This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa File: 323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa (raw, json) Hash identifier: 2Vg+6qXorwQqqHVF3Q4Yl5b1DJt25atU8uOQvXeCbyw= Subject key identifier: 88:3F:0E:22:7C:D4:66:9F:D0:53:35:88:96:F8:F5:57:48:05:71:28 Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E Certificate serial: 6384ED53E1172393D00EDBE94144FC6390917256 Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa Signing time: Tue 06 Jan 2026 19:47:41 +0000 ROA not before: Tue 06 Jan 2026 19:42:41 +0000 ROA not after: Tue 05 Jan 2027 19:47:41 +0000 asID: 273041 IP address blocks: 2801:1a5:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:84:ed:53:e1:17:23:93:d0:0e:db:e9:41:44:fc:63:90:91:72:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E Validity Not Before: Jan 6 19:42:41 2026 GMT Not After : Jan 5 19:47:41 2027 GMT Subject: CN=883F0E227CD4669FD053358896F8F55748057128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:cb:f6:94:c5:44:c5:d5:b2:86:8b:8b:2e: 33:7f:9e:92:ba:1b:fe:93:22:1b:a5:3e:53:87:bf: d8:0b:66:1d:99:68:80:03:c0:3f:ce:95:38:e1:3a: fe:68:ed:cd:fd:5c:e4:5d:86:76:8c:e8:c1:83:fe: 41:b1:43:1b:2d:66:e1:86:c2:83:f6:97:f8:56:e2: f5:9a:01:ad:fe:5d:0d:39:fc:c5:20:4f:87:83:93: f6:e2:d1:0b:42:30:4b:6d:1f:c9:30:1c:0c:ae:ad: 02:79:9b:62:0a:47:21:bc:1c:10:57:a3:8d:1b:af: 98:50:f4:70:4e:14:7c:e5:6a:d7:af:dc:c6:24:a1: c0:ae:c7:75:37:59:f4:5c:a1:cb:2b:b9:91:82:dd: b5:42:db:33:f1:3d:3a:17:6b:40:84:d7:5f:d9:5a: 66:99:aa:0e:e1:26:18:6c:3c:5a:66:cc:3c:11:7b: a9:53:3f:e8:18:1e:d7:4f:c4:01:29:01:e2:b7:5b: a9:ff:5c:22:6b:1e:cb:ef:c9:1d:72:53:92:80:6a: 48:f1:7a:da:8c:2a:a2:a2:f5:cd:34:4c:c5:e4:a8: ef:56:86:91:f9:93:af:6c:8d:13:1f:df:cd:ee:0b: 48:da:25:b9:a8:f0:fd:6e:99:5e:3e:aa:35:d3:cb: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3F:0E:22:7C:D4:66:9F:D0:53:35:88:96:F8:F5:57:48:05:71:28 X509v3 Authority Key Identifier: keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a353a3a2f34382d3438203d3e20323733303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a5:5::/48 Signature Algorithm: sha256WithRSAEncryption 61:73:15:dd:f9:e4:a7:13:82:77:07:88:88:3f:a0:98:f9:8f: fe:1c:38:73:af:22:a8:58:d1:31:b7:27:3d:95:cb:3f:b1:e4: 56:0d:0f:49:1a:b9:72:71:9c:2a:d0:8d:e9:37:6b:80:a6:91: 02:e1:0b:ab:6f:68:6b:64:ec:b3:8b:b4:4f:ad:18:7a:4d:25: cb:b9:83:60:72:75:f1:cf:18:c3:47:0f:af:3f:c8:30:c7:3e: cc:e5:78:a4:e2:e2:23:f6:74:6b:f5:3a:73:d4:67:c1:89:30: 6c:a4:c1:54:df:08:67:c4:49:dc:f7:16:ff:0e:fa:82:7b:c9: 8e:92:d1:b5:7d:23:fc:7d:e7:b8:4a:21:7b:40:4f:ee:23:10: 65:74:99:41:10:74:57:77:5d:78:0a:72:7f:4a:64:db:41:53: 3d:98:63:1d:3d:a4:49:c5:02:70:9a:06:d0:d2:7b:b3:e9:b9: 02:a9:d1:eb:e9:27:cd:a1:74:25:e6:ea:f6:83:82:2d:33:b1: e6:bc:29:28:80:99:1c:5b:13:01:73:8a:18:b8:6a:0b:d4:0d: f7:98:8b:de:89:ed:8a:e5:eb:47:4a:39:78:c5:0c:91:88:df: 58:c0:cb:10:7b:50:55:71:79:3a:b6:6e:8b:2c:2c:ba:ee:a1: e6:ba:82:40 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUY4TtU+EXI5PQDtvpQUT8Y5CRclYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5 RDUzMEQxRTAeFw0yNjAxMDYxOTQyNDFaFw0yNzAxMDUxOTQ3NDFaMDMxMTAvBgNV BAMTKDg4M0YwRTIyN0NENDY2OUZEMDUzMzU4ODk2RjhGNTU3NDgwNTcxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwcv2lMVExdWyhouLLjN/npK6 G/6TIhulPlOHv9gLZh2ZaIADwD/OlTjhOv5o7c39XORdhnaM6MGD/kGxQxstZuGG woP2l/hW4vWaAa3+XQ05/MUgT4eDk/bi0QtCMEttH8kwHAyurQJ5m2IKRyG8HBBX o40br5hQ9HBOFHzlatev3MYkocCux3U3WfRcocsruZGC3bVC2zPxPToXa0CE11/Z WmaZqg7hJhhsPFpmzDwRe6lTP+gYHtdPxAEpAeK3W6n/XCJrHsvvyR1yU5KAakjx etqMKqKi9c00TMXkqO9WhpH5k69sjRMf383uC0jaJbmo8P1umV4+qjXTy7yPAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUiD8OInzUZp/QUzWIlvj1V0gFcSgwHwYDVR0j BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0 QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0 Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB pQAFMA0GCSqGSIb3DQEBCwUAA4IBAQBhcxXd+eSnE4J3B4iIP6CY+Y/+HDhzryKo WNExtyc9lcs/seRWDQ9JGrlycZwq0I3pN2uAppEC4Qurb2hrZOyzi7RPrRh6TSXL uYNgcnXxzxjDRw+vP8gwxz7M5Xik4uIj9nRr9Tpz1GfBiTBspMFU3whnxEnc9xb/ DvqCe8mOktG1fSP8fee4SiF7QE/uIxBldJlBEHRXd114CnJ/SmTbQVM9mGMdPaRJ xQJwmgbQ0nuz6bkCqdHr6SfNoXQl5ur2g4ItM7HmvCkogJkcWxMBc4oYuGoL1A33 mIveie2K5etHSjl4xQyRiN9YwMsQe1BVcXk6tm6LLCy67qHmuoJA -----END CERTIFICATE-----Generated at Mon Jan 12 15:19:08 2026 by rpki-client