This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa File: 323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa (raw, json) Hash identifier: yMBREqEhE+oEer7HTsTCxs+y8CGAM7bLlvidobYgWgE= Subject key identifier: 6D:68:C6:7F:EC:21:C3:5D:A6:3B:43:74:27:89:CC:AB:83:57:6A:36 Certificate issuer: /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2 Certificate serial: 12439296FD77B365D85131B364DC4A3D87611D37 Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa Signing time: Tue 06 Jan 2026 20:48:21 +0000 ROA not before: Tue 06 Jan 2026 20:43:21 +0000 ROA not after: Tue 05 Jan 2027 20:48:21 +0000 asID: 273142 IP address blocks: 2803:2c50:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:92:96:fd:77:b3:65:d8:51:31:b3:64:dc:4a:3d:87:61:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2 Validity Not Before: Jan 6 20:43:21 2026 GMT Not After : Jan 5 20:48:21 2027 GMT Subject: CN=6D68C67FEC21C35DA63B43742789CCAB83576A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:81:e9:d2:de:b0:33:4a:0c:da:a8:b3:99: 55:84:9e:6f:bd:a8:19:42:23:bb:33:d1:67:1f:ef: 11:8e:18:10:3c:2a:45:4b:39:3c:68:ce:0e:29:3d: 15:27:e6:b1:98:c0:8a:54:df:55:3c:ee:26:7c:74: 27:09:f0:11:8d:bb:fb:3e:84:51:ca:8b:e2:67:01: 88:99:fe:eb:d7:1e:42:94:35:09:c6:f3:aa:22:25: a5:16:d9:20:31:0a:26:ba:2a:6e:bd:ee:b7:d2:02: 13:b8:52:cc:1d:e9:0f:9c:78:1a:4d:06:4a:69:ac: 0c:3d:18:47:7c:31:84:de:f8:47:18:45:9b:26:55: 24:d3:b8:2a:d8:da:97:ec:4c:1d:76:f8:c3:85:d0: 43:fe:fd:13:28:a9:a4:b5:67:64:46:31:94:c5:0d: 11:75:86:7e:3c:e5:bd:39:5b:6e:f5:9c:39:d8:15: 99:a5:7e:83:16:2e:58:9c:75:05:af:57:e0:b4:9b: 87:3f:89:06:58:6f:2c:ad:ae:84:b6:a5:f9:43:cc: 58:23:0e:3f:17:41:01:7e:4d:99:77:25:81:0d:80: ee:de:9b:f1:cd:55:66:7f:7d:00:9f:98:2e:87:46: 22:f9:09:f0:4e:86:1d:dd:11:62:62:f2:9f:f6:1e: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:C6:7F:EC:21:C3:5D:A6:3B:43:74:27:89:CC:AB:83:57:6A:36 X509v3 Authority Key Identifier: keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2c50:a000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:6c:d5:be:b3:01:c9:fb:ef:38:29:c9:b2:39:40:0a:38:8b: bc:79:7c:6e:48:db:43:e7:7c:0c:80:3b:a1:a3:79:27:d2:b0: 53:cd:e4:6f:e1:ac:68:7f:61:9b:e3:10:aa:4c:28:bc:52:8d: 16:02:be:e1:a9:e6:b6:91:66:ac:04:cc:e8:2f:ba:43:00:8f: 64:06:21:4b:f8:55:e1:18:51:fd:a0:e6:d6:41:20:ae:03:0f: 5a:ac:78:89:0e:53:8e:a5:28:b0:f2:4d:c0:ab:2c:72:e0:0c: 30:0c:43:50:36:c9:3c:e5:8d:97:51:8a:fc:82:7f:fe:84:18: e8:b9:2d:b1:4d:dd:8a:46:a9:c2:d2:64:1e:21:87:6e:3e:aa: 66:fb:f7:f7:ea:ed:65:30:12:22:af:22:e8:37:af:15:a8:9c: e9:e3:e3:77:4f:30:df:ec:d8:4f:9c:72:0b:b0:c6:31:d0:00: 89:c3:3b:ff:69:b7:fe:e2:c0:7d:a6:be:c2:28:f5:44:0a:6e: 31:86:a6:e6:c3:a7:a4:cd:50:38:f3:84:a6:98:0b:ab:02:52: 24:4c:79:a5:85:5a:2c:9d:6d:f8:27:01:53:28:93:d5:1f:ca: b1:97:f3:32:8d:c7:22:cc:47:a6:85:14:b9:b4:ff:b3:37:ce: f1:2d:f1:5b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEkOSlv13s2XYUTGzZNxKPYdhHTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCODEwM0RDRTg4RERERUFEQkFDMzA4NzlDNEE3ODVG MTUxN0VFMjAeFw0yNjAxMDYyMDQzMjFaFw0yNzAxMDUyMDQ4MjFaMDMxMTAvBgNV BAMTKDZENjhDNjdGRUMyMUMzNURBNjNCNDM3NDI3ODlDQ0FCODM1NzZBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNYHp0t6wM0oM2qizmVWEnm+9 qBlCI7sz0Wcf7xGOGBA8KkVLOTxozg4pPRUn5rGYwIpU31U87iZ8dCcJ8BGNu/s+ hFHKi+JnAYiZ/uvXHkKUNQnG86oiJaUW2SAxCia6Km697rfSAhO4Uswd6Q+ceBpN BkpprAw9GEd8MYTe+EcYRZsmVSTTuCrY2pfsTB12+MOF0EP+/RMoqaS1Z2RGMZTF DRF1hn485b05W271nDnYFZmlfoMWLlicdQWvV+C0m4c/iQZYbyytroS2pflDzFgj Dj8XQQF+TZl3JYENgO7em/HNVWZ/fQCfmC6HRiL5CfBOhh3dEWJi8p/2Hj3PAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUbWjGf+whw12mO0N0J4nMq4NXajYwHwYDVR0j BBgwFoAUQbgQPc6I3d6tusMIecSnhfFRfuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MTc4MjU1QUIzOTlEMURBNTM4QUQyRTA5QjMxMjkyRkZC QkY0REE3NjY1NkQzOThFQ0JCRUUwRkNCRUYwOURFLzAvNDFCODEwM0RDRTg4RERE RUFEQkFDMzA4NzlDNEE3ODVGMTUxN0VFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MUI4MTAzRENFODhERERFQURC QUMzMDg3OUM0QTc4NUYxNTE3RUUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTE3ODI1NUFCMzk5RDFEQTUzOEFEMkUwOUIzMTI5MkZGQkJGNERBNzY2 NTZEMzk4RUNCQkVFMEZDQkVGMDlERS8wLzMyMzgzMDMzM2EzMjYzMzUzMDNhNjEz MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM0MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyxQoDANBgkqhkiG9w0BAQsFAAOCAQEALmzVvrMByfvvOCnJsjlACjiL vHl8bkjbQ+d8DIA7oaN5J9KwU83kb+GsaH9hm+MQqkwovFKNFgK+4anmtpFmrATM 6C+6QwCPZAYhS/hV4RhR/aDm1kEgrgMPWqx4iQ5TjqUosPJNwKsscuAMMAxDUDbJ POWNl1GK/IJ//oQY6LktsU3dikapwtJkHiGHbj6qZvv39+rtZTASIq8i6DevFaic 6ePjd08w3+zYT5xyC7DGMdAAicM7/2m3/uLAfaa+wij1RApuMYam5sOnpM1QOPOE ppgLqwJSJEx5pYVaLJ1t+CcBUyiT1R/KsZfzMo3HIsxHpoUUubT/szfO8S3xWw== -----END CERTIFICATE-----Generated at Mon Jan 12 13:34:04 2026 by rpki-client