This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa File: 323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa (raw, json) Hash identifier: t+jq1UyyMEVAa3aYmYOMU5YNw8+ClW8oZkqq+We9R5A= Subject key identifier: BE:AA:B6:FE:20:6A:FF:B9:CE:31:5B:D2:63:34:85:C4:C8:2E:28:15 Certificate issuer: /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Certificate serial: 67F30CD95DCE0F615FA92CB5F33D8680CC519432 Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa Signing time: Tue 06 Jan 2026 19:35:33 +0000 ROA not before: Tue 06 Jan 2026 19:30:33 +0000 ROA not after: Tue 05 Jan 2027 19:35:33 +0000 asID: 272937 IP address blocks: 2803:3190:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f3:0c:d9:5d:ce:0f:61:5f:a9:2c:b5:f3:3d:86:80:cc:51:94:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Validity Not Before: Jan 6 19:30:33 2026 GMT Not After : Jan 5 19:35:33 2027 GMT Subject: CN=BEAAB6FE206AFFB9CE315BD2633485C4C82E2815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:c6:ed:ec:09:93:aa:67:75:3a:ac:b6:15: fb:95:b1:35:71:b0:64:84:95:95:54:4f:a7:81:2f: 73:9e:f4:7b:59:b1:6a:8a:b4:d2:75:47:ce:af:c2: d4:91:2c:c7:75:6c:14:b5:39:12:d7:2c:98:a4:42: 87:10:85:10:77:78:18:ba:69:ff:91:a4:d9:af:a1: 66:36:66:6f:3c:ad:6b:cd:5d:4f:3b:62:83:4f:68: c8:5c:5a:78:11:23:bb:7d:6b:1d:7d:53:93:30:bb: db:64:e8:d1:c4:ae:c7:d8:3c:86:45:a7:95:6a:e9: 1c:25:d2:c2:5a:b8:b9:43:ba:44:56:98:1e:5b:59: b8:3f:8e:24:a3:c0:2a:53:86:9d:28:11:9e:b7:44: 41:a0:58:1c:db:37:dc:49:dd:d7:f6:3e:98:f0:12: 9a:f4:54:c8:7c:c2:5e:27:eb:7d:18:c9:11:35:da: 28:89:01:e5:69:cf:41:fb:98:84:f6:13:22:d1:5e: 0e:32:cc:4a:5a:e0:25:c0:95:19:07:4b:89:e4:11: 0d:9d:0a:c0:14:92:f8:40:10:23:1a:23:a3:01:fb: 8e:04:60:4e:c8:3c:02:f6:76:7c:0b:f4:2b:38:59: 49:1f:13:9a:50:c4:d1:a1:96:02:d3:a5:93:ee:6f: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:B6:FE:20:6A:FF:B9:CE:31:5B:D2:63:34:85:C4:C8:2E:28:15 X509v3 Authority Key Identifier: keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a643030303a3a2f33362d3438203d3e20323732393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3190:d000::/36 Signature Algorithm: sha256WithRSAEncryption 90:a4:ff:c8:35:35:a1:b0:a9:33:6d:f9:e2:9f:0a:97:d7:c0: aa:00:d7:8a:9b:4d:a9:07:23:5d:cb:98:5f:5c:fb:52:dc:8c: 2a:71:cb:d7:75:87:41:00:c6:63:0e:05:da:84:01:5b:6a:c9: 8f:df:a9:9c:93:67:83:79:03:d1:28:36:af:90:d9:88:90:d9: 27:e8:01:3c:65:22:0c:4b:5c:f7:3a:69:6c:10:ca:e0:58:2e: 3f:79:1a:4d:02:f8:06:14:f3:16:3e:af:ef:6c:9d:de:09:ed: 60:dc:06:b2:9a:93:6a:c5:d0:ef:75:d1:dd:f7:24:b6:7d:9a: 6b:04:9a:28:b7:bf:23:54:9f:48:92:58:2b:4c:69:85:a7:6b: d8:8d:c5:eb:fc:c9:f9:75:33:a4:7c:74:b3:9d:9c:b6:4b:99: 04:c6:e5:07:62:10:0a:84:a2:95:8d:d1:f4:0d:c1:8c:b3:1e: 40:2b:f7:54:38:14:45:c0:c4:67:01:de:07:6d:de:5d:9d:2a: 2d:c1:72:01:53:39:24:6b:78:b2:7c:41:6e:4d:6d:b4:de:4a: 2d:c1:ff:a8:97:68:6b:83:cc:d4:75:06:01:10:a8:10:67:87: cb:45:e9:4e:35:99:3f:80:35:78:f8:86:b8:87:c3:19:85:a0: df:1b:9a:0c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZ/MM2V3OD2FfqSy18z2GgMxRlDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBBQTZFMDRDNTc2NEIyNkI0ODg3RUYxNjc1QjJFOUM0 RUY4NDg2MzAeFw0yNjAxMDYxOTMwMzNaFw0yNzAxMDUxOTM1MzNaMDMxMTAvBgNV BAMTKEJFQUFCNkZFMjA2QUZGQjlDRTMxNUJEMjYzMzQ4NUM0QzgyRTI4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE98bt7AmTqmd1Oqy2FfuVsTVx sGSElZVUT6eBL3Oe9HtZsWqKtNJ1R86vwtSRLMd1bBS1ORLXLJikQocQhRB3eBi6 af+RpNmvoWY2Zm88rWvNXU87YoNPaMhcWngRI7t9ax19U5Mwu9tk6NHErsfYPIZF p5Vq6Rwl0sJauLlDukRWmB5bWbg/jiSjwCpThp0oEZ63REGgWBzbN9xJ3df2Ppjw Epr0VMh8wl4n630YyRE12iiJAeVpz0H7mIT2EyLRXg4yzEpa4CXAlRkHS4nkEQ2d CsAUkvhAECMaI6MB+44EYE7IPAL2dnwL9Cs4WUkfE5pQxNGhlgLTpZPub/7NAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUvqq2/iBq/7nOMVvSYzSFxMguKBUwHwYDVR0j BBgwFoAUcKpuBMV2Sya0iH7xZ1sunE74SGMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MUY1NjdGRURFNzlFNTFBMUFDNTMwMjdFN0QyQUZGMjEw Mzc5RUI0NEYwRjQyQjI1M0VENDQ2NTE1MkUzM0ZELzAvNzBBQTZFMDRDNTc2NEIy NkI0ODg3RUYxNjc1QjJFOUM0RUY4NDg2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEFBNkUwNEM1NzY0QjI2QjQ4 ODdFRjE2NzVCMkU5QzRFRjg0ODYzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTFGNTY3RkVERTc5RTUxQTFBQzUzMDI3RTdEMkFGRjIxMDM3OUVCNDRG MEY0MkIyNTNFRDQ0NjUxNTJFMzNGRC8wLzMyMzgzMDMzM2EzMzMxMzkzMDNhNjQz MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTMzMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAzGQ0DANBgkqhkiG9w0BAQsFAAOCAQEAkKT/yDU1obCpM2354p8Kl9fA qgDXiptNqQcjXcuYX1z7UtyMKnHL13WHQQDGYw4F2oQBW2rJj9+pnJNng3kD0Sg2 r5DZiJDZJ+gBPGUiDEtc9zppbBDK4FguP3kaTQL4BhTzFj6v72yd3gntYNwGspqT asXQ73XR3fcktn2aawSaKLe/I1SfSJJYK0xphadr2I3F6/zJ+XUzpHx0s52ctkuZ BMblB2IQCoSilY3R9A3BjLMeQCv3VDgURcDEZwHeB23eXZ0qLcFyAVM5JGt4snxB bk1ttN5KLcH/qJdoa4PM1HUGARCoEGeHy0XpTjWZP4A1ePiGuIfDGYWg3xuaDA== -----END CERTIFICATE-----Generated at Tue Jan 13 05:36:31 2026 by rpki-client