This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa File: 323830303a3164303a3a2f33322d3332203d3e203134313837.roa (raw, json) Hash identifier: BKGketWeyiSCRwy65PItkDWrISW69YTmuT5WyGfyd58= Subject key identifier: 64:65:24:C8:CC:D0:85:47:83:62:1D:62:03:BE:1E:2F:8D:A9:11:91 Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1 Certificate serial: 041A0345C28245A01CE59A7735652AC7F5996A8F Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa Signing time: Tue 06 Jan 2026 18:58:45 +0000 ROA not before: Tue 06 Jan 2026 18:53:45 +0000 ROA not after: Tue 05 Jan 2027 18:58:45 +0000 asID: 14187 IP address blocks: 2800:1d0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 05:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1a:03:45:c2:82:45:a0:1c:e5:9a:77:35:65:2a:c7:f5:99:6a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1 Validity Not Before: Jan 6 18:53:45 2026 GMT Not After : Jan 5 18:58:45 2027 GMT Subject: CN=646524C8CCD0854783621D6203BE1E2F8DA91191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:58:71:42:71:4e:e6:55:06:b0:bf:a7:9d: 0e:6c:07:45:15:71:42:a4:bd:93:8d:38:d3:57:db: 0d:41:1c:89:29:43:ec:4c:58:b1:bf:0a:6b:46:c5: 2a:66:18:cf:6b:49:6d:69:8d:ed:18:30:5a:d1:a9: 3d:51:9e:e5:1b:7d:8f:42:de:c6:37:66:e5:cd:43: 8b:0a:97:a1:55:50:c4:64:a6:35:37:cc:be:96:b3: 7f:72:89:9f:6f:c4:05:67:12:c8:ef:50:1e:0c:1b: a2:4b:f2:72:22:60:82:8e:ea:61:cf:cf:31:e7:bf: 90:d2:33:b9:f1:76:9f:cd:2f:5b:65:3c:3c:f5:26: ae:7f:95:49:4f:2c:db:6d:6f:a2:46:63:5c:21:cc: c3:71:ce:f4:24:f5:b8:9a:bb:48:21:df:81:00:1d: 3d:ce:f6:09:63:af:fc:a4:a8:ca:5e:59:b8:3e:57: 3a:06:76:4d:2c:f6:2c:fe:e0:e9:93:9a:41:1f:c5: e3:32:29:58:b1:66:0f:a7:e6:62:00:bd:b8:7f:61: cb:bc:e3:70:fc:e7:ee:4c:e7:a5:2c:c8:9a:7a:34: ef:62:76:c6:69:fe:fe:f9:52:61:40:4d:ac:ee:54: 9c:57:c6:f3:c2:29:64:31:e8:30:a2:39:29:33:5b: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:24:C8:CC:D0:85:47:83:62:1D:62:03:BE:1E:2F:8D:A9:11:91 X509v3 Authority Key Identifier: keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:1d0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c8:5d:92:53:d7:a0:4a:4b:ee:58:12:72:3c:bc:a6:14:e7: 13:74:b1:d9:72:40:2d:f8:e1:d8:e1:af:fd:68:e2:11:79:3b: 4a:ca:9b:70:59:d5:08:1e:a0:13:d5:b3:0f:1c:3b:ed:42:a2: 04:69:fa:34:0f:ad:5a:fb:03:8e:c6:fa:e3:c3:4f:d1:e4:25: 10:2d:e6:b3:26:c0:4a:f2:8d:6e:71:00:92:0c:78:f8:c9:8d: 37:95:4b:d0:67:07:25:6d:a8:17:a3:3e:5e:4e:fb:86:3a:83: 5f:fc:ad:70:31:b5:70:2f:8c:55:4f:01:00:47:74:3d:c8:3b: c5:12:6b:21:b1:0a:50:e5:e4:c5:18:22:ce:91:8c:1f:a8:ec: 09:72:ba:54:42:05:25:f7:b8:38:00:e2:1c:fc:70:cd:1a:5d: 7a:56:0f:7f:59:12:3d:56:96:12:74:fa:8e:60:56:90:61:c6: 76:53:16:63:0b:cd:bc:4b:ec:aa:09:a7:f1:0b:a1:ae:c9:8b: 11:7e:04:ad:3f:d9:25:6e:64:4d:ff:b3:c1:46:c4:64:26:18: f9:cf:bb:93:08:fb:42:1f:5d:03:92:ce:0d:e4:86:c1:ac:b2: 07:c3:26:be:63:3e:94:a1:25:14:78:e9:3f:0d:d0:1d:02:03: 13:7f:9e:9a -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUBBoDRcKCRaAc5Zp3NWUqx/WZao8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZDRDkzODI4QTAx NjYyM0VGMTAeFw0yNjAxMDYxODUzNDVaFw0yNzAxMDUxODU4NDVaMDMxMTAvBgNV BAMTKDY0NjUyNEM4Q0NEMDg1NDc4MzYyMUQ2MjAzQkUxRTJGOERBOTExOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4m1hxQnFO5lUGsL+nnQ5sB0UV cUKkvZONONNX2w1BHIkpQ+xMWLG/CmtGxSpmGM9rSW1pje0YMFrRqT1RnuUbfY9C 3sY3ZuXNQ4sKl6FVUMRkpjU3zL6Ws39yiZ9vxAVnEsjvUB4MG6JL8nIiYIKO6mHP zzHnv5DSM7nxdp/NL1tlPDz1Jq5/lUlPLNttb6JGY1whzMNxzvQk9biau0gh34EA HT3O9gljr/ykqMpeWbg+VzoGdk0s9iz+4OmTmkEfxeMyKVixZg+n5mIAvbh/Ycu8 43D85+5M56UsyJp6NO9idsZp/v75UmFATazuVJxXxvPCKWQx6DCiOSkzW463AgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUZGUkyMzQhUeDYh1iA74eL42pEZEwHwYDVR0j BBgwFoAUzv40IQdkvNQstsD82TgooBZiPvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JE MDU0MzU2MEJGRTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNE NDJDQjZDMEZDRDkzODI4QTAxNjYyM0VGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZFMzQyMTA3NjRCQ0Q0MkNC NkMwRkNEOTM4MjhBMDE2NjIzRUYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVFRUI1MTE2MDdCRDA1NDM1NjBC RkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzMyMzgzMDMwM2EzMTY0MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMTM0MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAB0DANBgkq hkiG9w0BAQsFAAOCAQEAi8hdklPXoEpL7lgScjy8phTnE3Sx2XJALfjh2OGv/Wji EXk7SsqbcFnVCB6gE9WzDxw77UKiBGn6NA+tWvsDjsb648NP0eQlEC3msybASvKN bnEAkgx4+MmNN5VL0GcHJW2oF6M+Xk77hjqDX/ytcDG1cC+MVU8BAEd0Pcg7xRJr IbEKUOXkxRgizpGMH6jsCXK6VEIFJfe4OADiHPxwzRpdelYPf1kSPVaWEnT6jmBW kGHGdlMWYwvNvEvsqgmn8QuhrsmLEX4ErT/ZJW5kTf+zwUbEZCYY+c+7kwj7Qh9d A5LODeSGwayyB8MmvmM+lKElFHjpPw3QHQIDE3+emg== -----END CERTIFICATE-----Generated at Tue Jan 13 03:42:37 2026 by rpki-client