This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a363030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a363030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: TFgUgV5r7zuf3W8PrJYE8lZ8tsr3lRnX5HhD3emQHSQ= Subject key identifier: E2:73:AB:93:BC:E6:74:15:90:D5:A3:E5:11:45:DF:3F:50:D5:A7:39 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 321F11FB4F3439F0AD3AC9FCCE787964F21B6C87 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a363030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:21 +0000 ROA not before: Tue 06 Jan 2026 19:07:21 +0000 ROA not after: Tue 05 Jan 2027 19:12:21 +0000 asID: 269782 IP address blocks: 2803:2360:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 14:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1f:11:fb:4f:34:39:f0:ad:3a:c9:fc:ce:78:79:64:f2:1b:6c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:21 2026 GMT Not After : Jan 5 19:12:21 2027 GMT Subject: CN=E273AB93BCE6741590D5A3E51145DF3F50D5A739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:05:a8:d1:47:8e:7b:ff:ba:9e:d3:4e:e5: ef:6e:7b:ee:99:85:22:4d:f9:38:c5:84:3f:f3:78: c5:e5:a6:ca:1a:0e:7c:4f:33:e6:a4:b5:34:c4:7a: 1b:1f:c5:1a:09:37:6f:6a:60:89:7a:7a:51:f4:22: 44:2e:0e:4d:15:fb:41:9c:55:69:32:b9:26:3a:ef: 5d:5c:64:a1:4d:e1:fc:d5:4f:f7:bd:7c:a2:56:64: a2:ac:f7:6e:3f:9b:2c:51:a1:17:94:6a:cb:3f:6c: 79:0f:d3:2c:f3:de:a4:7c:af:e5:e9:e8:a0:ee:54: 4e:c0:bb:98:db:4d:12:64:6b:6c:6d:6b:92:a1:0b: 3b:34:46:cd:7b:ea:00:2d:65:19:b9:4b:30:8a:03: 1f:93:f6:88:aa:86:cf:3e:47:31:9a:cc:1b:f0:e4: 70:aa:65:77:52:2e:8c:e2:8d:1d:6a:3b:53:73:ed: 86:8d:12:ef:ae:9b:03:9e:57:a0:9e:1b:38:f4:98: 30:23:b9:79:2f:3f:61:3c:0f:63:ff:e6:83:ae:d2: fb:9c:51:e3:25:a0:63:03:fc:5c:95:92:e5:8e:02: da:c8:80:a0:5d:46:4f:c8:4c:38:52:d1:ac:ae:f1: 5c:29:68:fe:21:28:e9:1f:d4:3a:d2:30:4c:60:b4: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:73:AB:93:BC:E6:74:15:90:D5:A3:E5:11:45:DF:3F:50:D5:A7:39 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a363030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:6000::/36 Signature Algorithm: sha256WithRSAEncryption 9b:2e:00:b3:f8:72:d8:61:15:4d:3a:93:f4:05:2a:d7:96:18: d2:3e:07:40:68:ee:ef:b7:60:4c:f2:1d:b3:1c:42:f9:f7:a9: 6e:d7:1c:3d:92:f3:bb:e2:82:cb:98:96:df:31:c4:ec:0e:98: c5:e3:78:25:1e:0f:3f:ae:dc:ee:f6:2e:03:ae:1e:ca:1c:a1: 8a:ec:78:bc:96:88:31:74:ac:8f:42:a4:e6:80:39:ad:4e:22: 71:97:23:98:ce:35:37:8a:ef:a9:dc:7c:81:93:21:13:04:c7: 21:3b:d1:93:17:84:2c:26:6a:5e:8b:c0:20:99:52:16:cb:12: f5:cc:88:f7:8a:1c:b2:4c:3e:a3:01:ad:d8:57:5f:37:36:5e: dc:ab:72:97:7c:12:73:95:d4:8f:ce:9b:49:1b:ec:5d:8f:24: 52:cc:2c:28:dc:75:e7:4a:5b:4b:a7:24:a0:8b:ef:8e:56:a4: 6a:9f:ae:eb:64:15:04:3a:c7:4e:3d:1a:73:41:2e:e3:aa:78: 8a:3a:10:d7:a5:1b:f5:49:15:55:b7:39:c0:51:08:2a:ad:e4: 28:a6:82:f3:27:9e:76:ee:e7:5e:3d:cf:c1:7c:fe:4b:7d:6d: ed:ec:cd:2e:86:b2:ae:03:2a:63:c7:56:64:c4:67:36:4c:73: d8:11:d6:95 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUMh8R+080OfCtOsn8znh5ZPIbbIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjFaFw0yNzAxMDUxOTEyMjFaMDMxMTAvBgNV BAMTKEUyNzNBQjkzQkNFNjc0MTU5MEQ1QTNFNTExNDVERjNGNTBENUE3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4QWo0UeOe/+6ntNO5e9ue+6Z hSJN+TjFhD/zeMXlpsoaDnxPM+aktTTEehsfxRoJN29qYIl6elH0IkQuDk0V+0Gc VWkyuSY6711cZKFN4fzVT/e9fKJWZKKs924/myxRoReUass/bHkP0yzz3qR8r+Xp 6KDuVE7Au5jbTRJka2xta5KhCzs0Rs176gAtZRm5SzCKAx+T9oiqhs8+RzGazBvw 5HCqZXdSLozijR1qO1Nz7YaNEu+umwOeV6CeGzj0mDAjuXkvP2E8D2P/5oOu0vuc UeMloGMD/FyVkuWOAtrIgKBdRk/ITDhS0ayu8VwpaP4hKOkf1DrSMExgtLYHAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU4nOrk7zmdBWQ1aPlEUXfP1DVpzkwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgYDANBgkqhkiG9w0BAQsFAAOCAQEAmy4As/hy2GEVTTqT9AUq15YY 0j4HQGju77dgTPIdsxxC+fepbtccPZLzu+KCy5iW3zHE7A6YxeN4JR4PP67c7vYu A64eyhyhiux4vJaIMXSsj0Kk5oA5rU4icZcjmM41N4rvqdx8gZMhEwTHITvRkxeE LCZqXovAIJlSFssS9cyI94ocskw+owGt2FdfNzZe3Ktyl3wSc5XUj86bSRvsXY8k UswsKNx150pbS6ckoIvvjlakap+u62QVBDrHTj0ac0Eu46p4ijoQ16Ub9UkVVbc5 wFEIKq3kKKaC8yeedu7nXj3PwXz+S31t7ezNLoayrgMqY8dWZMRnNkxz2BHWlQ== -----END CERTIFICATE-----Generated at Sun Jan 11 06:47:49 2026 by rpki-client