:f9:59:22:1a:b9:18:5c:af:c0:1e:32: 92:8b:86:91:98:e9:f7:2d:a4:ea:4d:e2:3d:26:c1: 8b:c3:49:c3:3e:61:47:89:7e:84:23:2e:9b:c1:9c: 9e:4e:de:93:37:e2:c2:17:47:c7:85:be:bd:87:25: 1d:1e:65:7c:58:16:69:67:30:52:4a:66:c2:4d:7a: 20:d4:88:3d:bb:17:24:bc:d3:cd:2c:5c:31:97:d9: d6:b4:81:cb:a0:55:ca:ca:66:79:93:ba:a6:4e:34: ef:ed:33:a5:1b:ce:ef:38:f9:49:6d:d8:40:ee:b0: 9c:c7:7b:c2:11:11:9d:17:7d:b4:4b:b1:cb:3b:0c: ad:70:0b:35:b6:bc:29:63:82:20:d3:8b:d6:60:0b: d8:f8:75:f4:69:c0:f5:bc:8e:10:8c:07:f0:d8:54: 50:19:49:71:21:46:09:25:09:12:95:d4:45:01:b1: 65:17:3e:23:1b:d1:c7:c1:f0:9c:15:bb:99:7d:e4: 22:47:04:5c:66:2c:e7:a6:fd:b3:24:19:26:a8:96: e3:e9:a5:1e:34:18:ed:54:62:bd:88:97:c4:58:b4: 68:4c:75:5c:3b:36:a3:c7:36:f3:71:67:f1:a0:f5: 6c:d4:97:2c:65:08:3f:0c:0b:25:c7:e9:0b:3e:f4: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:EA:2A:47:72:AA:E0:23:F7:E9:14:A5:FA:E8:74:36:70:FC:3A X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/323830333a383332303a3a2f33322d3332203d3e20323636373133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8320::/32 Signature Algorithm: sha256WithRSAEncryption 63:84:e6:b9:40:02:ba:3e:96:0d:c7:54:9e:a1:64:b8:94:57: 21:f1:df:77:08:c4:95:60:d7:d6:14:e6:f1:ba:52:e5:40:43: 28:98:f6:29:74:cd:0f:41:0c:4f:44:c4:ac:0c:10:b8:49:22: 49:ad:35:68:e9:f6:21:bc:4a:08:bb:64:a2:ac:7c:01:93:3e: 44:97:91:8c:c3:1b:92:b3:75:ad:5b:17:70:a7:75:ab:bb:2b: 23:9f:05:b8:c1:81:14:37:a6:2a:d2:d6:fc:21:40:6b:a9:75: ca:ff:15:85:6b:57:7a:04:72:b0:1f:1c:e4:d9:b6:b9:75:85: ed:67:2f:e0:a7:71:d3:af:16:28:1f:d3:b5:5c:4f:fa:a6:95: 44:6c:74:97:63:11:c8:67:b6:bb:6a:a0:de:03:a6:1a:68:27: 22:07:2e:bd:e3:70:46:4b:1a:7c:f6:d5:c0:d7:8b:5a:c6:46: 52:3f:87:a3:05:3c:70:e2:df:05:51:12:9b:42:5a:83:15:c8: 03:88:8d:f1:a5:9d:76:e7:1d:e3:44:43:19:1f:a6:46:2a:eb: 79:27:0a:e0:83:21:5f:b8:70:98:d5:91:80:be:18:0e:b6:c1: dc:15:a1:bf:64:66:57:3b:8d:c7:78:3b:af:a1:b3:da:89:5e: cf:7e:ed:c3 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUeSRYYfmZLwe9PJWO/+B0Kk2XG3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjAxMDYxOTA4MjBaFw0yNzAxMDUxOTEzMjBaMDMxMTAvBgNV BAMTKERERUVFQTJBNDc3MkFBRTAyM0Y3RTkxNEE1RkFFODc0MzY3MEZDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbzf5WSIauRhcr8AeMpKLhpGY 6fctpOpN4j0mwYvDScM+YUeJfoQjLpvBnJ5O3pM34sIXR8eFvr2HJR0eZXxYFmln MFJKZsJNeiDUiD27FyS8080sXDGX2da0gcugVcrKZnmTuqZONO/tM6Ubzu84+Ult 2EDusJzHe8IREZ0XfbRLscs7DK1wCzW2vCljgiDTi9ZgC9j4dfRpwPW8jhCMB/DY VFAZSXEhRgklCRKV1EUBsWUXPiMb0cfB8JwVu5l95CJHBFxmLOem/bMkGSaoluPp pR40GO1UYr2Il8RYtGhMdVw7NqPHNvNxZ/Gg9WzUlyxlCD8MCyXH6Qs+9IeTAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU3e7qKkdyquAj9+kUpfrodDZw/DowHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzMyMzgzMDMzM2EzODMzMzIzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzEzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgyAw DQYJKoZIhvcNAQELBQADggEBAGOE5rlAAro+lg3HVJ6hZLiUVyHx33cIxJVg19YU 5vG6UuVAQyiY9il0zQ9BDE9ExKwMELhJIkmtNWjp9iG8Sgi7ZKKsfAGTPkSXkYzD G5Kzda1bF3Cndau7KyOfBbjBgRQ3pirS1vwhQGupdcr/FYVrV3oEcrAfHOTZtrl1 he1nL+CncdOvFigf07VcT/qmlURsdJdjEchntrtqoN4DphpoJyIHLr3jcEZLGnz2 1cDXi1rGRlI/h6MFPHDi3wVREptCWoMVyAOIjfGlnXbnHeNEQxkfpkYq63knCuCD IV+4cJjVkYC+GA62wdwVob9kZlc7jcd4O6+hs9qJXs9+7cM= -----END CERTIFICATE-----Generated at Mon Jan 12 23:38:49 2026 by rpki-client