This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa File: 323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa (raw, json) Hash identifier: 9sc7E7DgVdAkCG2v9vhlCpiJpggEMcJyiyF/UzI/oSk= Subject key identifier: 9F:BF:F3:62:FA:19:09:0D:3F:92:7F:4B:DA:FF:76:6D:5B:25:71:92 Certificate issuer: /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Certificate serial: 46B139CC539428972577CE1F3CA0355793AB735E Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa Signing time: Tue 06 Jan 2026 20:52:40 +0000 ROA not before: Tue 06 Jan 2026 20:47:40 +0000 ROA not after: Tue 05 Jan 2027 20:52:40 +0000 asID: 265671 IP address blocks: 2803:7ec0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 02:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b1:39:cc:53:94:28:97:25:77:ce:1f:3c:a0:35:57:93:ab:73:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Validity Not Before: Jan 6 20:47:40 2026 GMT Not After : Jan 5 20:52:40 2027 GMT Subject: CN=9FBFF362FA19090D3F927F4BDAFF766D5B257192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:17:01:d8:1d:e4:00:a5:ab:b8:8d:55:9b: 5f:10:d2:2c:0c:12:e7:c3:b6:46:d1:bc:c6:fd:d1: 12:4b:68:59:cf:94:31:57:1d:c6:fb:c4:df:69:70: 47:df:b3:7f:fe:a0:6d:68:a0:e8:0a:a3:bc:62:09: 32:78:c3:26:63:a6:2e:b6:33:1f:ad:3e:91:74:c9: b9:2d:86:1c:d1:74:2a:86:0a:fd:89:e8:63:6b:ce: 89:e8:ae:31:6f:27:63:18:7f:6c:88:35:56:c0:b2: 9e:f8:fb:01:75:01:16:ba:e9:22:f1:70:f0:af:76: 30:de:fc:60:69:48:37:e7:1e:23:82:10:83:cc:1b: 4e:e3:61:d0:3d:cb:87:1f:53:10:4b:db:e5:4a:3b: 46:f9:89:e3:d7:3d:0e:e3:b0:f4:f9:cd:f0:44:a2: 2a:dd:4c:25:75:41:b2:22:87:bd:7a:fa:48:22:1f: 0e:c4:ce:35:a3:fb:ec:00:d0:20:a1:9c:ec:6e:48: c7:bd:27:bd:50:0b:ac:97:8a:9f:dd:2f:87:ec:58: 31:63:db:50:4c:12:20:61:66:5d:ba:8a:ac:fc:b3: a8:9a:ee:e4:3d:68:99:8a:48:10:df:df:88:98:7e: 82:7c:30:41:b6:ec:bd:65:5b:c1:ae:23:ca:87:85: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:F3:62:FA:19:09:0D:3F:92:7F:4B:DA:FF:76:6D:5B:25:71:92 X509v3 Authority Key Identifier: keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7ec0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 74:11:1e:ba:77:ef:ac:c5:d1:50:fb:bf:ee:e1:98:7d:73:c1: ee:e0:6e:c2:1b:4b:a1:6d:3a:73:61:13:3e:9f:d4:57:03:fb: 99:1b:6b:a9:19:9e:e2:6d:c6:1f:fe:e6:1f:53:dc:be:bf:30: 0a:21:0d:e3:7d:73:93:37:1e:47:00:8d:da:24:77:94:a0:88: 30:94:cb:5e:81:f0:7c:c7:ed:3d:c4:76:09:70:c0:47:dd:d0: 28:40:e5:91:da:0f:a5:70:c8:d2:5e:0f:85:90:45:ed:e9:96: f7:97:f1:35:30:31:4f:84:d5:ac:bb:a6:05:5d:43:43:bd:9f: 25:77:32:79:e6:c2:93:b2:b0:a0:73:eb:3d:9f:b9:a7:36:47: 8a:90:36:8a:f7:8e:9f:f4:21:d2:99:87:95:87:d8:83:a8:b5: 8c:51:7c:3c:2e:f3:c5:f9:c0:80:f0:19:d7:70:c5:dc:b9:e9: ae:b5:67:32:8a:2f:95:eb:7d:df:c9:fe:94:38:23:c3:b6:2b: d8:a1:b9:a3:0e:0d:8a:6e:24:8e:e1:de:29:3d:29:78:38:1f: c1:61:d7:ff:16:0d:39:35:66:f6:62:4e:39:44:ba:6b:f6:0a: be:4c:2b:e7:20:8b:9a:df:4a:1b:2b:47:26:e2:c7:35:b9:b2: d9:8d:40:ec -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIURrE5zFOUKJcld84fPKA1V5Orc14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBOTFGRkE2QUU4QTA2Rjk2QTdGMjFCMTcwRjJFMTE2 MjAwRjk3NzAeFw0yNjAxMDYyMDQ3NDBaFw0yNzAxMDUyMDUyNDBaMDMxMTAvBgNV BAMTKDlGQkZGMzYyRkExOTA5MEQzRjkyN0Y0QkRBRkY3NjZENUIyNTcxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3RcB2B3kAKWruI1Vm18Q0iwM EufDtkbRvMb90RJLaFnPlDFXHcb7xN9pcEffs3/+oG1ooOgKo7xiCTJ4wyZjpi62 Mx+tPpF0ybkthhzRdCqGCv2J6GNrzonorjFvJ2MYf2yINVbAsp74+wF1ARa66SLx cPCvdjDe/GBpSDfnHiOCEIPMG07jYdA9y4cfUxBL2+VKO0b5iePXPQ7jsPT5zfBE oirdTCV1QbIih716+kgiHw7EzjWj++wA0CChnOxuSMe9J71QC6yXip/dL4fsWDFj 21BMEiBhZl26iqz8s6ia7uQ9aJmKSBDf34iYfoJ8MEG27L1lW8GuI8qHhaTLAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUn7/zYvoZCQ0/kn9L2v92bVslcZIwHwYDVR0j BBgwFoAUTKkf+mrooG+Wp/IbFw8uEWIA+XcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RUJCRTE1NzlBQkNCRjJFOEFDNDlEQzdBRDNENEQ5MzJF RkZFRjZBMTgyNEI0MTZGMjg5QThBRjg4MDk3MzAxLzAvNENBOTFGRkE2QUU4QTA2 Rjk2QTdGMjFCMTcwRjJFMTE2MjAwRjk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0E5MUZGQTZBRThBMDZGOTZB N0YyMUIxNzBGMkUxMTYyMDBGOTc3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUVCQkUxNTc5QUJDQkYyRThBQzQ5REM3QUQzRDREOTMyRUZGRUY2QTE4 MjRCNDE2RjI4OUE4QUY4ODA5NzMwMS8wLzMyMzgzMDMzM2EzNzY1NjMzMDNhNjMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzNjM3MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA37AwDANBgkqhkiG9w0BAQsFAAOCAQEAdBEeunfvrMXRUPu/7uGYfXPB 7uBuwhtLoW06c2ETPp/UVwP7mRtrqRme4m3GH/7mH1Pcvr8wCiEN431zkzceRwCN 2iR3lKCIMJTLXoHwfMftPcR2CXDAR93QKEDlkdoPpXDI0l4PhZBF7emW95fxNTAx T4TVrLumBV1DQ72fJXcyeebCk7KwoHPrPZ+5pzZHipA2iveOn/Qh0pmHlYfYg6i1 jFF8PC7zxfnAgPAZ13DF3LnprrVnMoovlet938n+lDgjw7Yr2KG5ow4Nim4kjuHe KT0peDgfwWHX/xYNOTVm9mJOOUS6a/YKvkwr5yCLmt9KGytHJuLHNbmy2Y1A7A== -----END CERTIFICATE-----Generated at Mon Jan 12 07:39:42 2026 by rpki-client