This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/323830333a643839303a3a2f33322d3438203d3e20323732383038.roa File: 323830333a643839303a3a2f33322d3438203d3e20323732383038.roa (raw, json) Hash identifier: vQRmCwZvSm2T/6DwR+7fdl+BYVDYkBgXUQzwLGwA05g= Subject key identifier: BC:ED:BA:61:A2:B7:A9:E1:61:1A:41:84:CE:F9:00:13:B1:EB:72:35 Certificate issuer: /CN=0FA72522DE57C2163C19142F66DFBA72B3E9D733 Certificate serial: 2070CA023A965AA58B2D37250EF6DC9F571E7A6B Authority key identifier: 0F:A7:25:22:DE:57:C2:16:3C:19:14:2F:66:DF:BA:72:B3:E9:D7:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/323830333a643839303a3a2f33322d3438203d3e20323732383038.roa Signing time: Tue 06 Jan 2026 19:36:23 +0000 ROA not before: Tue 06 Jan 2026 19:31:23 +0000 ROA not after: Tue 05 Jan 2027 19:36:23 +0000 asID: 272808 IP address blocks: 2803:d890::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.crl rsync://repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:70:ca:02:3a:96:5a:a5:8b:2d:37:25:0e:f6:dc:9f:57:1e:7a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA72522DE57C2163C19142F66DFBA72B3E9D733 Validity Not Before: Jan 6 19:31:23 2026 GMT Not After : Jan 5 19:36:23 2027 GMT Subject: CN=BCEDBA61A2B7A9E1611A4184CEF90013B1EB7235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:dc:18:da:31:2d:07:be:a8:f9:c1:1b:6b: 08:a4:c8:b5:d6:39:fc:bd:dd:ed:0f:73:a9:68:3e: d1:b3:9a:81:62:0f:61:24:d4:c7:ed:2c:25:48:bb: 91:1a:61:a3:2d:51:ad:d7:1a:3e:0a:f6:4c:8e:7a: 7f:fc:e8:1e:35:25:1e:ed:28:1a:d5:f3:0d:53:8a: 45:53:56:32:33:61:8a:d6:98:80:a2:e4:d0:11:60: 49:e7:e6:3c:34:7e:f9:ae:23:a7:2c:4e:e5:fc:5f: ae:48:1d:72:4b:a7:e8:14:bf:39:c7:d6:ac:a9:d7: c6:fd:85:29:c8:df:0d:bb:c2:47:f2:e2:bf:43:e5: 1e:3e:9c:0f:e9:84:ed:3e:39:c7:01:73:e6:dc:29: a3:72:48:bf:f7:52:c9:38:9e:3d:9b:93:41:d2:6a: 2e:10:cb:7a:fc:00:c7:8c:9b:db:66:3f:d5:60:0e: 43:89:00:ce:30:d1:a9:b4:de:1f:29:06:3d:7e:5b: df:43:d8:6a:7b:60:59:8f:af:ce:07:59:96:85:5d: 75:de:4f:74:67:e9:e7:31:97:63:fa:91:1c:81:80: ae:9d:b0:43:2a:4b:c3:6a:c1:77:cf:39:f9:90:69: 33:43:d8:39:d2:3f:d5:f7:39:4b:6c:ad:d2:ca:73: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:ED:BA:61:A2:B7:A9:E1:61:1A:41:84:CE:F9:00:13:B1:EB:72:35 X509v3 Authority Key Identifier: keyid:0F:A7:25:22:DE:57:C2:16:3C:19:14:2F:66:DF:BA:72:B3:E9:D7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FA72522DE57C2163C19142F66DFBA72B3E9D733.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7137EC68FAF4CF1B52CB70B8F595D22F3ACC08D17A6132E938CDAAA1B157A05/0/323830333a643839303a3a2f33322d3438203d3e20323732383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d890::/32 Signature Algorithm: sha256WithRSAEncryption 2c:f6:9f:1b:51:5b:7f:e0:d9:dc:ea:7e:fa:c3:a0:d7:ef:ed: 20:8c:be:1e:3d:c4:eb:42:41:64:fa:e0:31:66:6f:6c:24:8a: bc:6f:52:eb:34:10:aa:8c:ad:34:07:94:c3:20:4e:89:3e:52: 82:83:cd:3b:50:f9:2c:64:6b:34:91:a9:7f:33:18:f3:b9:32: 29:9a:fb:14:dc:9a:d7:b9:a6:ce:fc:f1:5c:c0:f4:32:a8:cf: 03:93:ae:ba:bc:bf:67:f3:ed:c1:3f:c2:74:7d:07:5e:40:df: a7:9e:dc:fa:d0:19:6c:4c:ac:dc:04:ec:5c:61:03:98:8f:02: 64:a2:73:7c:db:44:95:b9:71:a9:33:b0:5a:db:91:ab:cd:80: 66:aa:4d:73:63:86:8c:a7:f8:ed:24:60:a2:65:75:28:21:81: 32:e0:70:3e:2d:8c:18:30:0e:94:73:1e:98:60:4c:9b:3a:b4: a4:0f:02:42:8e:86:d4:9f:9c:32:e7:93:ae:fb:01:1f:08:8d: b7:ad:94:08:b9:ff:be:40:48:f6:ec:b3:b5:88:c5:80:f8:60: f8:fa:26:dd:42:f2:3e:70:85:13:69:1d:21:ce:7a:d5:05:e5: 5b:91:64:81:cf:e6:c6:16:85:0f:40:5a:1d:b5:d8:3a:2b:fb: 68:1f:fc:8e -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUIHDKAjqWWqWLLTclDvbcn1ceemswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNzI1MjJERTU3QzIxNjNDMTkxNDJGNjZERkJBNzJC M0U5RDczMzAeFw0yNjAxMDYxOTMxMjNaFw0yNzAxMDUxOTM2MjNaMDMxMTAvBgNV BAMTKEJDRURCQTYxQTJCN0E5RTE2MTFBNDE4NENFRjkwMDEzQjFFQjcyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+twY2jEtB76o+cEbawikyLXW Ofy93e0Pc6loPtGzmoFiD2Ek1MftLCVIu5EaYaMtUa3XGj4K9kyOen/86B41JR7t KBrV8w1TikVTVjIzYYrWmICi5NARYEnn5jw0fvmuI6csTuX8X65IHXJLp+gUvznH 1qyp18b9hSnI3w27wkfy4r9D5R4+nA/phO0+OccBc+bcKaNySL/3Usk4nj2bk0HS ai4Qy3r8AMeMm9tmP9VgDkOJAM4w0am03h8pBj1+W99D2Gp7YFmPr84HWZaFXXXe T3Rn6ecxl2P6kRyBgK6dsEMqS8NqwXfPOfmQaTND2DnSP9X3OUtsrdLKc5ZjAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUvO26YaK3qeFhGkGEzvkAE7HrcjUwHwYDVR0j BBgwFoAUD6clIt5XwhY8GRQvZt+6crPp1zMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNzEzN0VDNjhGQUY0Q0YxQjUyQ0I3MEI4RjU5NUQyMkYz QUNDMDhEMTdBNjEzMkU5MzhDREFBQTFCMTU3QTA1LzAvMEZBNzI1MjJERTU3QzIx NjNDMTkxNDJGNjZERkJBNzJCM0U5RDczMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkE3MjUyMkRFNTdDMjE2M0Mx OTE0MkY2NkRGQkE3MkIzRTlENzMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzcxMzdFQzY4RkFGNENGMUI1MkNCNzBCOEY1OTVEMjJGM0FDQzA4RDE3 QTYxMzJFOTM4Q0RBQUExQjE1N0EwNS8wLzMyMzgzMDMzM2E2NDM4MzkzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD2JAw DQYJKoZIhvcNAQELBQADggEBACz2nxtRW3/g2dzqfvrDoNfv7SCMvh49xOtCQWT6 4DFmb2wkirxvUus0EKqMrTQHlMMgTok+UoKDzTtQ+SxkazSRqX8zGPO5Mima+xTc mte5ps788VzA9DKozwOTrrq8v2fz7cE/wnR9B15A36ee3PrQGWxMrNwE7FxhA5iP AmSic3zbRJW5cakzsFrbkavNgGaqTXNjhoyn+O0kYKJldSghgTLgcD4tjBgwDpRz HphgTJs6tKQPAkKOhtSfnDLnk677AR8IjbetlAi5/75ASPbss7WIxYD4YPj6Jt1C 8j5whRNpHSHOetUF5VuRZIHP5sYWhQ9AWh212Dor+2gf/I4= -----END CERTIFICATE-----Generated at Fri Jan 9 04:50:22 2026 by rpki-client