This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/323830333a626432303a3a2f33322d3332203d3e20323636373036.roa File: 323830333a626432303a3a2f33322d3332203d3e20323636373036.roa (raw, json) Hash identifier: jLQbUiDDQyd/CIC+Gw7Ydr9UDFtQsN7ilymgqh2pHMY= Subject key identifier: 0A:E8:C7:97:05:1A:41:33:49:55:F6:5C:6D:E1:F0:0E:44:6E:5F:CB Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 5F5197EA0998DDCFF093759CA65075F59F2DB1BB Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/323830333a626432303a3a2f33322d3332203d3e20323636373036.roa Signing time: Tue 06 Jan 2026 20:55:50 +0000 ROA not before: Tue 06 Jan 2026 20:50:50 +0000 ROA not after: Tue 05 Jan 2027 20:55:50 +0000 asID: 266706 IP address blocks: 2803:bd20::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:51:97:ea:09:98:dd:cf:f0:93:75:9c:a6:50:75:f5:9f:2d:b1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jan 6 20:50:50 2026 GMT Not After : Jan 5 20:55:50 2027 GMT Subject: CN=0AE8C797051A41334955F65C6DE1F00E446E5FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:f6:69:d0:9a:f9:9a:9b:58:43:8a:85:00: 1f:cc:48:cc:ac:21:11:1d:ac:01:52:2c:c7:f5:66: 89:62:3d:f3:55:49:bd:ef:9f:8d:91:ab:2d:a3:f7: 09:6e:2e:52:26:ed:97:19:cd:68:4b:e0:7b:8f:60: f5:f1:05:f0:a2:a1:20:4b:e6:27:dc:2b:bb:f3:bb: bf:59:7e:94:8f:d2:5c:79:5b:f6:2b:cd:5b:e9:08: d7:2d:31:2d:d8:98:f1:a8:53:af:fc:0a:8e:af:cf: 6e:68:1c:46:ec:4c:27:97:b9:83:88:c8:d8:8c:38: fb:aa:dd:83:b4:b0:c3:ef:eb:9a:e3:e5:7c:76:d1: 0c:78:81:0e:79:59:7b:aa:d2:72:ac:25:84:29:d8: 75:f4:58:56:8c:b3:89:3b:ea:f7:f5:d6:0f:bd:f2: ea:02:5a:37:a2:30:ba:d7:c7:d5:08:a1:ba:22:c7: 01:15:7a:13:18:81:2b:38:cf:0f:3a:53:08:e5:2f: 9f:41:3a:e7:94:f1:f1:d1:53:f7:89:72:8b:e8:35: c7:7b:6f:c1:66:0d:2b:d7:a4:d5:8a:5e:25:5c:b5: 30:1c:b3:4a:bc:96:9a:eb:eb:6d:ea:b8:a5:07:28: fc:8f:e9:7a:fd:9c:d3:a3:0d:d2:5e:41:2e:2b:2a: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E8:C7:97:05:1A:41:33:49:55:F6:5C:6D:E1:F0:0E:44:6E:5F:CB X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/323830333a626432303a3a2f33322d3332203d3e20323636373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bd20::/32 Signature Algorithm: sha256WithRSAEncryption 91:d2:a8:01:3d:74:c4:7c:57:66:a0:9c:d0:1e:01:e3:0e:1f: e6:af:ed:3f:fa:b7:b6:5a:91:27:8c:37:63:b5:33:e1:a9:1b: ed:4d:e4:38:8f:0c:e2:dd:61:8b:ad:d9:14:23:37:79:45:3f: 22:37:5d:5d:16:a7:3a:74:c6:9b:5f:72:90:21:e2:0d:7f:ad: e7:8c:c0:52:42:59:62:0b:ad:02:60:04:c7:19:d3:64:62:a2: 72:db:33:d9:ed:a6:f3:87:1f:7c:45:51:7d:46:69:49:d0:cb: e1:0c:ff:64:01:f0:cd:e1:a2:d2:67:a0:01:8e:f3:97:6d:32: 7a:53:67:0e:17:26:c0:c1:e8:49:69:7c:21:07:d3:96:77:f9: 1f:26:14:c1:0c:d4:75:ad:62:7b:94:f1:2e:d2:38:43:34:61: 4d:b8:ba:21:34:b1:13:9c:1c:48:80:51:a5:dd:20:b7:d1:fb: 83:8a:47:b0:e9:cc:bd:90:98:2a:45:2e:03:e1:0f:06:6d:b2: fd:12:1c:11:51:c5:40:de:45:9e:72:bb:27:52:bc:49:b1:1d: fa:78:73:04:15:be:c0:20:af:a1:92:8d:b1:c6:57:35:96:82: 92:47:08:d7:53:c5:0f:0a:b2:f4:c7:9c:d9:8a:52:60:c6:ef: 65:59:56:1a -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUX1GX6gmY3c/wk3WcplB19Z8tsbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjAxMDYyMDUwNTBaFw0yNzAxMDUyMDU1NTBaMDMxMTAvBgNV BAMTKDBBRThDNzk3MDUxQTQxMzM0OTU1RjY1QzZERTFGMDBFNDQ2RTVGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRfZp0Jr5mptYQ4qFAB/MSMys IREdrAFSLMf1ZoliPfNVSb3vn42Rqy2j9wluLlIm7ZcZzWhL4HuPYPXxBfCioSBL 5ifcK7vzu79ZfpSP0lx5W/YrzVvpCNctMS3YmPGoU6/8Co6vz25oHEbsTCeXuYOI yNiMOPuq3YO0sMPv65rj5Xx20Qx4gQ55WXuq0nKsJYQp2HX0WFaMs4k76vf11g+9 8uoCWjeiMLrXx9UIoboixwEVehMYgSs4zw86UwjlL59BOueU8fHRU/eJcovoNcd7 b8FmDSvXpNWKXiVctTAcs0q8lprr623quKUHKPyP6Xr9nNOjDdJeQS4rKtrjAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUCujHlwUaQTNJVfZcbeHwDkRuX8swHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzMyMzgzMDMzM2E2MjY0MzIzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzAzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDvSAw DQYJKoZIhvcNAQELBQADggEBAJHSqAE9dMR8V2agnNAeAeMOH+av7T/6t7ZakSeM N2O1M+GpG+1N5DiPDOLdYYut2RQjN3lFPyI3XV0Wpzp0xptfcpAh4g1/reeMwFJC WWILrQJgBMcZ02RionLbM9ntpvOHH3xFUX1GaUnQy+EM/2QB8M3hotJnoAGO85dt MnpTZw4XJsDB6ElpfCEH05Z3+R8mFMEM1HWtYnuU8S7SOEM0YU24uiE0sROcHEiA UaXdILfR+4OKR7DpzL2QmCpFLgPhDwZtsv0SHBFRxUDeRZ5yuydSvEmxHfp4cwQV vsAgr6GSjbHGVzWWgpJHCNdTxQ8KsvTHnNmKUmDG72VZVho= -----END CERTIFICATE-----Generated at Tue Jan 13 09:26:18 2026 by rpki-client