This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa File: 323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa (raw, json) Hash identifier: NHiwLVJVRciPefzWW3BAvt0ONIUICwyT0MHUt43oBrk= Subject key identifier: A0:DA:F0:32:6B:0A:5D:4A:10:31:1A:60:B0:C0:09:E7:F0:D0:2C:52 Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Certificate serial: 6A9A9523973EA826A581D2A588DD856DE4BFDDAE Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa Signing time: Fri 19 Dec 2025 14:55:24 +0000 ROA not before: Fri 19 Dec 2025 14:50:24 +0000 ROA not after: Fri 18 Dec 2026 14:55:24 +0000 asID: 269730 IP address blocks: 2803:5160:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 17:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9a:95:23:97:3e:a8:26:a5:81:d2:a5:88:dd:85:6d:e4:bf:dd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73 Validity Not Before: Dec 19 14:50:24 2025 GMT Not After : Dec 18 14:55:24 2026 GMT Subject: CN=A0DAF0326B0A5D4A10311A60B0C009E7F0D02C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:ad:1f:22:66:f0:b8:65:a7:b0:61:c7:b1: b6:21:19:66:65:dd:ed:c3:28:e5:11:55:8c:2e:54: 98:ee:3f:24:f2:1c:91:d2:6f:59:3a:54:9a:22:8d: 9b:c8:8c:f4:29:8e:d7:1d:fb:75:97:71:46:f4:2f: 09:0f:0b:0c:bf:21:ec:d0:89:99:75:78:20:61:8f: 13:80:55:8d:1b:d6:bd:94:d1:48:35:1f:06:a4:77: e2:5a:64:eb:27:99:23:11:ca:c5:03:76:3f:90:0e: 3e:a0:4c:e2:e6:2f:bf:ea:1b:c1:28:4d:e4:2f:65: 17:d4:de:88:c2:5c:73:e1:97:89:4b:b5:76:fe:54: 31:a0:c0:aa:04:8d:5e:25:94:c8:f1:ee:da:c6:58: 5c:e7:e6:db:cc:39:d4:f9:0d:d1:52:3e:f2:da:e1: df:e4:79:40:f8:92:cd:06:6b:7f:71:d7:1c:78:f3: 84:d5:81:83:61:08:99:e4:cb:9a:f5:30:e8:0b:53: 06:ff:6a:d1:ac:10:cb:7c:9c:72:db:38:8b:19:65: 05:b6:29:84:7a:f5:6a:6e:68:fb:f7:69:ef:5d:ca: 5b:dc:fe:af:5e:90:ce:5a:8d:cb:3c:4c:cc:97:1e: 96:a2:57:5b:8b:c9:65:d1:63:87:a4:db:eb:18:a5: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:F0:32:6B:0A:5D:4A:10:31:1A:60:B0:C0:09:E7:F0:D0:2C:52 X509v3 Authority Key Identifier: keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5160:c000::/36 Signature Algorithm: sha256WithRSAEncryption ad:33:8b:02:4f:aa:56:e2:fe:30:68:8e:11:f4:39:e0:96:cb: f4:d5:a4:93:6d:15:05:d9:d6:d6:ad:01:c0:b6:19:8f:bf:76: c4:9e:c7:e0:a4:37:55:3a:76:bb:96:bc:d2:76:da:28:99:a5: c7:37:ac:f4:a0:15:5d:9e:c5:c4:f7:85:6a:a4:69:d3:89:45: 0b:e0:9d:0c:b9:c0:af:ad:8d:5e:b0:ae:5a:df:a6:1b:f0:e4: 96:1b:b6:29:53:fe:3b:30:28:87:8b:e8:48:00:ed:54:82:fe: 89:b4:7c:82:c8:e1:9d:b2:d0:a8:62:97:47:8a:a7:55:5a:48: 36:fd:6a:67:63:bf:9a:09:53:79:f7:7b:53:86:eb:42:49:fa: 33:a3:57:67:00:21:eb:77:f1:dc:ab:eb:48:bb:94:4a:9b:4b: 0c:3e:8a:38:e1:10:7d:53:5b:45:19:dc:39:64:bc:43:0a:57: 4f:b1:ae:d2:da:26:0a:44:15:1f:f0:2d:37:37:c6:90:1b:22: 74:4b:88:a2:d2:a9:29:7f:86:98:31:bc:13:54:56:eb:70:ff: 7a:e9:4c:32:53:dd:2f:c3:6b:5b:c0:57:29:2c:1e:09:3e:e9: 5e:2a:ad:9d:16:db:75:12:8a:9b:1d:e1:78:8a:02:34:3a:71: d3:e2:2b:55 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUapqVI5c+qCalgdKliN2FbeS/3a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5MjlCQjU5QzBDNzIzQzk3MjQ1QkYwRENGODY2Nzcy RjQ3OUI3MzAeFw0yNTEyMTkxNDUwMjRaFw0yNjEyMTgxNDU1MjRaMDMxMTAvBgNV BAMTKEEwREFGMDMyNkIwQTVENEExMDMxMUE2MEIwQzAwOUU3RjBEMDJDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqK0fImbwuGWnsGHHsbYhGWZl 3e3DKOURVYwuVJjuPyTyHJHSb1k6VJoijZvIjPQpjtcd+3WXcUb0LwkPCwy/IezQ iZl1eCBhjxOAVY0b1r2U0Ug1Hwakd+JaZOsnmSMRysUDdj+QDj6gTOLmL7/qG8Eo TeQvZRfU3ojCXHPhl4lLtXb+VDGgwKoEjV4llMjx7trGWFzn5tvMOdT5DdFSPvLa 4d/keUD4ks0Ga39x1xx484TVgYNhCJnky5r1MOgLUwb/atGsEMt8nHLbOIsZZQW2 KYR69WpuaPv3ae9dylvc/q9ekM5ajcs8TMyXHpaiV1uLyWXRY4ek2+sYpV29AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUoNrwMmsKXUoQMRpgsMAJ5/DQLFIwHwYDVR0j BBgwFoAU5ZKbtZwMcjyXJFvw3Phmdy9Hm3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMEFBMEE2NkMxQzAyRDJGMDY2N0JERjZEQUZERDY3QzJB ODEzRkVGQkVENkQwRjQ2Mzk1MUEwNDI4ODQwNzdDLzAvRTU5MjlCQjU5QzBDNzIz Qzk3MjQ1QkYwRENGODY2NzcyRjQ3OUI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTkyOUJCNTlDMEM3MjNDOTcy NDVCRjBEQ0Y4NjY3NzJGNDc5QjczLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDBBQTBBNjZDMUMwMkQyRjA2NjdCREY2REFGREQ2N0MyQTgxM0ZFRkJF RDZEMEY0NjM5NTFBMDQyODg0MDc3Qy8wLzMyMzgzMDMzM2EzNTMxMzYzMDNhNjMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1FgwDANBgkqhkiG9w0BAQsFAAOCAQEArTOLAk+qVuL+MGiOEfQ54JbL 9NWkk20VBdnW1q0BwLYZj792xJ7H4KQ3VTp2u5a80nbaKJmlxzes9KAVXZ7FxPeF aqRp04lFC+CdDLnAr62NXrCuWt+mG/Dklhu2KVP+OzAoh4voSADtVIL+ibR8gsjh nbLQqGKXR4qnVVpINv1qZ2O/mglTefd7U4brQkn6M6NXZwAh63fx3KvrSLuUSptL DD6KOOEQfVNbRRncOWS8QwpXT7Gu0tomCkQVH/AtNzfGkBsidEuIotKpKX+GmDG8 E1RW63D/eulMMlPdL8NrW8BXKSweCT7pXiqtnRbbdRKKmx3heIoCNDpx0+IrVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:11 2025 by rpki-client