This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a623030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a623030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: tH0IoNHHxXzvKMg81RQoU1Mt55XfG22AO6GQbkGZf34= Subject key identifier: 45:FA:8A:4E:77:1E:00:9F:85:30:B5:45:7D:E9:5D:DD:96:D4:F7:6F Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 732E2E3DE09BACE9DD21102CFADBAFD0D69E0154 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a623030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:25 +0000 ROA not before: Tue 06 Jan 2026 19:07:25 +0000 ROA not after: Tue 05 Jan 2027 19:12:25 +0000 asID: 269782 IP address blocks: 2803:2360:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:2e:3d:e0:9b:ac:e9:dd:21:10:2c:fa:db:af:d0:d6:9e:01:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:25 2026 GMT Not After : Jan 5 19:12:25 2027 GMT Subject: CN=45FA8A4E771E009F8530B5457DE95DDD96D4F76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:bb:ce:83:8a:16:1b:fe:62:87:75:67:61: aa:6b:6c:b2:16:46:11:38:a0:ef:9e:96:a3:65:7f: 29:b0:2f:7a:05:eb:0b:d2:a4:48:8b:2f:b1:c8:3c: 5a:a4:dd:f1:b7:d4:37:78:21:98:77:7a:97:db:05: 8c:07:4e:32:77:82:f7:ce:32:7d:78:09:47:d2:c3: 0a:64:b5:ce:3b:2e:92:16:be:59:9a:c9:50:d1:4c: eb:81:75:b0:35:2e:33:bc:0a:ca:cd:9d:21:a6:0d: 6e:88:98:b6:84:96:af:14:99:ad:32:2a:bf:76:d2: 9c:85:54:f5:98:02:c9:a8:fe:67:24:85:29:83:d1: e8:d6:5b:27:2e:18:25:da:93:23:67:c4:7e:ab:8d: ef:6f:0f:65:aa:49:22:61:87:8d:45:67:3a:8b:d0: 61:2d:51:7c:37:a3:db:f8:b3:2b:a9:11:a0:3f:59: fe:94:ad:04:d4:bd:b8:bf:28:6b:8b:80:62:48:c6: b5:ad:ed:68:74:53:87:52:0f:20:7b:cb:31:7b:cd: cf:6b:f4:78:ec:dc:0f:95:bb:bc:c2:d5:04:67:7d: cd:35:84:56:ab:d7:99:d9:0f:9a:ea:96:81:25:92: 31:78:5c:12:8b:67:e6:de:e0:6f:40:45:42:73:c0: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:8A:4E:77:1E:00:9F:85:30:B5:45:7D:E9:5D:DD:96:D4:F7:6F X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a623030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:b000::/36 Signature Algorithm: sha256WithRSAEncryption aa:05:40:15:39:52:cc:cf:5d:b5:10:08:59:21:17:93:e2:ea: 03:51:87:21:32:6c:8b:38:70:13:09:45:99:32:d2:f5:a5:47: 26:d8:41:97:8f:c4:3f:76:9d:83:ca:cc:36:de:a6:82:e6:47: e9:e4:3b:7c:70:69:f4:9c:b4:7c:93:86:43:6f:50:05:e0:9c: 7e:0e:3f:ae:90:63:34:1d:9f:1a:f8:a2:76:7c:42:8f:03:d6: 34:9c:91:18:5f:57:69:ed:8f:c0:c3:d1:3e:3c:04:19:05:04: 8b:e5:f7:26:90:9d:08:68:80:61:bc:64:57:47:e0:f8:16:a1: eb:f1:32:91:22:d3:71:24:eb:4c:28:ad:23:17:19:e7:a0:c9: 92:fb:74:3b:bd:6e:fd:a9:59:a5:90:9f:83:b8:ae:4a:42:b7: 3b:37:e0:6c:35:2f:4a:43:d3:62:e3:e4:d2:89:35:27:a6:51: 37:e7:ca:53:36:f2:4c:d0:13:98:6c:2c:3c:2f:3e:2d:a1:fc: 0b:c0:95:f7:a9:e8:61:9d:dc:f1:f0:32:98:42:70:90:d8:f3: 9e:ef:18:92:56:cd:7c:f7:d0:a7:68:89:49:b0:01:29:5a:78: 5b:c9:9b:32:ec:68:a7:7e:a2:55:ec:13:74:0a:0f:7b:0f:5a: bc:c9:60:93 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUcy4uPeCbrOndIRAs+tuv0NaeAVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjVaFw0yNzAxMDUxOTEyMjVaMDMxMTAvBgNV BAMTKDQ1RkE4QTRFNzcxRTAwOUY4NTMwQjU0NTdERTk1REREOTZENEY3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5b7vOg4oWG/5ih3VnYaprbLIW RhE4oO+elqNlfymwL3oF6wvSpEiLL7HIPFqk3fG31Dd4IZh3epfbBYwHTjJ3gvfO Mn14CUfSwwpktc47LpIWvlmayVDRTOuBdbA1LjO8CsrNnSGmDW6ImLaElq8Uma0y Kr920pyFVPWYAsmo/mckhSmD0ejWWycuGCXakyNnxH6rje9vD2WqSSJhh41FZzqL 0GEtUXw3o9v4syupEaA/Wf6UrQTUvbi/KGuLgGJIxrWt7Wh0U4dSDyB7yzF7zc9r 9Hjs3A+Vu7zC1QRnfc01hFar15nZD5rqloElkjF4XBKLZ+be4G9ARUJzwGIVAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQURfqKTnceAJ+FMLVFfeld3ZbU928wHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhNjIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgsDANBgkqhkiG9w0BAQsFAAOCAQEAqgVAFTlSzM9dtRAIWSEXk+Lq A1GHITJsizhwEwlFmTLS9aVHJthBl4/EP3adg8rMNt6mguZH6eQ7fHBp9Jy0fJOG Q29QBeCcfg4/rpBjNB2fGviidnxCjwPWNJyRGF9Xae2PwMPRPjwEGQUEi+X3JpCd CGiAYbxkV0fg+Bah6/EykSLTcSTrTCitIxcZ56DJkvt0O71u/alZpZCfg7iuSkK3 OzfgbDUvSkPTYuPk0ok1J6ZRN+fKUzbyTNATmGwsPC8+LaH8C8CV96noYZ3c8fAy mEJwkNjznu8YklbNfPfQp2iJSbABKVp4W8mbMuxop36iVewTdAoPew9avMlgkw== -----END CERTIFICATE-----Generated at Sun Jan 11 20:00:17 2026 by rpki-client