This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa File: 323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa (raw, json) Hash identifier: cM6lvRXFQ54Q9BbK/baCmliVYrjV9qL6Vu4b0AlKcJ0= Subject key identifier: 5E:F1:93:C9:6C:FB:4C:19:F8:09:C6:E6:F8:D2:56:02:51:D5:C8:9F Certificate issuer: /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A Certificate serial: 652AF241ACF9445747361766AB71021D2E6F7ED9 Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa Signing time: Tue 06 Jan 2026 20:52:27 +0000 ROA not before: Tue 06 Jan 2026 20:47:27 +0000 ROA not after: Tue 05 Jan 2027 20:52:27 +0000 asID: 267831 IP address blocks: 2803:8460:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 10:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2a:f2:41:ac:f9:44:57:47:36:17:66:ab:71:02:1d:2e:6f:7e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A Validity Not Before: Jan 6 20:47:27 2026 GMT Not After : Jan 5 20:52:27 2027 GMT Subject: CN=5EF193C96CFB4C19F809C6E6F8D2560251D5C89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:c6:ef:91:d8:bd:ef:3b:e9:9c:a7:35:b4: 7a:a3:08:be:f0:c0:29:79:1f:48:f4:19:2d:78:b1: e8:c8:c0:30:91:94:eb:f0:ff:49:af:be:60:b2:af: 4f:f0:20:85:b4:b4:95:bb:5c:ed:91:98:6e:97:82: b5:e9:92:ca:c3:53:49:51:b9:a6:41:8f:d3:1c:bf: 9e:8a:21:47:40:1c:d0:45:fe:fb:bf:7b:ba:e0:a2: 8f:e3:ba:b5:5a:45:0d:af:ca:ad:28:23:4e:ca:1a: 6a:06:51:b0:54:91:86:cc:da:d1:16:ad:43:d7:23: 8a:28:46:88:58:a9:fc:ad:7e:61:21:1d:42:03:cb: 7e:f6:83:3c:69:9b:af:ed:48:e2:47:34:66:48:2a: e5:34:1b:3a:a6:b4:80:7d:4b:36:6f:e8:b6:0a:5e: f1:d1:cc:50:51:35:03:bf:1d:00:e7:fa:e1:6b:03: af:3a:49:2e:59:67:94:72:84:85:fd:d4:a0:a1:67: 36:23:fb:2e:2a:90:74:3e:0d:97:12:2d:e3:7a:a7: 11:b0:e8:38:55:f8:6a:5f:68:20:fe:c7:0d:5b:31: 5d:a6:a2:79:ae:c6:c0:01:66:bd:69:ee:f1:84:e4: 53:6a:45:08:f8:7b:b2:6b:68:66:16:05:28:c0:ea: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:93:C9:6C:FB:4C:19:F8:09:C6:E6:F8:D2:56:02:51:D5:C8:9F X509v3 Authority Key Identifier: keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a323030303a3a2f33362d3336203d3e20323637383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8460:2000::/36 Signature Algorithm: sha256WithRSAEncryption 3b:73:7e:4c:80:2d:6e:79:be:87:c2:11:ff:4c:c9:37:9a:2a: d0:06:f1:19:10:d6:03:70:27:6c:a1:37:ee:4f:ce:6b:01:da: 5b:ec:6f:86:a2:9b:7f:60:e2:3a:0d:6c:bd:37:ab:18:86:e5: 5b:19:e9:19:22:f3:47:a7:71:1c:b3:d1:5b:33:32:97:14:32: 4a:91:a9:b3:89:9f:c6:d0:d8:74:14:7b:bd:aa:22:d2:66:0b: 4c:d0:42:86:7e:8c:6c:d7:33:09:07:9a:47:58:36:57:bb:10: 47:11:ca:f6:a4:e0:07:4f:de:96:57:04:d9:ec:15:91:c2:fd: 76:83:69:ad:60:84:dd:a9:6e:20:79:88:90:b0:96:92:9f:c8: 01:4c:c4:0d:9b:cc:bc:70:82:90:e0:a4:2d:6e:fb:30:5f:54: fd:a9:4d:0e:68:e2:e9:00:cc:76:ab:20:52:9d:86:df:71:62: cf:d0:e4:0c:44:fc:32:09:1f:9a:25:03:97:f1:f5:7b:df:63: 2a:71:b5:9c:de:b0:24:7c:b9:de:d6:bb:67:94:9b:84:cf:75: 77:1d:39:0a:26:f8:f1:e2:43:ec:28:4b:a4:b6:d1:c1:84:bd: 75:7c:7b:bd:1a:50:b7:92:47:bd:cf:55:6d:45:de:52:1a:09: a0:62:36:bb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZSryQaz5RFdHNhdmq3ECHS5vftkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC Q0U2MDA3QTAeFw0yNjAxMDYyMDQ3MjdaFw0yNzAxMDUyMDUyMjdaMDMxMTAvBgNV BAMTKDVFRjE5M0M5NkNGQjRDMTlGODA5QzZFNkY4RDI1NjAyNTFENUM4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNg8bvkdi97zvpnKc1tHqjCL7w wCl5H0j0GS14sejIwDCRlOvw/0mvvmCyr0/wIIW0tJW7XO2RmG6XgrXpksrDU0lR uaZBj9Mcv56KIUdAHNBF/vu/e7rgoo/jurVaRQ2vyq0oI07KGmoGUbBUkYbM2tEW rUPXI4ooRohYqfytfmEhHUIDy372gzxpm6/tSOJHNGZIKuU0GzqmtIB9SzZv6LYK XvHRzFBRNQO/HQDn+uFrA686SS5ZZ5RyhIX91KChZzYj+y4qkHQ+DZcSLeN6pxGw 6DhV+GpfaCD+xw1bMV2monmuxsABZr1p7vGE5FNqRQj4e7JraGYWBSjA6pTfAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUXvGTyWz7TBn4Ccbm+NJWAlHVyJ8wHwYDVR0j BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3 QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4RgIDANBgkqhkiG9w0BAQsFAAOCAQEAO3N+TIAtbnm+h8IR/0zJN5oq 0AbxGRDWA3AnbKE37k/OawHaW+xvhqKbf2DiOg1svTerGIblWxnpGSLzR6dxHLPR WzMylxQySpGps4mfxtDYdBR7vaoi0mYLTNBChn6MbNczCQeaR1g2V7sQRxHK9qTg B0/ellcE2ewVkcL9doNprWCE3aluIHmIkLCWkp/IAUzEDZvMvHCCkOCkLW77MF9U /alNDmji6QDMdqsgUp2G33Fiz9DkDET8MgkfmiUDl/H1e99jKnG1nN6wJHy53ta7 Z5SbhM91dx05Cib48eJD7ChLpLbRwYS9dXx7vRpQt5JHvc9VbUXeUhoJoGI2uw== -----END CERTIFICATE-----Generated at Wed Jan 7 03:47:16 2026 by rpki-client