This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/323830313a31373a613830303a3a2f34382d3438203d3e203139343239.roa File: 323830313a31373a613830303a3a2f34382d3438203d3e203139343239.roa (raw, json) Hash identifier: bD2FEUzziY0oReufRjDWkG+nSJgtD0aTT4Xn0imb+8k= Subject key identifier: 89:DE:9B:6B:E4:8D:AE:F7:0B:16:90:DC:97:F6:70:7F:28:81:73:C4 Certificate issuer: /CN=473DA6D2AD1870712B3574665CA7D12EF08A67EB Certificate serial: 38C6C56D4FA7CB3A992B6517190DCCB2BEECA1CC Authority key identifier: 47:3D:A6:D2:AD:18:70:71:2B:35:74:66:5C:A7:D1:2E:F0:8A:67:EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/323830313a31373a613830303a3a2f34382d3438203d3e203139343239.roa Signing time: Tue 06 Jan 2026 19:03:29 +0000 ROA not before: Tue 06 Jan 2026 18:58:29 +0000 ROA not after: Tue 05 Jan 2027 19:03:29 +0000 asID: 19429 IP address blocks: 2801:17:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.crl rsync://repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 00:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c6:c5:6d:4f:a7:cb:3a:99:2b:65:17:19:0d:cc:b2:be:ec:a1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473DA6D2AD1870712B3574665CA7D12EF08A67EB Validity Not Before: Jan 6 18:58:29 2026 GMT Not After : Jan 5 19:03:29 2027 GMT Subject: CN=89DE9B6BE48DAEF70B1690DC97F6707F288173C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:37:0a:f9:e2:e4:95:c0:fe:d1:7a:e9:70: f3:88:63:4f:e8:7a:8c:a8:5c:b7:23:97:5e:2d:b7: a2:ef:8e:24:5f:ab:32:85:d3:f9:2e:3c:08:06:e6: ad:60:bc:36:62:d4:af:dd:2a:a1:a3:4a:b8:9f:fa: 8e:05:c4:ca:03:86:7b:2e:1b:96:21:0a:5b:95:7f: d8:1b:be:85:23:23:21:9d:fe:90:f4:a2:d4:f3:30: c6:fc:b6:6d:4d:b4:49:f4:f3:61:d5:31:e9:64:5d: ae:b3:e3:1a:87:fe:43:fb:b2:64:20:25:54:c3:0e: e3:40:c8:68:b9:4e:f3:d4:00:03:1b:5d:c8:7e:6a: ac:01:e9:e1:42:2b:84:e4:f7:30:8c:f7:c6:98:9c: 1a:50:75:da:5c:5d:8d:53:30:77:9f:0c:94:14:9a: 3b:3f:32:29:5f:75:3d:90:67:fe:52:ee:db:7b:0c: 1d:e0:14:f0:0b:60:e5:64:ab:93:7e:45:8a:ce:27: b0:16:39:e9:9c:12:6e:d9:c9:dc:48:12:c9:8d:5a: 19:10:df:ec:89:5e:f8:e6:21:f9:5b:c8:e8:1a:90: e6:6f:02:fd:a7:70:02:37:ab:c3:ff:24:e7:70:c4: bd:bd:a6:94:5e:88:da:4e:5c:23:b5:aa:bb:1d:54: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:9B:6B:E4:8D:AE:F7:0B:16:90:DC:97:F6:70:7F:28:81:73:C4 X509v3 Authority Key Identifier: keyid:47:3D:A6:D2:AD:18:70:71:2B:35:74:66:5C:A7:D1:2E:F0:8A:67:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473DA6D2AD1870712B3574665CA7D12EF08A67EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE42FD1EE33212C063B4C065E7B63698FA002ECE8EB7A9F663C2C72AA344C5E8/0/323830313a31373a613830303a3a2f34382d3438203d3e203139343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:17:a800::/48 Signature Algorithm: sha256WithRSAEncryption a5:85:cf:fb:7e:27:50:54:dd:c6:7d:e4:88:7e:93:f2:ec:3e: 03:d3:cb:51:c3:b8:a6:d5:a3:86:df:8b:e3:03:fe:e8:8d:6c: 2e:38:4c:78:a6:d9:96:8c:af:4b:b9:aa:67:b7:0b:1d:3d:15: 94:e6:8b:7d:50:39:06:da:b9:a9:12:a9:1e:91:48:21:78:c6: b4:fe:c9:b3:0d:af:c0:65:cb:02:32:23:13:cd:13:8d:91:25: 7f:71:85:ad:5e:88:d9:da:36:21:75:4c:70:41:6b:4c:8f:c0: 76:9b:bd:76:ac:d6:67:9b:01:36:bf:f8:cb:4b:59:67:ff:44: df:07:24:9b:27:f9:99:ed:9c:41:4b:91:86:f6:22:b6:c7:5a: 90:f1:32:4c:ff:76:73:e1:23:18:13:59:ae:7e:25:d7:b6:8a: 4c:af:87:a8:af:f2:a1:f7:74:db:51:1f:c4:e6:6b:5a:f0:4c: 7d:49:1e:b4:63:9b:c8:c1:57:77:15:87:45:78:4b:dc:e1:0f: 54:30:28:00:49:d4:06:6b:cb:16:f8:a2:38:bd:14:f4:72:a1: 0d:10:ac:34:18:7c:09:07:21:6e:7e:4e:e3:29:11:a1:d9:83: 54:87:26:93:d2:06:d2:63:0f:c1:e2:98:a9:c1:11:32:8b:83: bf:54:6f:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOMbFbU+nyzqZK2UXGQ3Msr7socwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczREE2RDJBRDE4NzA3MTJCMzU3NDY2NUNBN0QxMkVG MDhBNjdFQjAeFw0yNjAxMDYxODU4MjlaFw0yNzAxMDUxOTAzMjlaMDMxMTAvBgNV BAMTKDg5REU5QjZCRTQ4REFFRjcwQjE2OTBEQzk3RjY3MDdGMjg4MTczQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxDcK+eLklcD+0XrpcPOIY0/o eoyoXLcjl14tt6LvjiRfqzKF0/kuPAgG5q1gvDZi1K/dKqGjSrif+o4FxMoDhnsu G5YhCluVf9gbvoUjIyGd/pD0otTzMMb8tm1NtEn082HVMelkXa6z4xqH/kP7smQg JVTDDuNAyGi5TvPUAAMbXch+aqwB6eFCK4Tk9zCM98aYnBpQddpcXY1TMHefDJQU mjs/MilfdT2QZ/5S7tt7DB3gFPALYOVkq5N+RYrOJ7AWOemcEm7ZydxIEsmNWhkQ 3+yJXvjmIflbyOgakOZvAv2ncAI3q8P/JOdwxL29ppReiNpOXCO1qrsdVKajAgMB AAGjggLPMIICyzAdBgNVHQ4EFgQUid6ba+SNrvcLFpDcl/ZwfyiBc8QwHwYDVR0j BBgwFoAURz2m0q0YcHErNXRmXKfRLvCKZ+swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTQyRkQxRUUzMzIxMkMwNjNCNEMwNjVFN0I2MzY5OEZB MDAyRUNFOEVCN0E5RjY2M0MyQzcyQUEzNDRDNUU4LzAvNDczREE2RDJBRDE4NzA3 MTJCMzU3NDY2NUNBN0QxMkVGMDhBNjdFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzNEQTZEMkFEMTg3MDcxMkIz NTc0NjY1Q0E3RDEyRUYwOEE2N0VCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U0MkZEMUVFMzMyMTJDMDYzQjRDMDY1RTdCNjM2OThGQTAwMkVDRThF QjdBOUY2NjNDMkM3MkFBMzQ0QzVFOC8wLzMyMzgzMDMxM2EzMTM3M2E2MTM4MzAz MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo AQAXqAAwDQYJKoZIhvcNAQELBQADggEBAKWFz/t+J1BU3cZ95Ih+k/LsPgPTy1HD uKbVo4bfi+MD/uiNbC44THim2ZaMr0u5qme3Cx09FZTmi31QOQbauakSqR6RSCF4 xrT+ybMNr8BlywIyIxPNE42RJX9xha1eiNnaNiF1THBBa0yPwHabvXas1mebATa/ +MtLWWf/RN8HJJsn+ZntnEFLkYb2IrbHWpDxMkz/dnPhIxgTWa5+Jde2ikyvh6iv 8qH3dNtRH8Tma1rwTH1JHrRjm8jBV3cVh0V4S9zhD1QwKABJ1AZryxb4oji9FPRy oQ0QrDQYfAkHIW5+TuMpEaHZg1SHJpPSBtJjD8HimKnBETKLg79Ub6I= -----END CERTIFICATE-----Generated at Tue Jan 13 13:30:28 2026 by rpki-client