This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa File: 323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa (raw, json) Hash identifier: ljA2PekcWhCCo9PpkkeBu6Eem34gPGmyF/zIhTZGV7M= Subject key identifier: 84:65:F7:11:9E:AF:7D:59:10:44:60:D6:DF:ED:57:A1:5E:F6:AB:54 Certificate issuer: /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A Certificate serial: 7D048D04BC67E670D8E9248710FE393DD96286E1 Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa Signing time: Tue 06 Jan 2026 20:52:26 +0000 ROA not before: Tue 06 Jan 2026 20:47:26 +0000 ROA not after: Tue 05 Jan 2027 20:52:26 +0000 asID: 267831 IP address blocks: 2803:8460:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 10:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:8d:04:bc:67:e6:70:d8:e9:24:87:10:fe:39:3d:d9:62:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A Validity Not Before: Jan 6 20:47:26 2026 GMT Not After : Jan 5 20:52:26 2027 GMT Subject: CN=8465F7119EAF7D59104460D6DFED57A15EF6AB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:31:7c:41:09:97:e3:5c:09:be:3a:bf:8d: 7c:1d:6d:ab:6c:42:b0:fe:dc:21:1a:28:05:b4:a0: d2:be:cc:5a:ba:ab:5c:95:b1:9f:73:40:9d:83:1e: e2:11:0e:53:21:8a:2b:5a:2f:a1:6f:94:2d:b7:2e: 50:89:eb:43:38:6f:41:63:f3:1c:b4:a9:6a:c5:bc: 10:58:d4:69:3e:1f:32:57:5f:cc:bb:70:b1:20:c6: 63:28:02:a9:4f:eb:1d:9d:73:56:69:43:25:80:2d: b4:c5:1a:f1:3d:92:3b:9c:a0:ea:db:4d:9d:b6:df: 21:c3:1e:e7:f6:d7:c6:d1:b5:94:e6:56:2f:14:c7: 77:60:7f:d8:6b:b4:55:3d:83:7b:d3:0e:e6:cc:c7: 4f:a0:5c:a8:50:6d:c2:5a:3f:96:40:70:c4:c1:2c: a4:9f:c1:86:3a:4d:16:37:6b:33:f8:3c:24:55:31: 07:9f:5c:52:75:d8:a5:a3:b5:c5:25:03:45:1d:6d: 9f:5d:ee:49:7d:8e:5f:24:4b:ff:79:38:93:77:c6: 5c:6f:3c:e6:c1:0b:c1:80:40:93:3a:a3:a2:c4:84: 0d:41:ba:d2:70:f2:07:36:02:10:3f:8a:b8:3f:25: a4:63:6b:f6:24:87:83:6a:db:25:e3:25:5a:ae:27: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:F7:11:9E:AF:7D:59:10:44:60:D6:DF:ED:57:A1:5E:F6:AB:54 X509v3 Authority Key Identifier: keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a343030303a3a2f33362d3336203d3e20323637383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8460:4000::/36 Signature Algorithm: sha256WithRSAEncryption 78:b0:42:c4:70:fb:24:36:cf:65:b0:e1:12:fd:9e:7d:16:67: d2:49:a3:99:06:6d:e1:e9:36:e6:e4:09:cb:a6:ca:ce:5b:01: bb:83:9f:3c:84:25:f2:a2:7c:ba:96:9e:18:2c:10:15:35:fd: 5b:d3:f8:39:f0:ca:5c:03:d3:1f:6b:c9:77:e7:54:2c:3d:e3: 6f:5f:0f:92:7c:51:a3:32:b8:df:73:79:05:df:df:bd:fa:90: 8f:6b:de:9f:ec:45:62:2f:ee:00:e6:68:34:91:3d:88:65:8d: 4a:e7:6f:7a:5b:90:5c:49:c8:cb:7c:37:0d:4a:98:41:f2:02: f6:2f:fd:a0:e7:7b:cd:b2:15:e2:f8:bd:64:eb:76:3c:61:1e: 7a:d4:bb:24:29:a8:81:db:30:85:34:22:48:c5:20:51:d9:76: d0:c9:75:dc:36:4a:c0:9e:b6:ba:c2:d3:f0:0e:54:ee:e5:fb: 68:19:11:1e:a0:f2:80:d4:12:bd:9b:73:9a:27:aa:ea:e5:3b: 93:53:c3:ce:2a:f3:83:cb:05:53:2c:12:e5:63:15:7c:16:28: f8:39:72:b6:c1:70:b4:7b:90:89:07:fe:d9:ab:e3:bc:f3:29: ab:2e:ee:d1:4e:a4:81:99:44:64:53:9b:99:6b:1a:44:06:66: b6:47:83:fb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfQSNBLxn5nDY6SSHEP45PdlihuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFN0YxQ0I0QzFCRjdBMzIwMUFCQzg3ODg1MzE2OUNC Q0U2MDA3QTAeFw0yNjAxMDYyMDQ3MjZaFw0yNzAxMDUyMDUyMjZaMDMxMTAvBgNV BAMTKDg0NjVGNzExOUVBRjdENTkxMDQ0NjBENkRGRUQ1N0ExNUVGNkFCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cDF8QQmX41wJvjq/jXwdbats QrD+3CEaKAW0oNK+zFq6q1yVsZ9zQJ2DHuIRDlMhiitaL6FvlC23LlCJ60M4b0Fj 8xy0qWrFvBBY1Gk+HzJXX8y7cLEgxmMoAqlP6x2dc1ZpQyWALbTFGvE9kjucoOrb TZ223yHDHuf218bRtZTmVi8Ux3dgf9hrtFU9g3vTDubMx0+gXKhQbcJaP5ZAcMTB LKSfwYY6TRY3azP4PCRVMQefXFJ12KWjtcUlA0UdbZ9d7kl9jl8kS/95OJN3xlxv PObBC8GAQJM6o6LEhA1ButJw8gc2AhA/irg/JaRja/Ykh4Nq2yXjJVquJzFDAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUhGX3EZ6vfVkQRGDW3+1XoV72q1QwHwYDVR0j BBgwFoAUgOfxy0wb96MgGryHiFMWnLzmAHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTVGOTdGMTFBQkVENzU5RjY5NEI1Nzc1MUIyMzlGQ0Uz OUVCMEVDOTdCMzg3OTcyQTcyMzA5RTUyMDlBRUU0LzAvODBFN0YxQ0I0QzFCRjdB MzIwMUFCQzg3ODg1MzE2OUNCQ0U2MDA3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MEU3RjFDQjRDMUJGN0EzMjAx QUJDODc4ODUzMTY5Q0JDRTYwMDdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1Rjk3RjExQUJFRDc1OUY2OTRCNTc3NTFCMjM5RkNFMzlFQjBFQzk3 QjM4Nzk3MkE3MjMwOUU1MjA5QUVFNC8wLzMyMzgzMDMzM2EzODM0MzYzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4RgQDANBgkqhkiG9w0BAQsFAAOCAQEAeLBCxHD7JDbPZbDhEv2efRZn 0kmjmQZt4ek25uQJy6bKzlsBu4OfPIQl8qJ8upaeGCwQFTX9W9P4OfDKXAPTH2vJ d+dULD3jb18PknxRozK433N5Bd/fvfqQj2ven+xFYi/uAOZoNJE9iGWNSudveluQ XEnIy3w3DUqYQfIC9i/9oOd7zbIV4vi9ZOt2PGEeetS7JCmogdswhTQiSMUgUdl2 0Ml13DZKwJ62usLT8A5U7uX7aBkRHqDygNQSvZtzmieq6uU7k1PDzirzg8sFUywS 5WMVfBYo+DlytsFwtHuQiQf+2avjvPMpqy7u0U6kgZlEZFObmWsaRAZmtkeD+w== -----END CERTIFICATE-----Generated at Wed Jan 7 03:47:53 2026 by rpki-client