This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa File: 323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa (raw, json) Hash identifier: WS/2d4tv8+oNT82YANq0L+Sq4LbDBMuUbbrhgMskf5U= Subject key identifier: D2:87:8F:5E:91:41:96:9F:6E:0D:52:43:30:23:1A:70:98:F5:60:F8 Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Certificate serial: 7FB48D1299C4554432BFDF54ADAA6EB925B4F1DF Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa Signing time: Tue 06 Jan 2026 19:35:36 +0000 ROA not before: Tue 06 Jan 2026 19:30:36 +0000 ROA not after: Tue 05 Jan 2027 19:35:36 +0000 asID: 272004 IP address blocks: 2803:f080:c000::/35 maxlen: 43 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 02:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b4:8d:12:99:c4:55:44:32:bf:df:54:ad:aa:6e:b9:25:b4:f1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Validity Not Before: Jan 6 19:30:36 2026 GMT Not After : Jan 5 19:35:36 2027 GMT Subject: CN=D2878F5E9141969F6E0D524330231A7098F560F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:eb:37:d6:30:21:51:8e:e3:df:db:8d:a7: a0:51:95:f9:09:83:a0:06:81:8d:74:66:2e:41:76: aa:a3:61:10:de:81:50:54:cd:52:1f:f4:9c:f8:67: 90:66:9c:a1:8f:3e:4e:cd:ed:1b:d0:5a:a6:d3:25: 2c:08:a6:5b:62:c2:e2:05:ef:79:6f:a3:ad:27:ec: 28:0d:fb:fc:58:80:af:7f:56:ae:29:75:cc:2f:27: 08:22:e6:b1:3b:58:b3:98:b8:1b:5f:d9:78:65:c6: 79:fa:90:b4:c8:e3:8c:36:83:5c:f3:e4:f9:fc:c6: e3:1f:20:53:6f:28:00:54:87:bf:cf:2e:a0:b8:ed: 31:c1:ff:10:23:64:13:a8:91:c4:ae:56:02:4c:82: 53:b0:6d:9d:81:9a:9a:39:e1:11:c2:73:8f:d5:68: 63:6e:2d:80:fa:64:4d:72:f8:ce:bd:2a:4b:f7:79: 83:e7:5f:00:a7:c0:aa:19:fe:fc:30:32:bb:0a:ca: 72:15:32:56:85:89:56:d4:f5:fc:de:26:18:1c:47: 31:4c:a5:5c:d2:2a:4f:41:c1:5f:18:15:1d:03:f8: 01:32:42:30:14:d4:a4:05:8d:31:06:e4:e5:52:99: 98:4e:a7:b8:5b:6b:56:14:b0:31:aa:39:88:8f:0b: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:8F:5E:91:41:96:9F:6E:0D:52:43:30:23:1A:70:98:F5:60:F8 X509v3 Authority Key Identifier: keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f080:c000::/35 Signature Algorithm: sha256WithRSAEncryption 02:25:61:1c:c7:3c:c9:e0:55:1e:3f:69:1c:6e:db:b4:3d:c2: 61:ce:52:9e:f4:d6:0f:86:d9:6d:71:ef:9d:d6:71:86:c7:31: 69:94:72:57:cb:24:80:a7:a2:e1:c5:85:69:b5:c2:02:4f:a1: 6a:74:45:26:ce:fa:3b:62:a2:5c:bb:67:1b:78:e2:d7:9a:3c: 7a:7e:38:2d:42:b3:e5:df:88:d7:24:af:05:66:bf:3b:2c:ee: b9:d4:4e:ef:7e:56:42:bb:58:7c:d4:4c:66:b9:8f:a5:7c:ff: 06:d0:7e:f2:b8:ed:b9:d5:72:98:a0:ea:13:88:60:7f:84:84: 1b:d4:16:cc:2c:c7:ae:a6:70:53:55:af:1b:8e:a6:f2:9a:30: ff:1d:6d:04:67:f4:0e:d9:8a:49:ba:4f:20:08:25:46:f9:3e: 39:d7:02:e3:fe:14:ea:07:3d:76:2d:10:cc:f4:9b:1e:26:2f: 1c:c9:a9:cb:24:18:56:5e:24:a5:85:ff:0f:71:f5:84:fc:42: 44:17:45:7f:f9:ee:6f:22:a0:6a:9b:d0:0f:93:67:86:db:3b: e9:07:bf:a1:b9:2b:69:1a:98:6e:bc:b0:8d:1e:63:78:7f:9d: c2:86:f8:d4:ce:12:d1:76:f3:bb:ce:02:99:f6:5e:0f:91:f6: 80:36:cf:27 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUf7SNEpnEVUQyv99UrapuuSW08d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy NEVBQzJBRDAeFw0yNjAxMDYxOTMwMzZaFw0yNzAxMDUxOTM1MzZaMDMxMTAvBgNV BAMTKEQyODc4RjVFOTE0MTk2OUY2RTBENTI0MzMwMjMxQTcwOThGNTYwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhOs31jAhUY7j39uNp6BRlfkJ g6AGgY10Zi5BdqqjYRDegVBUzVIf9Jz4Z5BmnKGPPk7N7RvQWqbTJSwIpltiwuIF 73lvo60n7CgN+/xYgK9/Vq4pdcwvJwgi5rE7WLOYuBtf2Xhlxnn6kLTI44w2g1zz 5Pn8xuMfIFNvKABUh7/PLqC47THB/xAjZBOokcSuVgJMglOwbZ2Bmpo54RHCc4/V aGNuLYD6ZE1y+M69Kkv3eYPnXwCnwKoZ/vwwMrsKynIVMlaFiVbU9fzeJhgcRzFM pVzSKk9BwV8YFR0D+AEyQjAU1KQFjTEG5OVSmZhOp7hba1YUsDGqOYiPC7TbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU0oePXpFBlp9uDVJDMCMacJj1YPgwHwYDVR0j BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhNjMz MDMwMzAzYTNhMmYzMzM1MmQzNDMzMjAzZDNlMjAzMjM3MzIzMDMwMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUoA/CAwDANBgkqhkiG9w0BAQsFAAOCAQEAAiVhHMc8yeBVHj9pHG7btD3C Yc5SnvTWD4bZbXHvndZxhscxaZRyV8skgKei4cWFabXCAk+hanRFJs76O2KiXLtn G3ji15o8en44LUKz5d+I1ySvBWa/OyzuudRO735WQrtYfNRMZrmPpXz/BtB+8rjt udVymKDqE4hgf4SEG9QWzCzHrqZwU1WvG46m8pow/x1tBGf0DtmKSbpPIAglRvk+ OdcC4/4U6gc9di0QzPSbHiYvHMmpyyQYVl4kpYX/D3H1hPxCRBdFf/nubyKgapvQ D5Nnhts76Qe/obkraRqYbrywjR5jeH+dwob41M4S0Xbzu84CmfZeD5H2gDbPJw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:30:06 2026 by rpki-client