This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa File: 323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa (raw, json) Hash identifier: YPZkSoIphGxFz+9v3NlaeWquHCDdhnoCsSBrJd+MZas= Subject key identifier: 3D:9E:CC:4A:C7:91:A7:CE:B1:4C:90:13:1C:AC:23:3C:09:8C:42:D9 Certificate issuer: /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F Certificate serial: 6875BE716DA5322CF7708B3B63E888E60A6A22E6 Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa Signing time: Tue 06 Jan 2026 19:28:37 +0000 ROA not before: Tue 06 Jan 2026 19:23:37 +0000 ROA not after: Tue 05 Jan 2027 19:28:37 +0000 asID: 270052 IP address blocks: 2803:ede0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:75:be:71:6d:a5:32:2c:f7:70:8b:3b:63:e8:88:e6:0a:6a:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F Validity Not Before: Jan 6 19:23:37 2026 GMT Not After : Jan 5 19:28:37 2027 GMT Subject: CN=3D9ECC4AC791A7CEB14C90131CAC233C098C42D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:39:6f:e0:ef:ab:cb:bd:22:93:b9:cd:aa: 48:7f:5c:44:51:97:93:c9:4f:77:11:f2:d0:0e:ab: 53:3b:71:b1:1e:a0:c5:33:d8:19:7a:40:3d:80:c1: b6:c2:34:3f:ed:64:37:c4:57:93:17:8a:4b:4f:0c: 35:e7:4f:ed:77:61:d5:a1:a1:b3:9c:f4:06:f2:39: c9:f5:23:73:1f:c4:92:ed:74:54:7d:83:99:96:00: e9:12:9f:9e:30:7a:4f:9a:f5:14:e6:81:07:bb:6e: 73:4f:ea:67:7d:c9:06:f5:19:c4:55:53:65:83:0d: 3d:db:a8:45:49:46:81:da:37:29:58:f9:86:1b:e3: 31:d9:4d:46:fd:0a:7d:fd:25:a3:b5:6b:62:5a:69: 70:f0:5f:bf:d9:1b:bd:c7:a7:1e:c2:69:65:db:16: a1:e6:7a:a8:a5:b3:13:e5:d2:6e:fe:41:10:58:d1: 6a:8e:f4:5b:94:ee:15:72:1d:4a:b7:b9:ca:f8:ad: 0d:ff:a3:a3:91:cb:2b:f9:29:7e:00:c5:85:b1:83: 50:f8:4e:da:07:1c:9d:a6:bd:58:e4:32:21:70:65: ed:90:3e:dc:8b:40:53:62:97:dc:40:47:88:80:1e: 28:ac:89:29:cf:3f:b0:89:11:e5:4a:79:fc:93:f2: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:CC:4A:C7:91:A7:CE:B1:4C:90:13:1C:AC:23:3C:09:8C:42:D9 X509v3 Authority Key Identifier: keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ede0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 63:41:8b:b3:d5:ea:49:b4:2a:7d:87:6a:0e:1c:fc:3f:ec:81: 61:0e:10:e0:29:6e:3a:32:39:24:6f:b2:4a:2e:93:7e:c8:61: 1d:51:96:a7:df:82:be:ef:d8:46:69:3d:66:b9:01:ef:2f:3b: 4c:e0:bb:e1:a6:d3:15:84:a9:cc:50:c0:84:da:57:ef:d3:f8: ab:33:f0:f1:07:84:d0:79:85:68:d9:21:5e:d8:fc:af:03:0f: ed:e7:4a:77:fb:12:21:93:9c:b1:5f:95:05:fc:a8:05:b0:87: 70:76:c9:0c:f8:67:d7:61:79:8a:c2:26:ad:e2:8b:61:c2:02: 15:97:5c:8e:e4:02:35:db:ce:75:38:0f:58:22:db:4d:0d:04: e2:32:21:74:41:65:86:4c:d5:f3:d9:1d:86:c9:8d:b8:dc:9d: e4:1c:c5:a3:d3:0e:6b:13:52:56:3c:05:fa:d3:7f:65:7f:0e: 60:3f:e9:46:b6:a3:0a:47:8b:38:33:98:22:69:1e:e6:b9:37: 05:e5:fb:bf:9b:66:86:ba:68:e8:e1:9b:bc:85:f5:41:4c:90: c3:cc:ba:7e:7b:73:82:1d:59:8f:8b:e3:68:ac:f6:80:07:0f: 21:45:f2:ad:33:dd:d2:1a:0b:9e:5c:11:f0:ec:81:e3:62:0b: 1f:16:bb:b5 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUaHW+cW2lMiz3cIs7Y+iI5gpqIuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRDNFQjIzRTkxMEM0MEMzNkI4NDg5M0JBMEU1RDcy NjMxMjQwRjAeFw0yNjAxMDYxOTIzMzdaFw0yNzAxMDUxOTI4MzdaMDMxMTAvBgNV BAMTKDNEOUVDQzRBQzc5MUE3Q0VCMTRDOTAxMzFDQUMyMzNDMDk4QzQyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwjlv4O+ry70ik7nNqkh/XERR l5PJT3cR8tAOq1M7cbEeoMUz2Bl6QD2AwbbCND/tZDfEV5MXiktPDDXnT+13YdWh obOc9AbyOcn1I3MfxJLtdFR9g5mWAOkSn54wek+a9RTmgQe7bnNP6md9yQb1GcRV U2WDDT3bqEVJRoHaNylY+YYb4zHZTUb9Cn39JaO1a2JaaXDwX7/ZG73Hpx7CaWXb FqHmeqilsxPl0m7+QRBY0WqO9FuU7hVyHUq3ucr4rQ3/o6ORyyv5KX4AxYWxg1D4 TtoHHJ2mvVjkMiFwZe2QPtyLQFNil9xAR4iAHiisiSnPP7CJEeVKefyT8m5PAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUPZ7MSseRp86xTJATHKwjPAmMQtkwHwYDVR0j BBgwFoAUaf0+sj6RDEDDa4SJO6Dl1yYxJA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNjRGOThFOUZGMzU3MTMxMEEyMDIxNjlEOEQ0NkYwRkZF NDQ4NkZDNEI2MzY0QjYyNTA0NEQ4NkNCRTNDRDkxLzAvNjlGRDNFQjIzRTkxMEM0 MEMzNkI4NDg5M0JBMEU1RDcyNjMxMjQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUZEM0VCMjNFOTEwQzQwQzM2 Qjg0ODkzQkEwRTVENzI2MzEyNDBGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTY0Rjk4RTlGRjM1NzEzMTBBMjAyMTY5RDhENDZGMEZGRTQ0ODZGQzRC NjM2NEI2MjUwNDREODZDQkUzQ0Q5MS8wLzMyMzgzMDMzM2E2NTY0NjUzMDNhMzgz MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzAzMDM1MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgcoA+3ggDANBgkqhkiG9w0BAQsFAAOCAQEAY0GLs9XqSbQqfYdqDhz8P+yB YQ4Q4CluOjI5JG+ySi6TfshhHVGWp9+Cvu/YRmk9ZrkB7y87TOC74abTFYSpzFDA hNpX79P4qzPw8QeE0HmFaNkhXtj8rwMP7edKd/sSIZOcsV+VBfyoBbCHcHbJDPhn 12F5isImreKLYcICFZdcjuQCNdvOdTgPWCLbTQ0E4jIhdEFlhkzV89kdhsmNuNyd 5BzFo9MOaxNSVjwF+tN/ZX8OYD/pRrajCkeLODOYImke5rk3BeX7v5tmhrpo6OGb vIX1QUyQw8y6fntzgh1Zj4vjaKz2gAcPIUXyrTPd0hoLnlwR8OyB42ILHxa7tQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:22:57 2026 by rpki-client