This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030373a3a2f34382d3438203d3e20323732303434.roa File: 323830333a623065303a373030373a3a2f34382d3438203d3e20323732303434.roa (raw, json) Hash identifier: nTh6oQ3bvbUxvFzJrhPrdmSVJ1GPUmnDEBniG/bBiZ0= Subject key identifier: 18:F4:73:2E:E7:C6:6E:1E:AF:80:8F:47:CD:EC:77:80:2B:83:8E:9E Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 388CA9BDEA021684363D904825DEC046E9E2CC38 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030373a3a2f34382d3438203d3e20323732303434.roa Signing time: Tue 06 Jan 2026 19:10:13 +0000 ROA not before: Tue 06 Jan 2026 19:05:13 +0000 ROA not after: Tue 05 Jan 2027 19:10:13 +0000 asID: 272044 IP address blocks: 2803:b0e0:7007::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8c:a9:bd:ea:02:16:84:36:3d:90:48:25:de:c0:46:e9:e2:cc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:13 2026 GMT Not After : Jan 5 19:10:13 2027 GMT Subject: CN=18F4732EE7C66E1EAF808F47CDEC77802B838E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:f3:3c:ff:fc:f4:2d:cf:2f:5f:b7:b4:18: 51:8e:4c:19:8e:66:7a:fa:c8:2f:4a:9e:9a:54:19: 2c:d1:5c:0a:90:88:6e:f4:09:22:d9:c2:09:ca:4a: 42:4b:a3:a8:d3:7c:7c:b2:10:7a:c8:9a:8e:5d:31: 83:2d:d6:cc:a3:67:05:c4:07:c2:a7:8d:bb:d7:a6: 0e:77:31:7f:7d:48:ca:72:56:e7:bb:72:48:d1:b5: b1:92:17:0d:5b:27:a5:c0:80:66:7b:d0:40:7b:f9: f5:d8:e6:4c:4d:b5:66:3d:41:43:f2:04:a6:42:2d: 28:8c:f4:0d:bc:91:03:02:53:81:a1:15:bb:10:9b: 1e:63:3c:3e:b6:1b:45:bd:a0:55:f9:c3:d6:5d:98: 84:7b:a9:1c:64:83:c1:18:db:6d:63:51:e7:5b:c5: 97:41:52:83:03:ce:16:ec:18:0e:62:74:a2:1c:4e: 95:ae:cd:bf:52:81:d2:8f:2a:a0:a1:21:4f:55:9b: f0:81:f6:ba:55:e0:87:f7:8f:0b:eb:76:f3:22:8d: 95:e3:77:b8:fa:9d:4b:7e:3a:60:b0:39:45:2d:33: 25:ff:7b:d2:fc:60:1a:16:79:02:7f:eb:ed:df:4f: 82:8e:b7:4c:81:78:e3:27:24:ad:02:55:25:fb:d1: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F4:73:2E:E7:C6:6E:1E:AF:80:8F:47:CD:EC:77:80:2B:83:8E:9E X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030373a3a2f34382d3438203d3e20323732303434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:7007::/48 Signature Algorithm: sha256WithRSAEncryption 99:6f:43:99:4f:41:97:92:df:7a:c2:5b:ca:21:9c:92:90:d4: 50:54:d5:ab:2b:7d:f8:5e:b0:00:2d:b1:c7:79:1b:62:6b:91: 56:ae:74:f1:c6:95:fb:27:6f:17:d7:26:9a:dc:f1:f4:3d:56: 90:08:de:02:d1:8d:ee:06:7d:a6:8e:b3:64:af:87:9f:cc:b5: 14:b7:f0:60:b4:7c:41:e2:a9:e1:98:37:77:65:cf:1c:c1:6c: ec:8c:0c:88:6c:90:7b:d2:31:13:8f:93:9b:8a:3a:12:36:76: fd:ae:f9:51:e8:88:7e:eb:b2:86:0c:94:d3:7f:98:f6:35:82: a3:c5:fa:0b:df:bc:8a:4e:7e:46:5a:1e:ae:81:26:b3:ae:9a: c1:a7:cb:5d:2a:23:ab:f1:e1:57:61:e6:da:d4:48:08:42:9b: 22:3c:a6:36:94:2e:a6:88:4b:29:a6:e3:ab:1f:fd:8f:14:5b: 66:83:d7:0c:8c:02:b2:ff:4e:02:5a:98:56:f7:96:4c:36:20: 58:78:65:50:ec:4b:aa:57:91:64:c2:32:65:5a:68:a7:f8:7e: c5:7b:6e:54:f6:d0:c6:ae:54:a3:33:e9:a1:44:ce:cb:e2:22: ee:d0:b1:99:60:fd:c3:ee:9e:9f:d4:0d:4e:05:a2:ee:32:6f: 39:7c:46:a3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUOIypveoCFoQ2PZBIJd7ARunizDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTNaFw0yNzAxMDUxOTEwMTNaMDMxMTAvBgNV BAMTKDE4RjQ3MzJFRTdDNjZFMUVBRjgwOEY0N0NERUM3NzgwMkI4MzhFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHK/M8//z0Lc8vX7e0GFGOTBmO Znr6yC9KnppUGSzRXAqQiG70CSLZwgnKSkJLo6jTfHyyEHrImo5dMYMt1syjZwXE B8KnjbvXpg53MX99SMpyVue7ckjRtbGSFw1bJ6XAgGZ70EB7+fXY5kxNtWY9QUPy BKZCLSiM9A28kQMCU4GhFbsQmx5jPD62G0W9oFX5w9ZdmIR7qRxkg8EY221jUedb xZdBUoMDzhbsGA5idKIcTpWuzb9SgdKPKqChIU9Vm/CB9rpV4If3jwvrdvMijZXj d7j6nUt+OmCwOUUtMyX/e9L8YBoWeQJ/6+3fT4KOt0yBeOMnJK0CVSX70VLZAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUGPRzLufGbh6vgI9Hzex3gCuDjp4wHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzcz MDMwMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzMDM0MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgcAcwDQYJKoZIhvcNAQELBQADggEBAJlvQ5lPQZeS33rCW8ohnJKQ 1FBU1asrffhesAAtscd5G2JrkVaudPHGlfsnbxfXJprc8fQ9VpAI3gLRje4GfaaO s2Svh5/MtRS38GC0fEHiqeGYN3dlzxzBbOyMDIhskHvSMROPk5uKOhI2dv2u+VHo iH7rsoYMlNN/mPY1gqPF+gvfvIpOfkZaHq6BJrOumsGny10qI6vx4Vdh5trUSAhC myI8pjaULqaISymm46sf/Y8UW2aD1wyMArL/TgJamFb3lkw2IFh4ZVDsS6pXkWTC MmVaaKf4fsV7blT20MauVKMz6aFEzsviIu7QsZlg/cPunp/UDU4Fou4ybzl8RqM= -----END CERTIFICATE-----Generated at Tue Jan 13 09:28:41 2026 by rpki-client