This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa File: 323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa (raw, json) Hash identifier: MK+vdRW7/lL2eXgIGYfUR4I7rDIvBNxsJrAZskk3VDo= Subject key identifier: 5A:14:75:59:7A:EA:E9:8C:10:03:A8:FD:A5:87:D8:F2:A8:85:BA:D8 Certificate issuer: /CN=876619C7FD0F295D57635312903E44E56FCF51A3 Certificate serial: 331687EE3DD0DC4FAAEB3AC34E7B8905A0903CA1 Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa Signing time: Tue 06 Jan 2026 19:47:56 +0000 ROA not before: Tue 06 Jan 2026 19:42:56 +0000 ROA not after: Tue 05 Jan 2027 19:47:56 +0000 asID: 266820 IP address blocks: 2803:84a0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:16:87:ee:3d:d0:dc:4f:aa:eb:3a:c3:4e:7b:89:05:a0:90:3c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3 Validity Not Before: Jan 6 19:42:56 2026 GMT Not After : Jan 5 19:47:56 2027 GMT Subject: CN=5A1475597AEAE98C1003A8FDA587D8F2A885BAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:63:56:97:ea:fc:5f:7e:a6:a4:0a:38:34: b2:b3:cf:e5:af:67:60:10:1e:aa:57:12:71:1c:74: 81:53:f2:bd:56:e5:c8:08:07:c8:87:65:ee:5c:aa: 83:66:7f:40:f2:9e:ab:5d:5d:1b:45:6b:ca:73:48: d1:6f:e9:80:39:3f:37:cb:ef:ae:9f:09:d1:ea:ee: 8b:f6:9f:d9:27:77:da:07:26:59:84:c8:75:08:d3: de:2f:0f:be:8c:fd:47:93:90:c9:a1:3b:bf:58:3b: 78:2a:a9:fa:2c:7b:84:d8:b8:80:90:06:ff:92:e1: d1:64:4c:91:7a:fe:51:b1:6d:55:b3:4e:d6:65:73: 61:d6:ee:4f:4f:b8:40:3f:6a:9c:bb:c8:73:6b:bd: 78:ae:21:c7:42:9e:84:f9:40:7a:47:4c:2c:fe:cc: 7f:82:ab:3a:48:c4:3c:69:cc:cc:fb:b3:ac:73:ca: 87:34:bc:26:c5:de:6c:5c:7e:16:86:9e:4a:34:02: bf:21:73:fb:28:c7:b8:0c:0d:4b:5b:5b:38:d8:c8: 92:81:3d:2d:32:a1:25:49:15:a5:9b:94:db:3b:93: 67:92:a7:c7:3b:61:7f:78:4c:6c:33:39:07:7b:71: fd:7b:a3:60:d4:f7:c6:8b:1b:69:f7:e5:43:5e:7d: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:75:59:7A:EA:E9:8C:10:03:A8:FD:A5:87:D8:F2:A8:85:BA:D8 X509v3 Authority Key Identifier: keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:84a0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 54:76:c3:cf:3d:f9:34:62:14:05:fe:97:6c:b2:b0:08:4a:4e: 11:e1:5d:9d:e6:e2:4a:18:17:b4:f5:af:8f:83:a7:84:93:2e: d2:cd:a0:e2:8b:38:59:a6:b2:86:09:01:3e:b2:95:5c:ef:1c: fa:8c:0e:9d:ef:a7:e3:2b:3f:b9:a7:b4:6d:d0:b6:6e:4c:5f: 3f:e9:26:d5:00:4a:cb:72:16:93:27:15:a5:14:f7:17:77:c1: d2:c6:fd:30:bc:f6:19:0e:c0:bc:c0:60:4d:c9:08:e2:98:1c: f9:5d:28:a1:ee:72:0a:f0:ce:6f:96:75:dd:76:ba:21:7b:ec: a8:c0:67:e3:5c:de:4a:d1:f7:bd:cf:3e:ad:a8:dd:83:62:0e: a9:0f:0f:e0:79:1c:0f:fc:e0:d6:cf:59:88:f3:b2:7a:ff:c2: 42:b2:ec:ac:b6:2b:75:76:a8:9a:75:97:c4:6a:3a:ae:83:81: 08:57:eb:be:a2:49:d2:a1:8f:14:c4:d9:d1:f8:81:f9:b1:20: cd:7e:f2:87:1f:43:ec:a9:fa:8d:5b:01:ce:7d:65:a5:a5:dd: f9:26:a0:d2:79:42:b2:c9:53:74:77:f1:f9:60:9b:fd:8a:31: 26:78:c5:b8:90:b5:55:10:26:e4:40:30:9b:81:7b:0c:c4:66: 43:8e:66:ca -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUMxaH7j3Q3E+q6zrDTnuJBaCQPKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2NjE5QzdGRDBGMjk1RDU3NjM1MzEyOTAzRTQ0RTU2 RkNGNTFBMzAeFw0yNjAxMDYxOTQyNTZaFw0yNzAxMDUxOTQ3NTZaMDMxMTAvBgNV BAMTKDVBMTQ3NTU5N0FFQUU5OEMxMDAzQThGREE1ODdEOEYyQTg4NUJBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRmNWl+r8X36mpAo4NLKzz+Wv Z2AQHqpXEnEcdIFT8r1W5cgIB8iHZe5cqoNmf0DynqtdXRtFa8pzSNFv6YA5PzfL 766fCdHq7ov2n9knd9oHJlmEyHUI094vD76M/UeTkMmhO79YO3gqqfose4TYuICQ Bv+S4dFkTJF6/lGxbVWzTtZlc2HW7k9PuEA/apy7yHNrvXiuIcdCnoT5QHpHTCz+ zH+CqzpIxDxpzMz7s6xzyoc0vCbF3mxcfhaGnko0Ar8hc/sox7gMDUtbWzjYyJKB PS0yoSVJFaWblNs7k2eSp8c7YX94TGwzOQd7cf17o2DU98aLG2n35UNefd/RAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWhR1WXrq6YwQA6j9pYfY8qiFutgwHwYDVR0j BBgwFoAUh2YZx/0PKV1XY1MSkD5E5W/PUaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0Y0Mzc1M0Q1NDdBOURBNTQ2REZDNEU1ODNDQ0UwNDFD MzU4NTMxOTMxNzdGRUU3Q0U3NTdBRjJBRDI0RDE5LzAvODc2NjE5QzdGRDBGMjk1 RDU3NjM1MzEyOTAzRTQ0RTU2RkNGNTFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzY2MTlDN0ZEMEYyOTVENTc2 MzUzMTI5MDNFNDRFNTZGQ0Y1MUEzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdGNDM3NTNENTQ3QTlEQTU0NkRGQzRFNTgzQ0NFMDQxQzM1ODUzMTkz MTc3RkVFN0NFNzU3QUYyQUQyNEQxOS8wLzMyMzgzMDMzM2EzODM0NjEzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4SgUDANBgkqhkiG9w0BAQsFAAOCAQEAVHbDzz35NGIUBf6XbLKwCEpO EeFdnebiShgXtPWvj4OnhJMu0s2g4os4WaayhgkBPrKVXO8c+owOne+n4ys/uae0 bdC2bkxfP+km1QBKy3IWkycVpRT3F3fB0sb9MLz2GQ7AvMBgTckI4pgc+V0ooe5y CvDOb5Z13Xa6IXvsqMBn41zeStH3vc8+rajdg2IOqQ8P4HkcD/zg1s9ZiPOyev/C QrLsrLYrdXaomnWXxGo6roOBCFfrvqJJ0qGPFMTZ0fiB+bEgzX7yhx9D7Kn6jVsB zn1lpaXd+Sag0nlCsslTdHfx+WCb/YoxJnjFuJC1VRAm5EAwm4F7DMRmQ45myg== -----END CERTIFICATE-----Generated at Mon Jan 12 05:33:11 2026 by rpki-client