This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323230303a3a2f34302d3430203d3e20323639373330.roa File: 323830333a353136303a323230303a3a2f34302d3430203d3e20323639373330.roa (raw, json) Hash identifier: GVurfBSRzwSGIADFo/A3ezgQtfOiZ2nQU9uAqZdAqiY= Subject key identifier: 1A:93:FD:4E:3C:9A:02:A4:BF:53:78:33:71:D2:95:AF:01:8A:00:5D Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Certificate serial: 1B8C438B822C5D0794F6FCC0915E8B8E56CB9A09 Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323230303a3a2f34302d3430203d3e20323639373330.roa Signing time: Fri 19 Dec 2025 15:55:34 +0000 ROA not before: Fri 19 Dec 2025 15:50:34 +0000 ROA not after: Fri 18 Dec 2026 15:55:34 +0000 asID: 269730 IP address blocks: 2803:5160:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 17:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8c:43:8b:82:2c:5d:07:94:f6:fc:c0:91:5e:8b:8e:56:cb:9a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Validity Not Before: Dec 19 15:50:34 2025 GMT Not After : Dec 18 15:55:34 2026 GMT Subject: CN=1A93FD4E3C9A02A4BF53783371D295AF018A005D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:a3:56:91:0d:ee:ba:ad:f5:a1:5d:85:29: d5:9a:6d:03:d6:ca:22:85:85:6e:ba:29:c8:f1:e4: 97:cc:f2:bd:87:e2:ce:00:1e:4e:eb:f5:7a:19:1a: 5d:93:21:cb:32:3b:8c:96:d5:dd:ef:da:1d:8a:29: ff:27:97:11:21:17:e8:3f:8d:80:21:a3:e0:d4:16: 16:5b:80:21:dc:07:b6:cc:42:c8:6c:0a:b9:39:16: f5:38:af:c4:d7:5c:e9:5f:0b:64:bf:98:f3:e0:ad: 8e:22:04:b9:7e:2c:f7:b6:0b:78:ec:a0:f3:50:77: c7:2b:e0:52:27:81:c2:e5:e9:01:07:79:c6:90:1a: 1a:7a:f8:c1:98:8d:0f:5b:d1:58:76:d0:59:8b:67: 76:94:31:6d:e1:3f:91:d6:9e:45:95:b2:26:ad:52: fb:93:26:81:a8:cc:39:bd:9a:ba:ef:4f:47:d3:38: 8a:a5:92:d7:bb:5d:d5:5b:7b:5f:17:ff:15:5d:25: 8d:71:b9:30:f0:ba:2e:b6:b9:84:16:b9:16:36:cb: 80:9f:82:08:c5:3b:b7:de:a2:16:00:3a:0a:1b:e2: 80:ce:5b:65:34:f4:a4:f1:26:da:1d:50:d5:9a:e2: 34:3c:f1:84:19:bb:18:81:16:99:3a:72:78:dd:99: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:93:FD:4E:3C:9A:02:A4:BF:53:78:33:71:D2:95:AF:01:8A:00:5D X509v3 Authority Key Identifier: keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323230303a3a2f34302d3430203d3e20323639373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5160:2200::/40 Signature Algorithm: sha256WithRSAEncryption 36:e2:4d:b2:e7:7b:b9:37:fb:83:17:4f:f3:69:11:29:f3:39: fd:79:af:9f:51:9a:9d:09:6f:33:d7:23:bf:3e:ac:59:e7:d9: 50:6a:22:62:e1:d3:29:7a:ad:87:13:7d:7b:f7:7a:55:3a:21: 8e:8d:56:c3:6a:11:54:f6:f4:ca:b2:8d:1a:08:0a:73:06:f4: 9b:73:45:d1:58:bb:78:33:c6:b1:f1:d8:6d:d9:22:36:62:87: f4:7f:12:c2:7c:ae:a7:3c:d5:22:b3:cc:19:5d:44:34:5f:73: b9:56:5e:8d:58:b1:5f:59:f4:93:ab:e6:f3:2d:02:77:dc:3c: c8:b6:14:96:c1:9f:03:f3:57:4b:3c:2e:7f:0a:dd:1d:0d:44: 92:fa:8f:48:ff:1e:00:3b:74:9d:15:51:0c:70:3e:0a:57:64: ad:46:1b:d9:4a:d7:c7:20:f7:bf:05:42:08:3b:3e:31:f1:11: 1a:b2:22:8f:02:fb:40:f5:ff:92:31:e2:ce:8a:39:ee:e6:25: 55:b7:c8:23:12:6c:0a:91:8f:c3:da:00:96:6e:f6:d7:fe:56: d4:78:c1:5f:b0:bd:b1:f1:16:0c:a4:70:0f:f2:45:43:bc:7e: fb:47:ff:a0:28:5d:1a:70:17:24:6a:12:83:ed:53:fc:8b:88: 43:17:4e:a6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUG4xDi4IsXQeU9vzAkV6LjlbLmgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy RjQ3OUI3MzAeFw0yNTEyMTkxNTUwMzRaFw0yNjEyMTgxNTU1MzRaMDMxMTAvBgNV BAMTKDFBOTNGRDRFM0M5QTAyQTRCRjUzNzgzMzcxRDI5NUFGMDE4QTAwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6w6NWkQ3uuq31oV2FKdWabQPW yiKFhW66Kcjx5JfM8r2H4s4AHk7r9XoZGl2TIcsyO4yW1d3v2h2KKf8nlxEhF+g/ jYAho+DUFhZbgCHcB7bMQshsCrk5FvU4r8TXXOlfC2S/mPPgrY4iBLl+LPe2C3js oPNQd8cr4FIngcLl6QEHecaQGhp6+MGYjQ9b0Vh20FmLZ3aUMW3hP5HWnkWVsiat UvuTJoGozDm9mrrvT0fTOIqlkte7XdVbe18X/xVdJY1xuTDwui62uYQWuRY2y4Cf ggjFO7feohYAOgob4oDOW2U09KTxJtodUNWa4jQ88YQZuxiBFpk6cnjdmboxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGpP9TjyaAqS/U3gzcdKVrwGKAF0wHwYDVR0j BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhMzIz MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzkzNzMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA1FgIjANBgkqhkiG9w0BAQsFAAOCAQEANuJNsud7uTf7gxdP82kRKfM5 /Xmvn1GanQlvM9cjvz6sWefZUGoiYuHTKXqthxN9e/d6VTohjo1Ww2oRVPb0yrKN GggKcwb0m3NF0Vi7eDPGsfHYbdkiNmKH9H8SwnyupzzVIrPMGV1ENF9zuVZejVix X1n0k6vm8y0Cd9w8yLYUlsGfA/NXSzwufwrdHQ1EkvqPSP8eADt0nRVRDHA+Cldk rUYb2UrXxyD3vwVCCDs+MfERGrIijwL7QPX/kjHizoo57uYlVbfIIxJsCpGPw9oA lm721/5W1HjBX7C9sfEWDKRwD/JFQ7x++0f/oChdGnAXJGoSg+1T/IuIQxdOpg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:03 2025 by rpki-client