This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa File: 323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa (raw, json) Hash identifier: 9NOaFxCejqGtyYSWB+qOsGBON6xuKpWOL0yVohsroJ8= Subject key identifier: 0E:32:72:CC:91:D9:80:DD:58:11:72:E5:82:14:53:B8:1E:B6:7B:92 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 661FD470EB7AB73D43120A7C7009281B6E738F26 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:22 +0000 ROA not before: Tue 06 Jan 2026 19:07:22 +0000 ROA not after: Tue 05 Jan 2027 19:12:22 +0000 asID: 269782 IP address blocks: 2803:2360:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 11:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1f:d4:70:eb:7a:b7:3d:43:12:0a:7c:70:09:28:1b:6e:73:8f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:22 2026 GMT Not After : Jan 5 19:12:22 2027 GMT Subject: CN=0E3272CC91D980DD581172E5821453B81EB67B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:0e:1a:c0:85:f1:04:4d:79:44:77:41:08: 6d:50:ac:b2:6b:88:8c:93:c5:b2:6c:da:e4:0a:2d: 56:11:89:e1:66:63:95:aa:0f:d5:17:13:bf:ae:75: b3:8d:bb:00:00:e3:64:a3:74:45:55:33:b8:3f:a1: 61:e3:53:ef:dd:fa:7a:d0:d8:a8:ab:4c:1c:2c:b1: 74:1a:6a:49:4f:f8:06:78:44:60:a6:27:92:5d:64: d6:49:fe:c4:36:1f:a7:b7:89:4b:60:2c:c5:e3:d1: 19:f7:b4:f4:b0:f9:e9:8c:23:2c:e7:9f:f7:57:d1: 41:ed:69:4f:18:98:b5:57:db:1b:ee:1b:25:c2:b2: 28:34:f0:2d:0f:8e:c8:2e:6f:03:5b:fc:88:70:8b: 4b:29:49:f9:58:e1:c0:b0:79:0c:a1:49:63:96:78: 78:dd:d3:42:6c:e1:5d:c5:45:ad:3b:4d:3b:48:83: a3:28:c0:2f:81:10:4d:ab:76:66:c8:01:eb:b2:29: 08:d6:03:a2:a6:5a:54:23:e1:de:56:d8:2d:e3:b5: 43:7f:0d:9a:b7:b7:12:a3:cc:20:b5:dc:60:35:01: 32:12:1c:14:4e:c1:9e:0e:c6:71:2b:f7:d2:c0:f0: 45:62:e0:2d:ef:7d:f7:d4:36:7e:0f:e8:60:00:f1: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:72:CC:91:D9:80:DD:58:11:72:E5:82:14:53:B8:1E:B6:7B:92 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a343030303a3a2f33342d3334203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:4000::/34 Signature Algorithm: sha256WithRSAEncryption 8b:38:e3:ac:c3:5b:7c:da:8e:47:86:e7:d8:b5:43:9f:ff:e5: 79:2c:6b:ea:3c:0a:a6:b8:f0:ed:79:fa:81:c3:d0:9d:94:39: de:53:4c:90:c8:03:d4:8b:6b:71:ca:eb:fc:cc:23:82:fc:b8: d5:69:d4:07:69:f8:21:f9:76:bd:a9:dd:23:86:35:98:2c:f9: d7:97:98:17:af:64:c7:bc:1b:2a:1c:1d:5f:f3:26:08:38:aa: cb:1c:ec:14:a5:c1:51:11:ed:01:18:ff:04:a2:15:3c:5e:ed: ec:3e:42:14:26:76:79:55:78:04:b3:37:fc:2e:4e:9d:b4:e2: d9:78:88:70:08:7d:72:1f:14:21:cf:f6:24:28:d3:3e:ff:59: d4:7d:01:44:fa:0c:82:3b:b7:b6:99:8c:f3:22:9e:4e:c0:3e: 7b:0d:a5:d1:05:f5:ef:23:be:87:62:f6:d3:aa:57:2f:a0:25: 83:da:9a:2b:b6:ae:cb:51:58:ec:15:ca:7f:24:73:5a:6f:75: b6:17:8e:fb:6d:22:11:a9:74:a5:0d:bb:70:17:79:9e:56:4b: f4:5d:83:a7:8f:5e:cf:02:72:f0:d8:e1:05:87:62:07:09:bd: 39:20:d0:24:3b:63:bb:ee:fb:5e:d2:13:f7:09:8c:07:b1:94: 28:a8:ae:0d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZh/UcOt6tz1DEgp8cAkoG25zjyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjJaFw0yNzAxMDUxOTEyMjJaMDMxMTAvBgNV BAMTKDBFMzI3MkNDOTFEOTgwREQ1ODExNzJFNTgyMTQ1M0I4MUVCNjdCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJg4awIXxBE15RHdBCG1QrLJr iIyTxbJs2uQKLVYRieFmY5WqD9UXE7+udbONuwAA42SjdEVVM7g/oWHjU+/d+nrQ 2KirTBwssXQaaklP+AZ4RGCmJ5JdZNZJ/sQ2H6e3iUtgLMXj0Rn3tPSw+emMIyzn n/dX0UHtaU8YmLVX2xvuGyXCsig08C0PjsgubwNb/Ihwi0spSflY4cCweQyhSWOW eHjd00Js4V3FRa07TTtIg6MowC+BEE2rdmbIAeuyKQjWA6KmWlQj4d5W2C3jtUN/ DZq3txKjzCC13GA1ATISHBROwZ4OxnEr99LA8EVi4C3vfffUNn4P6GAA8UhFAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUDjJyzJHZgN1YEXLlghRTuB62e5IwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzQz MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYoAyNgQDANBgkqhkiG9w0BAQsFAAOCAQEAizjjrMNbfNqOR4bn2LVDn//l eSxr6jwKprjw7Xn6gcPQnZQ53lNMkMgD1Itrccrr/Mwjgvy41WnUB2n4Ifl2vand I4Y1mCz515eYF69kx7wbKhwdX/MmCDiqyxzsFKXBURHtARj/BKIVPF7t7D5CFCZ2 eVV4BLM3/C5OnbTi2XiIcAh9ch8UIc/2JCjTPv9Z1H0BRPoMgju3tpmM8yKeTsA+ ew2l0QX17yO+h2L206pXL6Alg9qaK7auy1FY7BXKfyRzWm91theO+20iEal0pQ27 cBd5nlZL9F2Dp49ezwJy8NjhBYdiBwm9OSDQJDtju+77XtIT9wmMB7GUKKiuDQ== -----END CERTIFICATE-----Generated at Fri Jan 9 15:54:40 2026 by rpki-client