This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa File: 323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa (raw, json) Hash identifier: NLeuLS1llT3YOwKZUBkOQamHu3W7zLunpUIQiA+vPyQ= Subject key identifier: 2B:C3:CB:85:10:89:50:B6:A8:B3:49:79:48:12:64:1A:0C:9F:78:3B Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 22357F390134D92EB46DC3C8F41A8109357A9DD4 Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa Signing time: Tue 06 Jan 2026 19:20:07 +0000 ROA not before: Tue 06 Jan 2026 19:15:07 +0000 ROA not after: Tue 05 Jan 2027 19:20:07 +0000 asID: 272848 IP address blocks: 2803:cd60:6414::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:35:7f:39:01:34:d9:2e:b4:6d:c3:c8:f4:1a:81:09:35:7a:9d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Jan 6 19:15:07 2026 GMT Not After : Jan 5 19:20:07 2027 GMT Subject: CN=2BC3CB85108950B6A8B349794812641A0C9F783B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:55:f8:2d:bd:c5:33:75:39:b0:1b:08:2c: c3:57:32:47:19:41:84:c3:8a:5e:06:3c:d7:7a:5a: 4b:6b:72:15:39:ba:f6:10:a1:05:30:b0:8f:ab:58: 3d:97:a7:f3:1a:63:2f:06:0b:99:29:9f:9c:b0:12: 5d:f4:ef:82:ed:36:e8:6c:d5:2f:93:55:4f:10:ca: a1:c5:aa:97:2d:f7:3a:99:68:3c:e5:77:1d:25:7a: 18:62:01:97:09:73:f3:0b:81:9c:fd:8f:06:a8:65: c4:44:19:c7:85:3d:cc:42:15:a0:c3:ff:78:49:9b: c7:f2:b3:65:12:e1:67:ee:f1:79:37:cc:c8:e4:69: 14:40:c2:41:03:30:ef:85:95:7f:10:d0:5f:f0:d7: fd:28:06:6a:d2:77:8f:80:03:bb:08:e7:3d:8a:55: a9:84:45:55:29:00:41:01:62:93:33:44:10:31:00: 97:a8:52:4f:25:5c:37:fc:f1:96:0b:9e:b1:0a:31: 22:f7:e9:3d:01:89:ca:4d:24:a0:bd:49:bd:5a:6b: 99:20:0d:fc:7f:07:b7:82:85:4a:0a:43:6e:0d:c5: 65:9e:57:8e:49:45:c8:11:a3:6b:7f:95:f8:6a:35: 6d:e9:2e:ca:c5:42:9b:87:d3:b7:91:81:cb:21:1e: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C3:CB:85:10:89:50:B6:A8:B3:49:79:48:12:64:1A:0C:9F:78:3B X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:6414::/48 Signature Algorithm: sha256WithRSAEncryption 67:6b:8a:b4:51:45:1c:01:7c:74:67:6e:cd:4b:35:7f:95:9f: 1e:5b:1a:1e:4b:bd:be:28:b4:b1:f7:be:58:e8:ff:06:c2:8b: f0:3d:16:73:f9:6c:b4:26:98:b5:9e:db:30:91:67:3e:c6:c8: b8:0f:b2:45:be:85:f1:d2:a2:04:48:b9:b1:de:b5:f0:d2:35: db:6f:48:a7:7f:c0:8f:51:f9:32:bc:46:aa:40:b8:a5:5e:0a: e7:29:dc:63:b6:d2:cb:60:af:54:53:a8:ea:14:2e:5f:97:0a: 1c:a3:0d:c9:ca:e2:99:61:2a:7e:00:0b:d6:ec:10:a7:25:70: 57:67:6d:55:cf:4e:f4:30:fb:e7:36:f5:6d:9d:c3:e1:42:33: 6b:40:27:4e:5e:ba:82:cb:cd:a0:82:bb:16:31:c6:07:32:af: e3:09:e7:35:51:a5:ed:3a:1f:a3:e0:ab:e9:ef:14:65:dd:05: e9:95:9c:44:d0:fe:74:7e:9e:63:f3:41:86:29:14:a7:77:76: 4f:32:d1:d0:f9:95:9b:90:c9:f9:f6:c8:2d:49:99:6c:bd:74: 8a:cb:e4:e4:a9:79:b2:dd:3a:01:73:63:17:07:b0:42:20:39: 34:5c:45:1a:16:f3:9f:24:3c:b9:72:23:e3:f7:5f:f5:5a:ca: 79:8a:c6:04 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUIjV/OQE02S60bcPI9BqBCTV6ndQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNjAxMDYxOTE1MDdaFw0yNzAxMDUxOTIwMDdaMDMxMTAvBgNV BAMTKDJCQzNDQjg1MTA4OTUwQjZBOEIzNDk3OTQ4MTI2NDFBMEM5Rjc4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3VX4Lb3FM3U5sBsILMNXMkcZ QYTDil4GPNd6WktrchU5uvYQoQUwsI+rWD2Xp/MaYy8GC5kpn5ywEl3074LtNuhs 1S+TVU8QyqHFqpct9zqZaDzldx0lehhiAZcJc/MLgZz9jwaoZcREGceFPcxCFaDD /3hJm8fys2US4Wfu8Xk3zMjkaRRAwkEDMO+FlX8Q0F/w1/0oBmrSd4+AA7sI5z2K VamERVUpAEEBYpMzRBAxAJeoUk8lXDf88ZYLnrEKMSL36T0BicpNJKC9Sb1aa5kg Dfx/B7eChUoKQ24NxWWeV45JRcgRo2t/lfhqNW3pLsrFQpuH07eRgcshHkehAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUK8PLhRCJULaos0l5SBJkGgyfeDswHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzYz NDMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA81gZBQwDQYJKoZIhvcNAQELBQADggEBAGdrirRRRRwBfHRnbs1LNX+V nx5bGh5Lvb4otLH3vljo/wbCi/A9FnP5bLQmmLWe2zCRZz7GyLgPskW+hfHSogRI ubHetfDSNdtvSKd/wI9R+TK8RqpAuKVeCucp3GO20stgr1RTqOoULl+XChyjDcnK 4plhKn4AC9bsEKclcFdnbVXPTvQw++c29W2dw+FCM2tAJ05euoLLzaCCuxYxxgcy r+MJ5zVRpe06H6Pgq+nvFGXdBemVnETQ/nR+nmPzQYYpFKd3dk8y0dD5lZuQyfn2 yC1JmWy9dIrL5OSpebLdOgFzYxcHsEIgOTRcRRoW858kPLlyI+P3X/VaynmKxgQ= -----END CERTIFICATE-----Generated at Mon Jan 12 22:50:34 2026 by rpki-client