This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030643a3a2f34382d3438203d3e20323732383333.roa File: 323830333a623065303a383030643a3a2f34382d3438203d3e20323732383333.roa (raw, json) Hash identifier: 72Mp/O723G0EFK9MAlMo1F6J+qu2f0m69Jq3/yBJCJk= Subject key identifier: FB:7C:61:AA:5B:DD:2A:C4:6C:7B:6F:C8:01:8C:DA:80:0C:75:55:9D Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 5A97750A174E13E65104EDE17BBF199CA61667B2 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030643a3a2f34382d3438203d3e20323732383333.roa Signing time: Tue 06 Jan 2026 19:10:15 +0000 ROA not before: Tue 06 Jan 2026 19:05:15 +0000 ROA not after: Tue 05 Jan 2027 19:10:15 +0000 asID: 272833 IP address blocks: 2803:b0e0:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:97:75:0a:17:4e:13:e6:51:04:ed:e1:7b:bf:19:9c:a6:16:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:15 2026 GMT Not After : Jan 5 19:10:15 2027 GMT Subject: CN=FB7C61AA5BDD2AC46C7B6FC8018CDA800C75559D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:07:28:f8:6b:2a:aa:cd:1e:34:16:90:5f: 04:1c:93:30:d5:1d:84:bd:50:ef:6a:f9:82:d2:95: fe:50:36:85:f0:f4:61:d9:64:10:74:e6:c3:d3:1b: a7:08:a2:5a:51:44:1b:80:e6:94:45:e8:e5:22:06: 22:cc:e7:d3:3e:97:f4:f8:82:bf:ad:e4:06:f5:58: 6a:5a:f0:f6:08:6d:df:26:74:38:9d:1f:59:ed:ae: 28:44:bb:5b:64:c1:6b:81:96:67:87:ac:67:dd:0d: 9f:8a:f1:72:0f:15:05:98:07:69:bc:df:4e:46:9a: f3:17:c2:db:bf:ce:28:11:80:71:bd:89:dc:e4:51: cb:46:43:87:11:40:20:20:e3:11:35:08:6d:e2:20: 91:35:64:27:af:62:d7:82:c7:cd:01:f9:76:98:71: 88:16:aa:d7:f5:07:bf:bb:66:69:17:be:ef:fb:3e: 63:5a:20:0b:cb:7a:f6:54:c0:2e:53:f9:23:f9:b3: c9:b6:29:ad:40:64:9f:53:04:a1:ba:08:64:c1:54: 5c:91:26:4f:ba:1b:d5:9d:2f:d3:df:46:97:a0:82: b5:97:8e:56:99:a3:57:55:08:88:3d:72:72:89:38: b8:83:95:84:76:81:b4:e1:49:b1:84:68:7b:1b:f9: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7C:61:AA:5B:DD:2A:C4:6C:7B:6F:C8:01:8C:DA:80:0C:75:55:9D X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030643a3a2f34382d3438203d3e20323732383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:800d::/48 Signature Algorithm: sha256WithRSAEncryption a6:55:14:eb:8b:dd:8f:bb:e4:02:35:95:59:29:1e:a9:6c:7c: 68:cd:15:6c:39:c8:ab:77:98:99:1a:58:a3:d8:5d:84:5d:0a: 72:95:33:d9:04:5f:60:84:bd:b7:d8:53:3a:65:4e:0f:6a:68: 86:30:de:ab:f0:b1:a8:86:ae:ff:20:8a:0b:5b:69:7a:74:aa: 32:82:96:fe:2f:30:71:ec:25:0f:d8:71:4b:a3:5d:de:6a:ac: 34:48:e5:5e:52:a8:61:bb:8c:84:5b:27:42:00:10:95:2d:7f: e9:17:20:ec:95:19:70:48:a2:71:36:f7:4e:d3:e1:8c:b1:8c: 1d:76:08:1b:72:ab:72:11:4f:01:0b:b2:98:38:98:ab:a2:05: 5c:41:d5:2c:b4:bf:e0:2c:a6:4f:47:5a:d2:ee:7c:18:a8:5f: 15:31:03:74:2e:67:de:34:38:03:9c:7a:4c:ef:f1:79:90:69: 7d:a7:d9:32:32:76:b1:5c:73:bc:0c:50:40:43:38:c0:a1:77: 0a:42:91:f7:54:56:e8:a0:8d:cf:22:d4:ee:a1:0c:e8:2b:22: 07:37:e1:63:61:34:1b:07:d5:09:98:d0:a1:95:e8:ed:b2:c4: 6f:24:21:db:e5:4c:d4:80:e7:34:42:a4:87:7c:3e:4b:af:66: 96:36:94:f3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUWpd1ChdOE+ZRBO3he78ZnKYWZ7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTVaFw0yNzAxMDUxOTEwMTVaMDMxMTAvBgNV BAMTKEZCN0M2MUFBNUJERDJBQzQ2QzdCNkZDODAxOENEQTgwMEM3NTU1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahQco+Gsqqs0eNBaQXwQckzDV HYS9UO9q+YLSlf5QNoXw9GHZZBB05sPTG6cIolpRRBuA5pRF6OUiBiLM59M+l/T4 gr+t5Ab1WGpa8PYIbd8mdDidH1ntrihEu1tkwWuBlmeHrGfdDZ+K8XIPFQWYB2m8 305GmvMXwtu/zigRgHG9idzkUctGQ4cRQCAg4xE1CG3iIJE1ZCevYteCx80B+XaY cYgWqtf1B7+7ZmkXvu/7PmNaIAvLevZUwC5T+SP5s8m2Ka1AZJ9TBKG6CGTBVFyR Jk+6G9WdL9PfRpeggrWXjlaZo1dVCIg9cnKJOLiDlYR2gbThSbGEaHsb+Z3JAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU+3xhqlvdKsRse2/IAYzagAx1VZ0wHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz MDMwNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODMzMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DggA0wDQYJKoZIhvcNAQELBQADggEBAKZVFOuL3Y+75AI1lVkpHqls fGjNFWw5yKt3mJkaWKPYXYRdCnKVM9kEX2CEvbfYUzplTg9qaIYw3qvwsaiGrv8g igtbaXp0qjKClv4vMHHsJQ/YcUujXd5qrDRI5V5SqGG7jIRbJ0IAEJUtf+kXIOyV GXBIonE2907T4YyxjB12CBtyq3IRTwELspg4mKuiBVxB1Sy0v+Aspk9HWtLufBio XxUxA3QuZ940OAOcekzv8XmQaX2n2TIydrFcc7wMUEBDOMChdwpCkfdUVuigjc8i 1O6hDOgrIgc34WNhNBsH1QmY0KGV6O2yxG8kIdvlTNSA5zRCpId8PkuvZpY2lPM= -----END CERTIFICATE-----Generated at Tue Jan 13 05:35:52 2026 by rpki-client