This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34322d3432203d3e203237383735.roa File: 323830313a3165303a3a2f34322d3432203d3e203237383735.roa (raw, json) Hash identifier: olLPYL1kx1EV3bPREqve3mJ05sVL6y81UnJOoe+Hlio= Subject key identifier: 2F:09:7C:01:9E:CC:4A:68:90:0C:00:E3:19:64:C7:44:0E:72:98:56 Certificate issuer: /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC Certificate serial: 14A05E937D11F469BA99D14AD58E5EEFD999A23E Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34322d3432203d3e203237383735.roa Signing time: Tue 06 Jan 2026 19:03:17 +0000 ROA not before: Tue 06 Jan 2026 18:58:17 +0000 ROA not after: Tue 05 Jan 2027 19:03:17 +0000 asID: 27875 IP address blocks: 2801:1e0::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 06:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a0:5e:93:7d:11:f4:69:ba:99:d1:4a:d5:8e:5e:ef:d9:99:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC Validity Not Before: Jan 6 18:58:17 2026 GMT Not After : Jan 5 19:03:17 2027 GMT Subject: CN=2F097C019ECC4A68900C00E31964C7440E729856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:7f:49:d4:27:f2:cd:bc:98:30:4f:08:83: 78:e3:d3:dc:43:82:98:b9:aa:54:6f:0f:b4:70:b2: 1f:69:74:29:33:0b:74:dc:a4:54:08:0f:b6:0c:f7: dc:e0:60:92:e6:1f:0e:8c:93:45:dc:12:9b:95:52: 2a:54:a3:58:86:ab:ad:54:7b:31:6a:55:a5:ee:3b: 16:4e:0d:8e:97:70:59:97:e8:af:69:66:cd:56:9f: 29:d2:75:90:cf:04:74:d2:18:be:3b:1e:6e:aa:17: 20:4e:d2:19:f4:10:31:b9:0c:66:af:2d:48:19:3f: 74:11:01:ce:ad:85:6f:c3:68:c0:a6:f1:96:cc:45: 6d:8a:84:00:e7:91:82:d8:c6:5d:1b:26:f7:cc:97: d1:65:eb:21:d5:d2:f5:c5:52:72:99:10:52:66:da: a0:41:c3:8e:8c:15:c7:9a:4a:f2:6d:2d:24:e9:cb: 36:3d:06:1f:12:6f:be:40:28:42:f3:81:58:c3:bf: f4:a0:dd:ff:01:c2:73:ff:a5:ab:24:90:18:8f:dd: 98:9b:33:73:15:33:12:3f:6b:49:65:46:3d:ab:0d: 3e:56:08:db:8d:f5:6d:74:12:ed:65:84:10:f1:61: ae:48:65:c2:ca:ed:f5:5a:26:55:53:c4:e2:3c:77: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:7C:01:9E:CC:4A:68:90:0C:00:E3:19:64:C7:44:0E:72:98:56 X509v3 Authority Key Identifier: keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34322d3432203d3e203237383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e0::/42 Signature Algorithm: sha256WithRSAEncryption 5a:0c:f8:b3:38:73:a0:50:0c:2c:f8:1b:64:78:37:fa:1a:50: b0:cb:52:3b:f0:ab:e8:ea:93:50:76:cb:75:55:31:69:98:87: 41:16:76:89:d3:b8:c5:60:0a:2d:76:f0:bb:13:ef:ac:2a:4f: c3:fd:7a:27:12:de:6a:42:53:35:bf:e5:e1:5d:6d:b9:cd:98: 29:39:83:36:ac:9c:e3:4e:fb:1b:13:5f:ca:49:cd:49:8b:f8: 00:4b:14:1a:23:12:48:dd:b9:c6:7a:a8:59:af:d7:01:48:12: db:b3:f7:31:6c:8d:15:d2:3c:e6:79:b2:ee:a8:25:47:af:91: cb:57:8b:55:ac:6c:9a:a7:0d:d2:ac:4c:cd:cd:01:fd:d7:c5: 51:21:53:87:5c:f2:80:7f:63:69:30:0a:6b:ab:20:6f:c9:ad: 97:94:9e:77:8e:a6:05:ef:f9:59:b6:8b:06:c5:ff:52:4c:8e: 7b:d1:3a:73:bf:ad:73:51:5a:8f:d0:60:2a:7b:e7:84:b9:98: 6f:53:58:7a:00:d5:e4:a7:a5:a8:d4:85:1b:95:47:b9:44:a1: 64:4b:27:bd:2e:be:98:bd:00:10:ff:11:f9:c6:69:88:5f:0e: e9:b8:93:dd:df:f8:c3:91:f8:6f:53:29:a2:09:70:67:9a:19: db:e9:d9:33 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUFKBek30R9Gm6mdFK1Y5e79mZoj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA1M0Y3RDQyRkM5RkQwMzU1NkE5RjNEMkFGOUUzRDIy MjFCQURGQzAeFw0yNjAxMDYxODU4MTdaFw0yNzAxMDUxOTAzMTdaMDMxMTAvBgNV BAMTKDJGMDk3QzAxOUVDQzRBNjg5MDBDMDBFMzE5NjRDNzQ0MEU3Mjk4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLE39J1CfyzbyYME8Ig3jj09xD gpi5qlRvD7Rwsh9pdCkzC3TcpFQID7YM99zgYJLmHw6Mk0XcEpuVUipUo1iGq61U ezFqVaXuOxZODY6XcFmX6K9pZs1WnynSdZDPBHTSGL47Hm6qFyBO0hn0EDG5DGav LUgZP3QRAc6thW/DaMCm8ZbMRW2KhADnkYLYxl0bJvfMl9Fl6yHV0vXFUnKZEFJm 2qBBw46MFceaSvJtLSTpyzY9Bh8Sb75AKELzgVjDv/Sg3f8BwnP/paskkBiP3Zib M3MVMxI/a0llRj2rDT5WCNuN9W10Eu1lhBDxYa5IZcLK7fVaJlVTxOI8d28bAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQULwl8AZ7MSmiQDADjGWTHRA5ymFYwHwYDVR0j BBgwFoAU0FP31C/J/QNVap89Kvnj0iIbrfwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MUY5ODlGOEM1RkY5RTlFMTI2QzVGOTBGRUY5Rjk1QTEz RjJGN0U4MTBGNjhEMEU0NDE2NjRCRTNGQTlDMDI0LzAvRDA1M0Y3RDQyRkM5RkQw MzU1NkE5RjNEMkFGOUUzRDIyMjFCQURGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDUzRjdENDJGQzlGRDAzNTU2 QTlGM0QyQUY5RTNEMjIyMUJBREZDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzFGOTg5RjhDNUZGOUU5RTEyNkM1RjkwRkVGOUY5NUExM0YyRjdFODEw RjY4RDBFNDQxNjY0QkUzRkE5QzAyNC8wLzMyMzgzMDMxM2EzMTY1MzAzYTNhMmYz NDMyMmQzNDMyMjAzZDNlMjAzMjM3MzgzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKAEB4AAAMA0G CSqGSIb3DQEBCwUAA4IBAQBaDPizOHOgUAws+BtkeDf6GlCwy1I78Kvo6pNQdst1 VTFpmIdBFnaJ07jFYAotdvC7E++sKk/D/XonEt5qQlM1v+XhXW25zZgpOYM2rJzj TvsbE1/KSc1Ji/gASxQaIxJI3bnGeqhZr9cBSBLbs/cxbI0V0jzmebLuqCVHr5HL V4tVrGyapw3SrEzNzQH918VRIVOHXPKAf2NpMAprqyBvya2XlJ53jqYF7/lZtosG xf9STI570Tpzv61zUVqP0GAqe+eEuZhvU1h6ANXkp6Wo1IUblUe5RKFkSye9Lr6Y vQAQ/xH5xmmIXw7puJPd3/jDkfhvUymiCXBnmhnb6dkz -----END CERTIFICATE-----Generated at Mon Jan 12 07:38:59 2026 by rpki-client