This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa File: 323830303a3863303a3a2f33322d3332203d3e203138383430.roa (raw, json) Hash identifier: G/uhKe4YEiWYzcL1WOB2t0FPi1Qj7+Q0jc9cW7R7qfo= Subject key identifier: A7:CC:6E:2E:4C:63:0C:E7:85:3A:17:AF:A6:E2:6F:74:55:82:D7:19 Certificate issuer: /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Certificate serial: 58007B9C00807D6E42A4BBD09CF08770B7B29835 Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa Signing time: Tue 06 Jan 2026 19:26:26 +0000 ROA not before: Tue 06 Jan 2026 19:21:26 +0000 ROA not after: Tue 05 Jan 2027 19:26:26 +0000 asID: 18840 IP address blocks: 2800:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 12:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:00:7b:9c:00:80:7d:6e:42:a4:bb:d0:9c:f0:87:70:b7:b2:98:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Validity Not Before: Jan 6 19:21:26 2026 GMT Not After : Jan 5 19:26:26 2027 GMT Subject: CN=A7CC6E2E4C630CE7853A17AFA6E26F745582D719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:43:59:9b:20:eb:fe:e9:6f:c4:0f:59:4e: 20:0b:c9:b5:c9:a5:bd:c8:be:67:25:df:20:29:2a: 32:0d:ea:2c:6d:c3:58:91:85:60:d4:f5:7f:78:b0: d6:0c:fb:a0:73:d5:e8:7d:f9:95:07:06:9d:9c:51: b4:ad:1f:bd:eb:25:62:f6:90:85:7f:4e:3c:82:e0: c9:4a:85:33:9b:76:d4:5c:aa:57:bf:df:b6:a3:78: a4:9b:d1:0f:64:8f:90:1a:ed:d0:91:6f:e3:5f:a2: a3:1d:8e:7d:8a:fd:a7:59:29:ba:cd:ea:e8:52:9e: d9:ea:19:47:70:1d:67:e9:30:bc:a5:3e:eb:34:30: b2:28:85:9f:ed:69:1c:44:9a:07:8a:81:be:2d:36: b3:d3:a5:6d:a8:0b:cd:a7:76:d5:b2:6b:d6:61:3c: 46:ea:11:e6:dc:f2:8a:e3:06:2c:ed:19:a2:f9:f3: 27:e2:15:35:0e:21:f2:39:05:60:8f:ac:7c:90:80: 8d:b1:a6:ca:b1:e3:b2:1b:85:e5:a8:cd:0d:38:e1: c1:a1:98:18:23:12:0b:b3:96:8c:4c:ae:72:94:9a: 09:2d:5b:d5:f1:ed:1f:f2:0c:63:69:67:41:24:ea: bd:7d:b8:3c:49:20:4e:51:25:96:b5:52:34:8b:dd: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CC:6E:2E:4C:63:0C:E7:85:3A:17:AF:A6:E2:6F:74:55:82:D7:19 X509v3 Authority Key Identifier: keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 68:cd:29:37:13:f5:89:a0:89:b4:29:06:c0:e1:b1:23:e5:5f: 1a:53:88:f0:5d:f3:dc:dc:44:83:d1:b6:c4:b6:e9:de:48:7e: 5f:f8:f0:d7:c2:6b:71:fe:97:99:d2:bc:41:3e:fe:72:65:01: e0:15:74:35:5e:62:93:af:17:51:78:31:6a:ab:e5:06:c3:38: 3d:6a:92:f4:f6:c0:3e:22:70:09:f2:bf:16:36:3a:c1:36:fa: 2e:23:b7:5d:d7:8f:03:10:a8:df:31:fa:26:62:ef:df:55:4e: 83:63:c2:38:c6:a3:64:93:93:7b:79:5f:a2:33:94:c0:b2:09: 2b:7d:87:ab:35:a1:2c:4d:01:68:fc:9f:ef:60:e1:a0:76:6d: 5a:94:20:dc:38:1f:f2:18:9d:f0:4c:50:95:64:ce:5e:d5:b7: 1c:da:6a:d4:2d:89:e0:4e:57:81:43:f9:6f:58:99:68:cd:43: 1a:ac:ec:71:9e:14:f5:fb:71:c5:84:66:96:5e:88:f6:b0:4c: 2b:e3:a9:f7:fa:9a:49:94:a3:e2:bb:71:6c:83:a3:29:85:56: c6:1e:dc:3b:53:dc:2d:26:84:73:07:40:f9:63:25:70:88:eb: 5f:76:55:f5:2f:ed:89:20:78:45:5a:c2:b8:c8:e6:bb:fa:6d: 72:82:0e:4a -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUWAB7nACAfW5CpLvQnPCHcLeymDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM4Q0UyQTE3RDgwMUJCNUM3NzBFNkVCNkFCM0REREJG NzYyNThDMDAeFw0yNjAxMDYxOTIxMjZaFw0yNzAxMDUxOTI2MjZaMDMxMTAvBgNV BAMTKEE3Q0M2RTJFNEM2MzBDRTc4NTNBMTdBRkE2RTI2Rjc0NTU4MkQ3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8v0NZmyDr/ulvxA9ZTiALybXJ pb3Ivmcl3yApKjIN6ixtw1iRhWDU9X94sNYM+6Bz1eh9+ZUHBp2cUbStH73rJWL2 kIV/TjyC4MlKhTObdtRcqle/37ajeKSb0Q9kj5Aa7dCRb+NfoqMdjn2K/adZKbrN 6uhSntnqGUdwHWfpMLylPus0MLIohZ/taRxEmgeKgb4tNrPTpW2oC82ndtWya9Zh PEbqEebc8orjBiztGaL58yfiFTUOIfI5BWCPrHyQgI2xpsqx47IbheWozQ044cGh mBgjEguzloxMrnKUmgktW9Xx7R/yDGNpZ0Ek6r19uDxJIE5RJZa1UjSL3ToJAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUp8xuLkxjDOeFOhevpuJvdFWC1xkwHwYDVR0j BBgwFoAUDIzioX2AG7XHcObrarPd2/diWMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QkRENzJGMDAyOTNDNkQ3M0IxQTRFMzk4OTlEMjVEQ0Ez QzMyOTVERkIyMDA0Qjc5NzlFNDYyM0U0MDQ2OUFGLzAvMEM4Q0UyQTE3RDgwMUJC NUM3NzBFNkVCNkFCM0REREJGNzYyNThDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzhDRTJBMTdEODAxQkI1Qzc3 MEU2RUI2QUIzREREQkY3NjI1OEMwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUJERDcyRjAwMjkzQzZENzNCMUE0RTM5ODk5RDI1RENBM0MzMjk1REZC MjAwNEI3OTc5RTQ2MjNFNDA0NjlBRi8wLzMyMzgzMDMwM2EzODYzMzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMTM4MzgzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAIwDANBgkq hkiG9w0BAQsFAAOCAQEAaM0pNxP1iaCJtCkGwOGxI+VfGlOI8F3z3NxEg9G2xLbp 3kh+X/jw18Jrcf6XmdK8QT7+cmUB4BV0NV5ik68XUXgxaqvlBsM4PWqS9PbAPiJw CfK/FjY6wTb6LiO3XdePAxCo3zH6JmLv31VOg2PCOMajZJOTe3lfojOUwLIJK32H qzWhLE0BaPyf72DhoHZtWpQg3Dgf8hid8ExQlWTOXtW3HNpq1C2J4E5XgUP5b1iZ aM1DGqzscZ4U9ftxxYRmll6I9rBMK+Op9/qaSZSj4rtxbIOjKYVWxh7cO1PcLSaE cwdA+WMlcIjrX3ZV9S/tiSB4RVrCuMjmu/ptcoIOSg== -----END CERTIFICATE-----Generated at Mon Jan 12 13:51:36 2026 by rpki-client