This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa File: 323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa (raw, json) Hash identifier: 5Lmes4Q2Sg2lXnlmm/AjdisP6h4vkbtpFp19RDeXpas= Subject key identifier: 1B:2D:C8:86:17:5F:1D:80:12:27:78:BD:68:DF:42:39:F7:ED:29:80 Certificate issuer: /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Certificate serial: 779BA0256CD8781E24ABD3A4F0EF15E93BA587E0 Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa Signing time: Tue 06 Jan 2026 19:35:33 +0000 ROA not before: Tue 06 Jan 2026 19:30:33 +0000 ROA not after: Tue 05 Jan 2027 19:35:33 +0000 asID: 272937 IP address blocks: 2803:3190:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9b:a0:25:6c:d8:78:1e:24:ab:d3:a4:f0:ef:15:e9:3b:a5:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Validity Not Before: Jan 6 19:30:33 2026 GMT Not After : Jan 5 19:35:33 2027 GMT Subject: CN=1B2DC886175F1D80122778BD68DF4239F7ED2980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:27:fc:53:f2:f9:5a:f6:20:60:d6:2e:4e: 3c:16:0e:96:5c:e1:96:25:2f:fb:f8:2a:68:11:0a: b9:2a:30:82:d7:a9:2f:fe:33:04:1c:50:24:44:5d: 4d:12:09:3c:25:41:dc:62:ab:95:8a:8a:5b:24:ea: 2e:5e:2e:8c:9f:2b:3a:ee:f2:84:bb:23:ee:f8:ee: cb:36:19:f1:7b:77:af:87:53:55:49:f0:d6:a9:9c: 42:db:4a:54:91:d5:b3:60:53:36:1c:f3:54:fe:da: e2:03:a4:63:98:b2:83:1c:cb:76:cd:0e:33:17:46: 9c:15:f6:e8:4d:7a:74:9d:48:e6:32:6c:80:b3:c6: 36:db:12:2c:1a:e5:f0:7a:52:37:89:4c:2a:7e:9a: 97:f0:39:32:54:d8:3e:92:a8:b7:f8:66:a7:c1:af: d7:f6:57:69:17:e9:db:6c:27:66:41:a0:2a:5b:24: 13:c3:d1:b5:0a:78:b4:8e:34:ff:8b:d2:12:df:27: aa:4b:6f:a3:b7:9e:7f:26:78:30:ad:04:d2:db:2f: d8:c0:cf:09:08:28:39:13:69:aa:b9:86:b0:88:49: 65:d4:81:bb:f4:7b:ea:8f:de:b6:7d:2d:eb:0a:f6: f5:58:50:ba:70:7c:3e:36:43:3f:47:89:d6:99:de: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2D:C8:86:17:5F:1D:80:12:27:78:BD:68:DF:42:39:F7:ED:29:80 X509v3 Authority Key Identifier: keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a663030303a3a2f33362d3438203d3e20323732393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3190:f000::/36 Signature Algorithm: sha256WithRSAEncryption 7f:af:de:85:07:76:a3:51:61:10:27:c3:dc:3d:b5:13:f7:94: 15:eb:b7:90:f6:f0:a8:a9:b0:b9:e2:60:55:4b:39:cd:6b:7c: ee:3b:b8:fa:4d:0f:59:af:02:7d:8a:68:5b:17:3e:7a:a5:f5: d4:b0:ed:19:95:39:b5:76:9b:8c:d6:a5:8a:8d:4e:d6:7c:94: 63:ae:40:c6:61:de:8b:bc:82:0b:23:2b:6d:4c:56:76:05:44: 03:5d:21:86:aa:44:60:b2:15:b6:37:c1:ac:90:98:79:2b:46: d2:45:20:90:7d:6e:a6:1e:91:16:15:d8:1e:4c:18:69:d5:0f: 5b:6e:0f:32:18:ae:a4:d8:2a:ec:88:1f:b4:e0:27:96:55:2e: 5e:e0:bc:eb:0f:67:89:cf:10:31:f1:ad:ac:d4:96:7c:d2:81: ae:84:5c:9a:0e:77:34:7a:66:37:28:d3:95:ed:79:3a:1a:15: 2b:68:3b:1b:ea:d6:0a:25:02:3e:c2:c0:8d:6c:d5:e3:0a:72: 1e:20:8d:9d:22:97:75:21:c9:a2:0c:cd:62:92:f5:b7:3f:f6: 63:c5:61:04:1f:bd:13:f3:05:8e:68:f5:2f:e1:94:61:7b:6d: a4:bb:8e:3b:11:42:5c:b5:76:65:3e:2f:4b:9b:8a:4e:fb:a7: 3d:51:4f:bc -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUd5ugJWzYeB4kq9Ok8O8V6Tulh+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBBQTZFMDRDNTc2NEIyNkI0ODg3RUYxNjc1QjJFOUM0 RUY4NDg2MzAeFw0yNjAxMDYxOTMwMzNaFw0yNzAxMDUxOTM1MzNaMDMxMTAvBgNV BAMTKDFCMkRDODg2MTc1RjFEODAxMjI3NzhCRDY4REY0MjM5RjdFRDI5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZSf8U/L5WvYgYNYuTjwWDpZc 4ZYlL/v4KmgRCrkqMILXqS/+MwQcUCREXU0SCTwlQdxiq5WKilsk6i5eLoyfKzru 8oS7I+747ss2GfF7d6+HU1VJ8NapnELbSlSR1bNgUzYc81T+2uIDpGOYsoMcy3bN DjMXRpwV9uhNenSdSOYybICzxjbbEiwa5fB6UjeJTCp+mpfwOTJU2D6SqLf4ZqfB r9f2V2kX6dtsJ2ZBoCpbJBPD0bUKeLSONP+L0hLfJ6pLb6O3nn8meDCtBNLbL9jA zwkIKDkTaaq5hrCISWXUgbv0e+qP3rZ9LesK9vVYULpwfD42Qz9HidaZ3tKNAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGy3IhhdfHYASJ3i9aN9COfftKYAwHwYDVR0j BBgwFoAUcKpuBMV2Sya0iH7xZ1sunE74SGMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MUY1NjdGRURFNzlFNTFBMUFDNTMwMjdFN0QyQUZGMjEw Mzc5RUI0NEYwRjQyQjI1M0VENDQ2NTE1MkUzM0ZELzAvNzBBQTZFMDRDNTc2NEIy NkI0ODg3RUYxNjc1QjJFOUM0RUY4NDg2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEFBNkUwNEM1NzY0QjI2QjQ4 ODdFRjE2NzVCMkU5QzRFRjg0ODYzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTFGNTY3RkVERTc5RTUxQTFBQzUzMDI3RTdEMkFGRjIxMDM3OUVCNDRG MEY0MkIyNTNFRDQ0NjUxNTJFMzNGRC8wLzMyMzgzMDMzM2EzMzMxMzkzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTMzMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAzGQ8DANBgkqhkiG9w0BAQsFAAOCAQEAf6/ehQd2o1FhECfD3D21E/eU Feu3kPbwqKmwueJgVUs5zWt87ju4+k0PWa8CfYpoWxc+eqX11LDtGZU5tXabjNal io1O1nyUY65AxmHei7yCCyMrbUxWdgVEA10hhqpEYLIVtjfBrJCYeStG0kUgkH1u ph6RFhXYHkwYadUPW24PMhiupNgq7IgftOAnllUuXuC86w9nic8QMfGtrNSWfNKB roRcmg53NHpmNyjTle15OhoVK2g7G+rWCiUCPsLAjWzV4wpyHiCNnSKXdSHJogzN YpL1tz/2Y8VhBB+9E/MFjmj1L+GUYXttpLuOOxFCXLV2ZT4vS5uKTvunPVFPvA== -----END CERTIFICATE-----Generated at Tue Jan 13 05:36:29 2026 by rpki-client