This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa File: 323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa (raw, json) Hash identifier: B1O5kcH9mz2kySeCUPxlAEuflN0l/lF6W/FN9BhdFVw= Subject key identifier: E6:82:A0:19:8B:2C:AA:C9:24:EF:6B:20:E1:C5:EB:A0:19:DC:31:14 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 7930A82244964A4E621B9AD67EC026BA84E4C3A4 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa Signing time: Tue 06 Jan 2026 19:10:14 +0000 ROA not before: Tue 06 Jan 2026 19:05:14 +0000 ROA not after: Tue 05 Jan 2027 19:10:14 +0000 asID: 272979 IP address blocks: 2803:b0e0:99c2::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 21:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:30:a8:22:44:96:4a:4e:62:1b:9a:d6:7e:c0:26:ba:84:e4:c3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:14 2026 GMT Not After : Jan 5 19:10:14 2027 GMT Subject: CN=E682A0198B2CAAC924EF6B20E1C5EBA019DC3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:4a:8b:52:79:57:9f:ab:11:c3:da:2b:29: fa:78:c1:88:4b:ff:c0:0b:b0:3b:1d:52:db:a3:7b: 20:2b:6f:d9:01:04:d5:ce:ef:0f:8b:c6:a3:09:7b: d0:5a:db:17:cf:c4:ae:5a:f8:8b:8a:3a:23:b1:e5: a6:88:72:4f:18:b2:92:68:f1:d9:e9:7c:9e:49:22: 4e:f3:e5:bc:33:93:77:96:d7:1b:11:e3:00:a0:ff: a1:43:4d:bf:a4:fb:65:86:53:b9:3a:7c:f6:f5:fd: 91:d1:98:42:d5:e8:84:e9:8f:66:96:26:66:35:1e: a7:fd:85:bf:01:7b:d7:e1:0e:d1:c5:87:c2:a7:a4: 15:90:05:14:89:52:52:8b:01:0a:b4:6c:8d:2b:c6: 46:a6:27:f6:77:e4:1f:ce:9b:96:a1:26:44:49:be: b9:ba:ac:8b:c8:2b:f3:7e:b1:05:b2:30:68:bc:f4: e7:e4:3f:3c:3b:98:6b:2c:65:49:2d:2a:ab:6a:2a: 25:6f:a4:13:21:15:97:40:e5:61:04:54:87:53:b2: d6:1e:fc:78:35:76:46:69:d4:fb:d2:1f:9c:3f:24: 5a:a3:74:66:63:da:85:71:3c:c9:70:e5:72:95:7c: 96:12:70:c4:37:1f:3c:1c:7a:68:a3:69:cd:dc:8d: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:82:A0:19:8B:2C:AA:C9:24:EF:6B:20:E1:C5:EB:A0:19:DC:31:14 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:99c2::/48 Signature Algorithm: sha256WithRSAEncryption 9e:eb:d7:6e:44:12:e8:a9:ad:fb:f0:c8:40:49:0d:e6:92:b2: 4e:3d:2b:74:48:05:d2:c4:53:53:1b:32:eb:e8:12:76:77:1c: bd:93:4d:71:55:a4:3d:ec:09:4c:6f:fc:e9:c5:07:95:1b:2c: d1:04:a2:c7:8f:e6:08:56:c7:b2:25:53:c8:02:24:1d:ac:c9: 6e:3b:4c:f5:54:2e:49:dc:00:28:13:e5:0d:1c:dc:3a:bd:be: c8:c5:c4:e7:28:1d:f9:ad:68:54:73:ea:a9:92:f0:61:62:d2: 10:f2:e7:45:e5:3f:ce:9b:4a:08:bd:c7:1b:fa:c4:19:8c:62: aa:b0:ed:10:4b:68:06:2f:e4:da:7a:c1:a1:94:57:68:c0:a7: d5:3e:3d:ae:b6:f5:6b:08:c8:75:b5:87:4b:91:42:cd:3b:2a: 42:57:ba:29:4f:da:cb:bc:97:8d:78:bf:04:2f:da:1f:1c:cb: f7:c5:1f:d3:90:85:70:9a:7c:8d:93:e0:b9:91:5f:fd:d6:f1: e1:d5:f2:51:f6:72:b9:41:83:f9:b3:fc:32:e5:c5:e3:3a:dd: de:a1:c3:0d:76:10:38:9b:64:a5:26:9d:fd:2b:6c:97:06:00: 95:18:d4:70:68:5b:3b:b4:6c:e0:bb:b9:1c:2d:cb:5b:7f:cd: a2:7f:ab:56 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUeTCoIkSWSk5iG5rWfsAmuoTkw6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTRaFw0yNzAxMDUxOTEwMTRaMDMxMTAvBgNV BAMTKEU2ODJBMDE5OEIyQ0FBQzkyNEVGNkIyMEUxQzVFQkEwMTlEQzMxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFkqLUnlXn6sRw9orKfp4wYhL /8ALsDsdUtujeyArb9kBBNXO7w+LxqMJe9Ba2xfPxK5a+IuKOiOx5aaIck8YspJo 8dnpfJ5JIk7z5bwzk3eW1xsR4wCg/6FDTb+k+2WGU7k6fPb1/ZHRmELV6ITpj2aW JmY1Hqf9hb8Be9fhDtHFh8KnpBWQBRSJUlKLAQq0bI0rxkamJ/Z35B/Om5ahJkRJ vrm6rIvIK/N+sQWyMGi89OfkPzw7mGssZUktKqtqKiVvpBMhFZdA5WEEVIdTstYe /Hg1dkZp1PvSH5w/JFqjdGZj2oVxPMlw5XKVfJYScMQ3Hzwcemijac3cjZeHAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU5oKgGYssqskk72sg4cXroBncMRQwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTYzMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmcIwDQYJKoZIhvcNAQELBQADggEBAJ7r125EEuiprfvwyEBJDeaS sk49K3RIBdLEU1MbMuvoEnZ3HL2TTXFVpD3sCUxv/OnFB5UbLNEEoseP5ghWx7Il U8gCJB2syW47TPVULkncACgT5Q0c3Dq9vsjFxOcoHfmtaFRz6qmS8GFi0hDy50Xl P86bSgi9xxv6xBmMYqqw7RBLaAYv5Np6waGUV2jAp9U+Pa629WsIyHW1h0uRQs07 KkJXuilP2su8l414vwQv2h8cy/fFH9OQhXCafI2T4LmRX/3W8eHV8lH2crlBg/mz /DLlxeM63d6hww12EDibZKUmnf0rbJcGAJUY1HBoWzu0bOC7uRwty1t/zaJ/q1Y= -----END CERTIFICATE-----Generated at Tue Jan 13 05:23:01 2026 by rpki-client