This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa File: 323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa (raw, json) Hash identifier: o3GNTe4DO7PDNX2utJHk08TGQd9kbnnN06VaOaJrWbI= Subject key identifier: 24:A5:FE:2A:9A:5D:6F:F3:C1:40:B2:39:7A:A3:91:3C:76:EF:89:CE Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 0A362FEC851B3C8CE725E871640C31AE55D1FE98 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa Signing time: Tue 06 Jan 2026 23:59:08 +0000 ROA not before: Tue 06 Jan 2026 23:54:08 +0000 ROA not after: Tue 05 Jan 2027 23:59:08 +0000 asID: 272978 IP address blocks: 2803:b0e0:801a::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:36:2f:ec:85:1b:3c:8c:e7:25:e8:71:64:0c:31:ae:55:d1:fe:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 23:54:08 2026 GMT Not After : Jan 5 23:59:08 2027 GMT Subject: CN=24A5FE2A9A5D6FF3C140B2397AA3913C76EF89CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:b7:7f:be:59:bb:92:48:2b:24:c8:01:b3: 01:c2:eb:03:13:ca:8b:eb:98:d0:c4:a6:55:df:74: 0d:c3:f2:57:29:1c:57:61:4d:6b:a0:ff:d8:36:e8: 10:71:3d:7d:f3:fe:33:40:f8:34:54:15:ca:3f:5b: 8b:1b:af:e2:f4:10:c0:d2:6d:b3:2c:66:cf:4d:0b: ef:b0:4d:5f:c8:0b:79:9a:a2:28:26:40:15:34:63: 2c:55:ea:2a:d2:88:02:18:7f:35:d2:df:d2:31:73: c3:b7:a1:94:9b:81:72:b9:ba:6c:ea:c7:c4:32:15: 16:5f:56:8d:d5:bc:24:a1:2c:a9:2c:e3:42:4f:7d: 7d:15:5e:ed:38:89:d4:00:66:1a:ec:f3:10:f7:8e: 92:7f:5b:07:72:99:9a:7a:3b:e3:57:e5:a4:dd:ff: 75:1b:ec:3b:7a:05:6a:66:b5:89:50:1f:ea:84:b5: 75:78:96:b2:53:cb:39:8f:da:83:f8:67:97:9f:8b: 27:9e:a1:5e:7e:8f:80:4c:74:77:12:4a:a5:a7:3f: 70:83:e3:f7:e6:7a:5a:ea:90:72:a7:47:b7:1f:b7: 98:6b:45:0e:26:c8:16:c0:4c:10:f1:22:20:d0:59: de:94:9d:95:e0:b9:91:66:80:46:45:11:1b:7b:04: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:FE:2A:9A:5D:6F:F3:C1:40:B2:39:7A:A3:91:3C:76:EF:89:CE X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:801a::/48 Signature Algorithm: sha256WithRSAEncryption 0e:73:91:32:c6:57:37:33:7f:ef:32:4d:25:cd:07:41:52:0d: 2e:47:0a:10:c2:9e:f9:38:41:56:d6:8d:97:68:e5:ae:e6:92: b6:55:9b:6c:ef:ad:27:ad:e9:98:d0:4d:87:a8:d3:13:87:b1: a5:76:55:2e:d1:09:53:e9:dc:76:df:f2:2c:97:e1:54:ce:a6: af:5b:6d:6e:df:c9:12:40:31:ea:9b:6b:ed:20:3c:6b:a2:42: d4:f7:cd:ce:e7:df:21:06:94:44:19:c9:7e:b6:78:9e:94:8b: 8a:4c:85:35:75:9e:5a:52:a6:98:4f:a0:2e:9d:ba:05:f9:4c: d6:2f:e7:69:ec:9f:75:b7:2a:88:a9:c5:a0:9f:99:77:b8:8e: ee:74:82:71:c6:a9:c3:9a:4a:7e:a7:1b:a3:0e:29:28:bd:be: c9:1a:b7:e4:bd:78:e5:87:6b:65:36:a7:ce:64:d1:02:f1:d4: b4:38:ce:87:01:46:bb:7a:16:a2:24:f4:c6:b6:b4:ca:e6:b8: a1:97:80:ed:ae:9b:3a:fd:ec:74:59:6e:4c:88:7d:bd:ab:4a: 51:a2:84:e5:0f:05:b3:20:cc:f2:f1:bc:81:d0:3d:5e:98:f3: 87:12:04:bb:f2:d0:28:7e:b9:b0:e3:61:ff:0c:09:23:00:28: aa:1a:05:f4 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUCjYv7IUbPIznJehxZAwxrlXR/pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYyMzU0MDhaFw0yNzAxMDUyMzU5MDhaMDMxMTAvBgNV BAMTKDI0QTVGRTJBOUE1RDZGRjNDMTQwQjIzOTdBQTM5MTNDNzZFRjg5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM07d/vlm7kkgrJMgBswHC6wMT yovrmNDEplXfdA3D8lcpHFdhTWug/9g26BBxPX3z/jNA+DRUFco/W4sbr+L0EMDS bbMsZs9NC++wTV/IC3maoigmQBU0YyxV6irSiAIYfzXS39Ixc8O3oZSbgXK5umzq x8QyFRZfVo3VvCShLKks40JPfX0VXu04idQAZhrs8xD3jpJ/WwdymZp6O+NX5aTd /3Ub7Dt6BWpmtYlQH+qEtXV4lrJTyzmP2oP4Z5efiyeeoV5+j4BMdHcSSqWnP3CD 4/fmelrqkHKnR7cft5hrRQ4myBbATBDxIiDQWd6UnZXguZFmgEZFERt7BLozAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUJKX+Kppdb/PBQLI5eqORPHbvic4wHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz MDMxNjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DggBowDQYJKoZIhvcNAQELBQADggEBAA5zkTLGVzczf+8yTSXNB0FS DS5HChDCnvk4QVbWjZdo5a7mkrZVm2zvrSet6ZjQTYeo0xOHsaV2VS7RCVPp3Hbf 8iyX4VTOpq9bbW7fyRJAMeqba+0gPGuiQtT3zc7n3yEGlEQZyX62eJ6Ui4pMhTV1 nlpSpphPoC6dugX5TNYv52nsn3W3KoipxaCfmXe4ju50gnHGqcOaSn6nG6MOKSi9 vskat+S9eOWHa2U2p85k0QLx1LQ4zocBRrt6FqIk9Ma2tMrmuKGXgO2umzr97HRZ bkyIfb2rSlGihOUPBbMgzPLxvIHQPV6Y84cSBLvy0Ch+ubDjYf8MCSMAKKoaBfQ= -----END CERTIFICATE-----Generated at Tue Jan 13 08:32:36 2026 by rpki-client