This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa File: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (raw, json) Hash identifier: CervDVhP5/scP8gmCQLxwxjVQyaWybpcUi8DacBpN1I= Subject key identifier: BE:8E:DE:6E:50:12:E2:B3:35:93:ED:A2:3D:8F:62:51:AE:60:A1:8F Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 09A2E0B014458604B7ECFFE0551CC039F13DBED6 Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa Signing time: Tue 06 Jan 2026 19:36:27 +0000 ROA not before: Tue 06 Jan 2026 19:31:27 +0000 ROA not after: Tue 05 Jan 2027 19:36:27 +0000 asID: 3816 IP address blocks: 2801:122::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a2:e0:b0:14:45:86:04:b7:ec:ff:e0:55:1c:c0:39:f1:3d:be:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Jan 6 19:31:27 2026 GMT Not After : Jan 5 19:36:27 2027 GMT Subject: CN=BE8EDE6E5012E2B33593EDA23D8F6251AE60A18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:6b:3d:25:50:80:0f:78:72:a1:6b:f5:15: 74:1d:4b:82:06:ab:f5:b6:d9:a5:99:a4:66:fd:ac: 98:5f:76:de:6e:49:c0:2a:a8:d0:df:05:63:e6:76: 32:09:9d:da:4c:5e:91:1b:ff:41:2e:30:eb:c4:de: 1f:66:e9:f5:12:88:61:38:12:b0:52:e4:67:98:a6: 59:09:1c:f0:d2:62:25:30:9b:e7:35:94:29:e8:45: 13:c1:43:f5:c1:ea:24:75:12:3b:27:3b:97:54:b3: 03:3b:a9:82:47:81:b1:31:74:1d:36:5a:6c:96:82: 4d:63:60:d5:ed:ba:3a:93:96:04:ca:9a:98:69:6e: 0b:09:d0:2b:2d:82:be:1f:f4:db:fa:ec:69:61:77: a1:2d:24:1e:b2:4e:8a:fb:f9:25:97:22:cc:e9:a5: 87:34:44:47:67:55:72:06:1d:e5:a3:e4:4c:72:06: fa:2c:d9:74:5d:2d:4b:5f:f5:bf:73:0b:d3:1d:a3: 7e:ad:b8:bb:6b:19:50:01:56:9e:0d:b0:3a:be:9c: c4:12:5d:26:3e:25:95:fc:dc:b4:25:c4:48:43:06: 89:e6:68:6c:09:76:31:a2:6b:15:5b:a6:d0:05:ce: c3:a1:da:b6:dc:84:c0:20:ed:48:f8:9d:bb:0e:17: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:DE:6E:50:12:E2:B3:35:93:ED:A2:3D:8F:62:51:AE:60:A1:8F X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:122::/40 Signature Algorithm: sha256WithRSAEncryption a7:aa:ff:8f:4d:7b:5c:f8:a2:1c:83:96:79:f5:b4:84:d3:23: 25:f6:d0:cb:c0:3c:dd:58:38:24:fe:db:04:46:24:c5:c5:ab: 6e:38:f4:83:94:01:0f:c6:54:63:04:0b:25:c2:b4:47:cd:42: 4e:c6:d4:93:c6:5a:25:bd:0e:cf:8f:86:ce:8c:57:42:21:be: d7:8a:fd:d9:e6:d4:14:27:f4:27:52:3b:ef:10:a5:c7:5a:23: 17:ff:74:fa:84:b3:74:a0:19:8b:ff:2b:ba:39:1a:a8:78:19: ed:71:2e:f6:72:9d:61:cd:d8:dd:3b:bf:0c:89:c4:76:98:47: d0:9e:93:b6:bd:32:08:2e:9a:26:8f:91:be:cf:4b:06:b8:64: ea:48:75:58:00:7c:a2:c1:86:ab:6f:d9:cb:38:71:12:f5:a4: 4c:4d:75:74:24:87:da:6d:9b:d7:73:9f:ea:de:ad:18:b9:59: 59:92:65:1b:bc:22:58:40:5d:20:3e:d2:e6:a4:6d:3b:af:7c: 05:19:e1:32:b4:7d:57:6e:e8:22:27:a2:97:af:4f:1b:f6:53: 54:75:24:52:9b:df:97:58:78:c9:a3:a4:e3:f8:7d:dc:c6:61: 02:3c:45:09:1c:41:91:e6:e7:21:74:eb:4b:7c:15:49:c7:d5: 93:6b:39:18 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUCaLgsBRFhgS37P/gVRzAOfE9vtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNjAxMDYxOTMxMjdaFw0yNzAxMDUxOTM2MjdaMDMxMTAvBgNV BAMTKEJFOEVERTZFNTAxMkUyQjMzNTkzRURBMjNEOEY2MjUxQUU2MEExOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZGs9JVCAD3hyoWv1FXQdS4IG q/W22aWZpGb9rJhfdt5uScAqqNDfBWPmdjIJndpMXpEb/0EuMOvE3h9m6fUSiGE4 ErBS5GeYplkJHPDSYiUwm+c1lCnoRRPBQ/XB6iR1EjsnO5dUswM7qYJHgbExdB02 WmyWgk1jYNXtujqTlgTKmphpbgsJ0Cstgr4f9Nv67Glhd6EtJB6yTor7+SWXIszp pYc0REdnVXIGHeWj5ExyBvos2XRdLUtf9b9zC9Mdo36tuLtrGVABVp4NsDq+nMQS XSY+JZX83LQlxEhDBonmaGwJdjGiaxVbptAFzsOh2rbchMAg7Uj4nbsOF2mFAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUvo7eblAS4rM1k+2iPY9iUa5goY8wHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wLzMyMzgzMDMxM2EzMTMyMzIzYTNhMmYz NDMwMmQzNDMwMjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBASIAMA0GCSqG SIb3DQEBCwUAA4IBAQCnqv+PTXtc+KIcg5Z59bSE0yMl9tDLwDzdWDgk/tsERiTF xatuOPSDlAEPxlRjBAslwrRHzUJOxtSTxlolvQ7Pj4bOjFdCIb7Xiv3Z5tQUJ/Qn UjvvEKXHWiMX/3T6hLN0oBmL/yu6ORqoeBntcS72cp1hzdjdO78MicR2mEfQnpO2 vTIILpomj5G+z0sGuGTqSHVYAHyiwYarb9nLOHES9aRMTXV0JIfabZvXc5/q3q0Y uVlZkmUbvCJYQF0gPtLmpG07r3wFGeEytH1XbugiJ6KXr08b9lNUdSRSm9+XWHjJ o6Tj+H3cxmECPEUJHEGR5uchdOtLfBVJx9WTazkY -----END CERTIFICATE-----Generated at Mon Jan 12 00:01:09 2026 by rpki-client