This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa File: 323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa (raw, json) Hash identifier: FjWYD/aMUF+3P7vWkaS9E9GVIVtcgZf4c2zH8XILbAU= Subject key identifier: F8:7E:6E:03:F2:8E:01:41:CA:32:A1:D1:D0:33:BA:49:69:73:3C:F1 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 2506546C6AB7804B14007E1B7EDF100F8C982AC3 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa Signing time: Mon 12 Jan 2026 17:59:58 +0000 ROA not before: Mon 12 Jan 2026 17:54:58 +0000 ROA not after: Mon 11 Jan 2027 17:59:58 +0000 asID: 272979 IP address blocks: 2803:b0e0:99cd::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 09:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:06:54:6c:6a:b7:80:4b:14:00:7e:1b:7e:df:10:0f:8c:98:2a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 12 17:54:58 2026 GMT Not After : Jan 11 17:59:58 2027 GMT Subject: CN=F87E6E03F28E0141CA32A1D1D033BA4969733CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:1a:33:2b:b4:f9:91:ca:44:8f:5d:a1:df: c0:63:08:ed:6c:56:73:40:eb:d8:e8:53:50:6e:dc: c4:06:db:c0:bb:b0:f9:4f:af:51:9e:a2:05:29:83: f6:fd:32:0e:b1:9a:33:79:02:19:1c:02:b9:3b:58: cf:7e:bd:b6:da:03:82:32:6f:e0:eb:a2:0c:dc:0a: 33:62:83:ce:3a:cd:88:86:0b:7c:fd:32:2b:9c:e4: d1:ff:30:fa:3f:d9:ad:c4:6c:b1:33:36:b6:d8:45: df:6f:22:ff:07:d4:96:1c:72:e7:27:e0:40:82:32: 34:07:74:3b:db:ca:31:20:5e:34:38:66:08:9d:d0: f9:f5:b8:dd:a5:e7:fb:c2:bd:32:ac:3f:91:7d:09: 9c:1f:cd:e3:df:a4:28:7f:5e:48:29:58:d3:39:7e: 0f:66:1b:ec:24:a1:ba:b8:c1:94:a9:46:87:ca:6c: 29:02:1b:27:be:8a:b1:50:8c:0c:b1:c5:a6:be:de: 5f:35:9b:2c:4b:27:75:08:7b:0a:2e:45:e5:b2:64: 41:ac:d2:c0:08:bf:01:29:4c:b7:92:77:80:b9:4d: 53:bd:91:77:c6:e6:90:b7:81:c9:0a:b1:8a:da:c0: 72:46:f9:b8:99:d8:1e:71:33:2e:d5:b0:e0:c5:46: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:6E:03:F2:8E:01:41:CA:32:A1:D1:D0:33:BA:49:69:73:3C:F1 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963643a3a2f34382d3438203d3e20323732393739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:99cd::/48 Signature Algorithm: sha256WithRSAEncryption 61:29:63:8b:e4:f9:2f:e9:a5:e4:9c:37:ef:cd:74:1d:1b:8c: a6:de:d6:95:dd:ec:21:a4:b7:8e:5d:40:38:3c:94:e1:ff:d5: 89:1d:a2:16:27:a6:90:7b:9f:90:fc:99:dd:f6:3e:6e:4a:55: 15:d8:58:89:94:5e:10:31:45:42:44:d6:49:60:df:8d:e9:35: 17:fa:1a:ac:24:43:35:61:7d:96:e5:50:82:65:5e:db:f6:b8: 29:74:bf:dd:b9:72:0c:85:35:53:fb:f9:1c:de:b4:0d:92:09: 5d:e9:1f:8e:9b:6f:4f:f6:7a:d0:81:44:c8:32:d8:cf:e2:23: 5a:15:39:cb:34:6a:b3:92:a1:34:e0:bd:29:05:11:be:5e:a6: bf:56:a6:23:0c:ab:03:cd:d2:6d:c9:50:36:0f:41:d1:2b:31: af:c2:89:91:8e:65:75:91:5d:2b:dc:1f:7c:fd:a0:fe:03:41: 0f:41:b2:9a:84:55:a5:79:c9:a2:da:e7:95:e5:64:83:75:65: 73:ee:eb:d5:84:9a:b2:04:33:83:ac:e1:47:a4:6c:f7:e0:30: 3b:54:c0:47:8c:89:d9:6e:25:c1:db:c4:5c:00:be:e3:35:5c: 9e:67:a6:ed:12:58:28:8e:fc:4c:f7:78:33:4b:66:44:90:b1: 18:73:aa:32 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUJQZUbGq3gEsUAH4bft8QD4yYKsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMTIxNzU0NThaFw0yNzAxMTExNzU5NThaMDMxMTAvBgNV BAMTKEY4N0U2RTAzRjI4RTAxNDFDQTMyQTFEMUQwMzNCQTQ5Njk3MzNDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HhozK7T5kcpEj12h38BjCO1s VnNA69joU1Bu3MQG28C7sPlPr1GeogUpg/b9Mg6xmjN5AhkcArk7WM9+vbbaA4Iy b+DrogzcCjNig846zYiGC3z9Miuc5NH/MPo/2a3EbLEzNrbYRd9vIv8H1JYccucn 4ECCMjQHdDvbyjEgXjQ4Zgid0Pn1uN2l5/vCvTKsP5F9CZwfzePfpCh/XkgpWNM5 fg9mG+wkobq4wZSpRofKbCkCGye+irFQjAyxxaa+3l81myxLJ3UIewouReWyZEGs 0sAIvwEpTLeSd4C5TVO9kXfG5pC3gckKsYrawHJG+biZ2B5xMy7VsODFRpkvAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU+H5uA/KOAUHKMqHR0DO6SWlzPPEwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTYzNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7Dgmc0wDQYJKoZIhvcNAQELBQADggEBAGEpY4vk+S/ppeScN+/NdB0b jKbe1pXd7CGkt45dQDg8lOH/1YkdohYnppB7n5D8md32Pm5KVRXYWImUXhAxRUJE 1klg343pNRf6GqwkQzVhfZblUIJlXtv2uCl0v925cgyFNVP7+RzetA2SCV3pH46b b0/2etCBRMgy2M/iI1oVOcs0arOSoTTgvSkFEb5epr9WpiMMqwPN0m3JUDYPQdEr Ma/CiZGOZXWRXSvcH3z9oP4DQQ9BspqEVaV5yaLa55XlZIN1ZXPu69WEmrIEM4Os 4UekbPfgMDtUwEeMidluJcHbxFwAvuM1XJ5npu0SWCiO/Ez3eDNLZkSQsRhzqjI= -----END CERTIFICATE-----Generated at Tue Jan 13 04:02:38 2026 by rpki-client