This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a313030303a3a2f33362d3336203d3e20323639373330.roa File: 323830333a353136303a313030303a3a2f33362d3336203d3e20323639373330.roa (raw, json) Hash identifier: RWAKu5xSezmGiCHStRnUPik7vxBfimNpKjlWLXd+V0k= Subject key identifier: 68:83:23:11:DA:15:11:92:ED:48:51:1F:B4:43:41:FE:65:78:3A:61 Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Certificate serial: 0F919F359307DD9DCE35701FFD0349CBEEF8C276 Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a313030303a3a2f33362d3336203d3e20323639373330.roa Signing time: Fri 19 Dec 2025 14:55:28 +0000 ROA not before: Fri 19 Dec 2025 14:50:28 +0000 ROA not after: Fri 18 Dec 2026 14:55:28 +0000 asID: 269730 IP address blocks: 2803:5160:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 17:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:91:9f:35:93:07:dd:9d:ce:35:70:1f:fd:03:49:cb:ee:f8:c2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Validity Not Before: Dec 19 14:50:28 2025 GMT Not After : Dec 18 14:55:28 2026 GMT Subject: CN=68832311DA151192ED48511FB44341FE65783A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e8:9f:58:ce:fd:53:f6:1c:9a:7f:89:52:bc: ee:8c:ee:e6:94:a2:45:1c:49:15:e7:fb:aa:88:e7: 3e:4b:8d:f4:3c:a0:0e:c8:5a:ae:95:6e:ec:ce:36: c1:8c:1d:f5:3e:94:3f:82:05:31:b6:c3:18:6b:a1: 71:29:04:03:f4:fa:87:88:84:36:31:8d:09:37:0d: 15:c9:98:d2:27:e0:c6:4f:80:ac:73:21:8b:33:d5: a5:09:ac:70:31:bd:9b:22:ee:0d:77:b2:04:d2:25: b2:b4:de:34:b7:93:16:e1:b2:99:2e:91:5a:fc:6e: 73:73:82:e0:70:13:94:62:f2:a4:1a:bd:64:6e:ba: ea:b6:1b:70:b8:3d:33:d8:22:81:3f:c1:0c:99:80: f0:bf:27:8c:2c:f5:e5:89:b0:04:69:f9:e7:12:c8: 60:de:2d:71:f7:7d:46:15:bb:b0:d0:53:1b:b6:4c: 39:b6:64:3e:05:6a:ce:d4:7e:4a:e4:3f:84:91:a4: 64:f3:9a:7f:05:61:48:98:2d:bd:2d:f0:a3:63:f2: 9a:19:df:55:c6:14:68:b8:f5:59:a7:69:a9:e5:a5: a0:a4:a1:fb:85:ae:68:50:58:ce:38:78:b9:2f:da: 3e:e3:fb:de:97:87:2d:1a:7c:59:7c:b0:e1:6e:f5: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:83:23:11:DA:15:11:92:ED:48:51:1F:B4:43:41:FE:65:78:3A:61 X509v3 Authority Key Identifier: keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a313030303a3a2f33362d3336203d3e20323639373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5160:1000::/36 Signature Algorithm: sha256WithRSAEncryption 71:b3:4a:10:d8:02:d5:e5:f8:95:24:e3:68:ce:55:23:85:a1: 05:d6:c2:aa:9b:8a:93:87:49:a4:3c:5b:a4:91:59:a8:85:78: 39:9f:36:28:fa:f0:77:c1:a4:16:ac:4a:bb:0b:9a:ad:04:50: ac:75:3a:d1:1d:4c:e1:35:da:97:39:fa:26:dd:6d:e6:57:e5: db:63:8f:d7:bd:a5:50:44:25:44:47:55:28:cc:56:c7:b9:16: d2:b4:16:63:a6:40:75:6e:2d:9f:80:27:4e:6e:59:54:18:48: 9a:db:e5:ca:40:0a:91:71:56:e2:6a:73:5e:56:9f:fc:bf:f2: 52:08:2a:d2:e1:45:cb:1a:43:49:c8:06:83:83:10:55:82:83: 73:9b:c7:30:de:28:10:8a:e6:90:60:39:99:e0:38:3e:2e:68: ac:96:5a:ce:33:21:c4:05:a6:03:e5:99:67:f0:48:ac:93:88: 26:15:72:24:aa:76:e4:2c:5b:78:29:83:75:02:3c:a3:25:b9: 85:b3:bb:59:99:61:07:d0:6b:a1:fd:e1:93:b1:61:2a:fa:0f: 2a:3a:6d:8a:90:af:46:67:85:fd:76:23:17:9a:16:b4:bd:68: 5c:d9:75:67:0b:25:92:02:72:c7:b6:ca:ab:57:6b:a7:09:54: 1c:08:6d:9d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUD5GfNZMH3Z3ONXAf/QNJy+74wnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy RjQ3OUI3MzAeFw0yNTEyMTkxNDUwMjhaFw0yNjEyMTgxNDU1MjhaMDMxMTAvBgNV BAMTKDY4ODMyMzExREExNTExOTJFRDQ4NTExRkI0NDM0MUZFNjU3ODNBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD16J9Yzv1T9hyaf4lSvO6M7uaU okUcSRXn+6qI5z5LjfQ8oA7IWq6VbuzONsGMHfU+lD+CBTG2wxhroXEpBAP0+oeI hDYxjQk3DRXJmNIn4MZPgKxzIYsz1aUJrHAxvZsi7g13sgTSJbK03jS3kxbhspku kVr8bnNzguBwE5Ri8qQavWRuuuq2G3C4PTPYIoE/wQyZgPC/J4ws9eWJsARp+ecS yGDeLXH3fUYVu7DQUxu2TDm2ZD4Fas7UfkrkP4SRpGTzmn8FYUiYLb0t8KNj8poZ 31XGFGi49VmnaanlpaCkofuFrmhQWM44eLkv2j7j+96Xhy0afFl8sOFu9ThRAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUaIMjEdoVEZLtSFEftENB/mV4OmEwHwYDVR0j BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1FgEDANBgkqhkiG9w0BAQsFAAOCAQEAcbNKENgC1eX4lSTjaM5VI4Wh BdbCqpuKk4dJpDxbpJFZqIV4OZ82KPrwd8GkFqxKuwuarQRQrHU60R1M4TXalzn6 Jt1t5lfl22OP172lUEQlREdVKMxWx7kW0rQWY6ZAdW4tn4AnTm5ZVBhImtvlykAK kXFW4mpzXlaf/L/yUggq0uFFyxpDScgGg4MQVYKDc5vHMN4oEIrmkGA5meA4Pi5o rJZazjMhxAWmA+WZZ/BIrJOIJhVyJKp25CxbeCmDdQI8oyW5hbO7WZlhB9Brof3h k7FhKvoPKjptipCvRmeF/XYjF5oWtL1oXNl1ZwslkgJyx7bKq1drpwlUHAhtnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:09 2025 by rpki-client