This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa File: 323830333a396461303a3a2f33322d3438203d3e20323637373431.roa (raw, json) Hash identifier: jgaRfoBBKF9AmSGKKWM/jW1E++52feZ595DoO7LWOaU= Subject key identifier: D8:3C:CD:7F:D5:7B:64:24:DC:0C:06:C5:AE:FA:F6:84:54:A6:A7:95 Certificate issuer: /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Certificate serial: 0DF73E53DD4CBE2E2199A8042927CBEEBDA91909 Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa Signing time: Tue 06 Jan 2026 20:57:33 +0000 ROA not before: Tue 06 Jan 2026 20:52:33 +0000 ROA not after: Tue 05 Jan 2027 20:57:33 +0000 asID: 267741 IP address blocks: 2803:9da0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 23:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f7:3e:53:dd:4c:be:2e:21:99:a8:04:29:27:cb:ee:bd:a9:19:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Validity Not Before: Jan 6 20:52:33 2026 GMT Not After : Jan 5 20:57:33 2027 GMT Subject: CN=D83CCD7FD57B6424DC0C06C5AEFAF68454A6A795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:3e:f9:49:a8:23:5c:66:e1:8c:e4:eb:3b: 92:6a:12:d4:ec:08:fe:1d:a7:8e:79:2e:ae:3b:35: 2a:27:7a:16:ff:ed:fb:e9:3a:ea:1c:04:e7:5f:81: ab:cc:dd:31:be:37:a8:c8:bb:1f:df:78:97:5b:01: 4e:e1:22:52:e6:51:23:bc:7a:6e:88:b5:40:f2:ce: 99:9f:1d:00:83:15:b0:e8:76:34:2c:d7:f3:ec:ca: 55:88:86:25:69:82:8b:74:bb:1b:a3:21:e2:c5:0b: 54:10:d7:63:fc:9c:6c:41:df:a6:db:1c:42:5c:19: e1:f4:a8:7a:43:0f:af:fd:cd:b0:18:72:3e:5f:ff: 33:4c:67:60:dc:c1:3d:7a:14:52:74:80:f0:42:96: 0b:9e:a0:0f:17:96:44:91:06:b4:ef:ad:c2:d3:ed: 3c:35:8b:6c:b0:d1:25:df:bd:6d:1e:03:95:8c:dd: 41:57:3a:14:98:fb:7f:38:5b:6b:34:00:d3:e0:c8: 99:cb:1d:13:ce:4d:86:11:d9:a3:32:3b:dc:55:36: 2f:a3:be:dd:29:11:09:4c:17:bb:0b:d7:35:30:c3: e5:e6:cc:ea:a1:68:0e:b2:a4:12:02:2a:05:7f:97: 30:c8:1f:02:10:d5:19:25:f3:fe:41:b1:e8:d0:ac: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:CD:7F:D5:7B:64:24:DC:0C:06:C5:AE:FA:F6:84:54:A6:A7:95 X509v3 Authority Key Identifier: keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9da0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:d2:d1:a8:13:59:0e:1f:cf:fd:40:2c:eb:56:2a:78:a9:a8: 9e:8c:0d:9a:f8:24:b1:5c:44:6e:ac:30:c4:3c:8f:b9:e3:9c: 60:bf:9c:63:95:1a:12:04:c7:b0:76:fd:83:f0:19:0b:0c:93: a3:d6:c5:d6:38:14:b1:18:d7:c2:ec:cd:3b:19:71:a9:e1:82: 10:ca:16:39:dd:29:af:22:a0:ad:cd:dc:f7:3b:27:c5:17:3e: 71:ea:f8:67:5c:a2:02:1d:2a:29:18:58:9b:f6:57:20:f0:83: bd:3c:04:10:dc:6d:06:07:9d:5d:2f:76:ee:c1:53:a8:a1:43: 36:f7:7e:50:bc:75:e5:04:95:6f:2a:26:11:71:3f:8a:b2:80: d7:52:ab:17:da:27:9a:90:5e:94:53:40:d6:40:15:1a:91:7d: f0:2a:fc:11:a7:c9:24:4e:a2:96:95:ce:4d:39:99:41:89:36: 44:9f:78:13:7d:31:c0:c1:db:02:a3:84:5c:7d:40:26:68:2f: da:4c:52:88:d6:0b:0f:95:7f:b0:85:c3:13:14:fa:3f:53:39: ff:89:b3:32:d5:0c:6a:ef:83:26:9e:0a:5e:10:1e:a6:06:20: 8f:f9:a8:c1:44:f3:c8:fd:f1:a8:74:44:9d:d6:e6:98:59:7f: 8c:73:da:fe -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUDfc+U91Mvi4hmagEKSfL7r2pGQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBMzVFOEJCQkUxNzZGMzVFQTZGRDBEQkY1NDZFQUY2 RUI4QTM4RjAeFw0yNjAxMDYyMDUyMzNaFw0yNzAxMDUyMDU3MzNaMDMxMTAvBgNV BAMTKEQ4M0NDRDdGRDU3QjY0MjREQzBDMDZDNUFFRkFGNjg0NTRBNkE3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/D75SagjXGbhjOTrO5JqEtTs CP4dp455Lq47NSonehb/7fvpOuocBOdfgavM3TG+N6jIux/feJdbAU7hIlLmUSO8 em6ItUDyzpmfHQCDFbDodjQs1/PsylWIhiVpgot0uxujIeLFC1QQ12P8nGxB36bb HEJcGeH0qHpDD6/9zbAYcj5f/zNMZ2DcwT16FFJ0gPBClgueoA8XlkSRBrTvrcLT 7Tw1i2yw0SXfvW0eA5WM3UFXOhSY+384W2s0ANPgyJnLHRPOTYYR2aMyO9xVNi+j vt0pEQlMF7sL1zUww+XmzOqhaA6ypBICKgV/lzDIHwIQ1Rkl8/5BsejQrCjDAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU2DzNf9V7ZCTcDAbFrvr2hFSmp5UwHwYDVR0j BBgwFoAUNKNei7vhdvNepv0Nv1Rur264o48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODRBMTYzMDYxQjhCMzdFMUU1MERDRTlBNzJCMkQ1NDQ3 NTJEOUI2MkU4NjM3NzcyRUJFQzk5MDQ1RTcxNDAzLzAvMzRBMzVFOEJCQkUxNzZG MzVFQTZGRDBEQkY1NDZFQUY2RUI4QTM4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEEzNUU4QkJCRTE3NkYzNUVB NkZEMERCRjU0NkVBRjZFQjhBMzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg0QTE2MzA2MUI4QjM3RTFFNTBEQ0U5QTcyQjJENTQ0NzUyRDlCNjJF ODYzNzc3MkVCRUM5OTA0NUU3MTQwMy8wLzMyMzgzMDMzM2EzOTY0NjEzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM3MzQzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnaAw DQYJKoZIhvcNAQELBQADggEBAG/S0agTWQ4fz/1ALOtWKnipqJ6MDZr4JLFcRG6s MMQ8j7njnGC/nGOVGhIEx7B2/YPwGQsMk6PWxdY4FLEY18LszTsZcanhghDKFjnd Ka8ioK3N3Pc7J8UXPnHq+GdcogIdKikYWJv2VyDwg708BBDcbQYHnV0vdu7BU6ih Qzb3flC8deUElW8qJhFxP4qygNdSqxfaJ5qQXpRTQNZAFRqRffAq/BGnySROopaV zk05mUGJNkSfeBN9McDB2wKjhFx9QCZoL9pMUojWCw+Vf7CFwxMU+j9TOf+JszLV DGrvgyaeCl4QHqYGII/5qMFE88j98ah0RJ3W5phZf4xz2v4= -----END CERTIFICATE-----Generated at Tue Jan 13 05:20:55 2026 by rpki-client