This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: etgzuz5yeS9NIvnx2h2GOIGc+Mpc6lykcpkuFVD8PNc= Subject key identifier: F5:92:FC:0B:7C:6A:42:C3:B6:34:B1:8F:10:2D:5F:A7:18:94:51:78 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 68317EFEC8808DC094199545C660A0AF44710ED4 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:21 +0000 ROA not before: Tue 06 Jan 2026 19:07:21 +0000 ROA not after: Tue 05 Jan 2027 19:12:21 +0000 asID: 269782 IP address blocks: 2803:2360:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:31:7e:fe:c8:80:8d:c0:94:19:95:45:c6:60:a0:af:44:71:0e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:21 2026 GMT Not After : Jan 5 19:12:21 2027 GMT Subject: CN=F592FC0B7C6A42C3B634B18F102D5FA718945178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:66:99:da:a1:65:a7:32:27:54:23:e0:07: c2:35:f5:7e:1d:69:4c:07:7e:c5:91:78:49:83:1f: d9:2a:af:d6:94:92:c1:f3:88:71:78:33:28:32:75: d2:b2:52:96:95:4f:54:e5:da:7f:b9:c0:58:45:29: 46:61:9a:c3:c0:6c:e2:59:9a:0d:4d:b7:cc:ea:2b: 49:84:46:1d:9b:2f:cf:86:c7:28:aa:99:0a:84:ee: 8d:11:bc:55:e3:ac:31:97:0d:2c:cd:1a:d8:d5:c4: f4:47:a0:6b:bf:7e:8c:91:42:77:0c:2f:51:79:9c: 61:f0:48:f8:8d:ad:2c:78:75:14:89:dd:02:f7:e8: 96:22:6c:9e:87:9f:88:88:6e:b7:66:b0:d8:2b:50: e9:12:1e:f9:3c:d1:f1:e1:cc:00:d1:19:60:de:4a: 20:f4:82:86:22:cb:b0:c6:7f:a9:8a:41:2b:f9:8f: a3:03:34:8f:f4:a3:f2:ab:b3:7b:24:4f:0e:b6:11: 81:d6:5d:3d:e3:9d:76:39:39:6c:fb:ad:6d:3d:8a: 69:ca:c3:50:f9:96:c0:c4:67:43:e9:b3:a9:18:f8: 9e:75:03:23:10:ee:dc:a3:8b:b9:aa:62:72:ab:37: 8b:22:2e:23:0a:e6:65:77:6d:54:2f:4c:93:c1:39: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:92:FC:0B:7C:6A:42:C3:B6:34:B1:8F:10:2D:5F:A7:18:94:51:78 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a313030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:1000::/36 Signature Algorithm: sha256WithRSAEncryption 33:c1:02:ea:10:9f:8d:67:b9:aa:df:7d:41:7a:45:fe:5a:2b: dd:04:bd:a8:5f:80:34:86:59:fd:6d:c2:14:c8:3e:d9:3f:87: 84:80:4a:26:71:a3:09:9f:fe:fb:c1:08:b8:02:52:1e:71:c2: dc:69:95:ed:ee:5f:2b:df:d2:2b:07:67:71:35:2e:08:48:f0: af:61:26:79:87:fe:4b:b8:67:66:90:ff:4d:5b:57:09:23:a9: 19:40:9e:ed:17:70:80:08:b7:93:f7:e4:cb:59:8f:bd:13:5d: de:92:28:84:68:c7:0c:2e:59:4c:cc:7e:af:02:09:f6:d0:42: 39:5f:15:96:18:05:72:6b:48:07:71:95:ec:cc:91:c6:ad:27: 64:4e:5e:c9:05:0f:7f:35:66:1f:88:f0:c3:c6:d6:d6:a0:83: 0d:16:1d:18:7c:83:69:4a:7a:3b:a0:ba:91:b6:58:b8:12:d0: 31:92:3e:c3:f2:25:64:27:b2:40:26:a5:f2:3f:88:e6:ed:e1: 4b:4e:60:5e:e4:8c:30:aa:59:fc:2c:97:8b:55:df:83:72:b7: 58:b8:e0:1f:54:7c:b2:7b:5c:a4:41:bb:3a:ef:a8:68:a1:16: 7e:0d:b8:05:4a:d9:81:99:88:b8:05:95:33:3c:ae:39:31:ef: 55:e5:9a:8a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUaDF+/siAjcCUGZVFxmCgr0RxDtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjFaFw0yNzAxMDUxOTEyMjFaMDMxMTAvBgNV BAMTKEY1OTJGQzBCN0M2QTQyQzNCNjM0QjE4RjEwMkQ1RkE3MTg5NDUxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnmaZ2qFlpzInVCPgB8I19X4d aUwHfsWReEmDH9kqr9aUksHziHF4MygyddKyUpaVT1Tl2n+5wFhFKUZhmsPAbOJZ mg1Nt8zqK0mERh2bL8+GxyiqmQqE7o0RvFXjrDGXDSzNGtjVxPRHoGu/foyRQncM L1F5nGHwSPiNrSx4dRSJ3QL36JYibJ6Hn4iIbrdmsNgrUOkSHvk80fHhzADRGWDe SiD0goYiy7DGf6mKQSv5j6MDNI/0o/Krs3skTw62EYHWXT3jnXY5OWz7rW09imnK w1D5lsDEZ0Pps6kY+J51AyMQ7tyji7mqYnKrN4siLiMK5mV3bVQvTJPBOXkxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU9ZL8C3xqQsO2NLGPEC1fpxiUUXgwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgEDANBgkqhkiG9w0BAQsFAAOCAQEAM8EC6hCfjWe5qt99QXpF/lor 3QS9qF+ANIZZ/W3CFMg+2T+HhIBKJnGjCZ/++8EIuAJSHnHC3GmV7e5fK9/SKwdn cTUuCEjwr2EmeYf+S7hnZpD/TVtXCSOpGUCe7RdwgAi3k/fky1mPvRNd3pIohGjH DC5ZTMx+rwIJ9tBCOV8VlhgFcmtIB3GV7MyRxq0nZE5eyQUPfzVmH4jww8bW1qCD DRYdGHyDaUp6O6C6kbZYuBLQMZI+w/IlZCeyQCal8j+I5u3hS05gXuSMMKpZ/CyX i1Xfg3K3WLjgH1R8sntcpEG7Ou+oaKEWfg24BUrZgZmIuAWVMzyuOTHvVeWaig== -----END CERTIFICATE-----Generated at Mon Jan 12 15:21:11 2026 by rpki-client