This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a663030303a3a2f33362d3336203d3e20323636383230.roa File: 323830333a383461303a663030303a3a2f33362d3336203d3e20323636383230.roa (raw, json) Hash identifier: +GIFg5u7bXyASboRNNTzsIkKWxw8hBq2xw4lVMaNJdA= Subject key identifier: 03:DF:42:90:9F:A3:AF:24:CA:D2:B9:B7:81:75:06:DE:B9:D5:8B:FB Certificate issuer: /CN=876619C7FD0F295D57635312903E44E56FCF51A3 Certificate serial: 46A393E5011112ADB66D87520B624223C9C602A1 Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a663030303a3a2f33362d3336203d3e20323636383230.roa Signing time: Tue 06 Jan 2026 19:47:56 +0000 ROA not before: Tue 06 Jan 2026 19:42:56 +0000 ROA not after: Tue 05 Jan 2027 19:47:56 +0000 asID: 266820 IP address blocks: 2803:84a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 21:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:93:e5:01:11:12:ad:b6:6d:87:52:0b:62:42:23:c9:c6:02:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3 Validity Not Before: Jan 6 19:42:56 2026 GMT Not After : Jan 5 19:47:56 2027 GMT Subject: CN=03DF42909FA3AF24CAD2B9B7817506DEB9D58BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:d6:84:ef:de:cd:be:d3:e2:0c:81:8a:1a: a8:9f:f6:92:b9:19:29:83:5b:ff:a6:25:49:0f:85: ae:fe:c7:62:c5:07:ba:ca:6c:d4:df:8c:e6:16:7e: e7:b5:f0:2d:29:be:95:f0:00:1f:15:08:2f:cb:02: c0:ff:5e:45:d6:25:6f:30:1a:08:f2:35:8c:13:87: 39:34:4e:23:7d:d8:2c:e3:0d:04:9e:c6:6b:47:26: 5f:89:48:87:69:4b:50:4d:f1:72:34:fa:2a:9c:6c: 66:80:3c:ff:23:94:50:34:dc:33:9b:a3:e9:cc:7d: 85:41:fa:65:62:7b:ef:01:01:be:7c:bd:50:fb:fd: ea:fa:c7:35:de:c1:92:9d:e2:93:12:21:b8:9d:a6: 8e:52:c6:56:67:40:24:a0:18:fd:84:ee:9a:a7:1d: 73:33:da:20:05:7b:92:a2:50:aa:e7:04:9f:12:49: 71:91:45:f9:c0:77:9f:67:f5:5e:3f:b7:cf:bf:0f: 87:e3:56:55:90:b1:6a:b4:d0:c1:2c:5a:4f:68:a5: 1e:04:c3:fa:77:e2:30:8a:b2:82:93:54:6f:96:55: e3:09:58:d6:d3:5e:f4:ef:ad:db:97:82:c6:77:23: 43:4a:3a:39:ec:ff:35:95:29:e0:d1:d2:a4:45:f1: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DF:42:90:9F:A3:AF:24:CA:D2:B9:B7:81:75:06:DE:B9:D5:8B:FB X509v3 Authority Key Identifier: keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a663030303a3a2f33362d3336203d3e20323636383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:84a0:f000::/36 Signature Algorithm: sha256WithRSAEncryption a0:d9:65:66:fe:9b:d9:fb:59:ca:2b:ee:8f:f7:d8:f0:57:af: 45:c9:1b:53:f3:68:1e:f6:0f:23:04:1c:28:d5:c9:59:97:8b: 9b:0d:de:fc:d5:83:4f:3f:9f:4f:3a:39:7f:c5:28:5f:59:b0: 96:eb:6f:a6:5e:1a:70:07:2f:16:a3:e7:4b:35:76:a5:07:e8: b3:4a:21:eb:d9:3d:eb:e4:7e:f1:be:98:30:42:ff:43:fe:92: 66:59:38:df:f1:df:ff:f1:09:b4:aa:e4:9a:8f:47:3e:d5:f8: ad:c5:59:24:5c:bb:cc:77:8e:84:b1:89:83:d1:d7:45:9a:ca: cf:23:96:fd:26:34:bf:f3:6c:27:4d:7e:48:dd:5b:05:ad:24: 13:1e:7d:9c:eb:5c:0e:8d:31:7e:af:f8:13:2e:66:7b:ac:51: ad:f3:4a:5d:b8:47:fe:ed:ea:ab:92:62:4a:78:04:a5:12:94: 4f:44:7b:30:31:00:f2:0e:6a:45:b1:29:95:cf:ef:20:af:47: 14:fa:44:9d:f6:14:eb:7b:7e:fe:95:d5:6c:a7:fe:59:27:87: 9f:19:8e:2e:92:73:a0:0a:40:11:86:06:8b:37:90:28:56:43: 74:75:fd:0d:da:8b:6c:30:a0:11:43:e9:32:48:7c:4a:4f:ac: f6:fc:68:70 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIURqOT5QEREq22bYdSC2JCI8nGAqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2NjE5QzdGRDBGMjk1RDU3NjM1MzEyOTAzRTQ0RTU2 RkNGNTFBMzAeFw0yNjAxMDYxOTQyNTZaFw0yNzAxMDUxOTQ3NTZaMDMxMTAvBgNV BAMTKDAzREY0MjkwOUZBM0FGMjRDQUQyQjlCNzgxNzUwNkRFQjlENThCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6udaE797NvtPiDIGKGqif9pK5 GSmDW/+mJUkPha7+x2LFB7rKbNTfjOYWfue18C0pvpXwAB8VCC/LAsD/XkXWJW8w GgjyNYwThzk0TiN92CzjDQSexmtHJl+JSIdpS1BN8XI0+iqcbGaAPP8jlFA03DOb o+nMfYVB+mVie+8BAb58vVD7/er6xzXewZKd4pMSIbidpo5SxlZnQCSgGP2E7pqn HXMz2iAFe5KiUKrnBJ8SSXGRRfnAd59n9V4/t8+/D4fjVlWQsWq00MEsWk9opR4E w/p34jCKsoKTVG+WVeMJWNbTXvTvrduXgsZ3I0NKOjns/zWVKeDR0qRF8febAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUA99CkJ+jryTK0rm3gXUG3rnVi/swHwYDVR0j BBgwFoAUh2YZx/0PKV1XY1MSkD5E5W/PUaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0Y0Mzc1M0Q1NDdBOURBNTQ2REZDNEU1ODNDQ0UwNDFD MzU4NTMxOTMxNzdGRUU3Q0U3NTdBRjJBRDI0RDE5LzAvODc2NjE5QzdGRDBGMjk1 RDU3NjM1MzEyOTAzRTQ0RTU2RkNGNTFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzY2MTlDN0ZEMEYyOTVENTc2 MzUzMTI5MDNFNDRFNTZGQ0Y1MUEzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdGNDM3NTNENTQ3QTlEQTU0NkRGQzRFNTgzQ0NFMDQxQzM1ODUzMTkz MTc3RkVFN0NFNzU3QUYyQUQyNEQxOS8wLzMyMzgzMDMzM2EzODM0NjEzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4Sg8DANBgkqhkiG9w0BAQsFAAOCAQEAoNllZv6b2ftZyivuj/fY8Fev RckbU/NoHvYPIwQcKNXJWZeLmw3e/NWDTz+fTzo5f8UoX1mwlutvpl4acAcvFqPn SzV2pQfos0oh69k96+R+8b6YMEL/Q/6SZlk43/Hf//EJtKrkmo9HPtX4rcVZJFy7 zHeOhLGJg9HXRZrKzyOW/SY0v/NsJ01+SN1bBa0kEx59nOtcDo0xfq/4Ey5me6xR rfNKXbhH/u3qq5JiSngEpRKUT0R7MDEA8g5qRbEplc/vIK9HFPpEnfYU63t+/pXV bKf+WSeHnxmOLpJzoApAEYYGizeQKFZDdHX9DdqLbDCgEUPpMkh8Sk+s9vxocA== -----END CERTIFICATE-----Generated at Tue Jan 13 02:57:17 2026 by rpki-client