This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa File: 323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa (raw, json) Hash identifier: pYheg2BWg5pOOjC2dholWCmcjedhZuGoiJc52nlGZhU= Subject key identifier: 71:CB:C5:4C:C6:B3:24:4E:89:5D:4C:C9:37:DB:D3:74:3C:76:CE:F3 Certificate issuer: /CN=E45215C1ABF0099BEFF5D5807A415849759B9467 Certificate serial: 5EE609A02D8E33C2BBDCF486FE335448FCAFCFA3 Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa Signing time: Tue 06 Jan 2026 19:17:13 +0000 ROA not before: Tue 06 Jan 2026 19:12:13 +0000 ROA not after: Tue 05 Jan 2027 19:17:13 +0000 asID: 271916 IP address blocks: 2803:4a10:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e6:09:a0:2d:8e:33:c2:bb:dc:f4:86:fe:33:54:48:fc:af:cf:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467 Validity Not Before: Jan 6 19:12:13 2026 GMT Not After : Jan 5 19:17:13 2027 GMT Subject: CN=71CBC54CC6B3244E895D4CC937DBD3743C76CEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:2b:99:a3:e6:fd:93:bd:1b:2c:66:c0:80: 5b:d8:22:7c:83:e4:40:6d:88:63:f0:cd:bc:40:b4: b4:de:be:80:16:b2:b4:e7:0a:28:a7:aa:6d:89:e3: bf:db:51:fa:a1:2d:34:dd:7b:ed:34:52:20:a3:31: 5f:72:51:db:8d:c8:7a:d8:93:c1:f4:c0:30:6a:44: f5:f7:23:e6:9c:7c:d7:eb:50:b5:25:cd:40:a1:1f: 10:64:91:ed:f4:4a:4c:59:3e:e5:8b:13:c7:60:c2: 31:bd:92:91:b4:61:07:c3:80:71:56:e7:56:68:d7: 1c:86:6a:27:3d:e2:7f:dc:1c:bb:81:43:35:fd:1b: 41:37:9f:ee:28:3d:d0:64:b4:75:b7:ba:f6:4a:49: ea:19:40:d5:a4:1c:24:a5:a4:ab:d5:71:da:ad:a2: 49:1a:ea:1b:23:72:a2:9a:6d:b3:d6:c4:14:c1:e8: 8a:5b:82:bb:ba:05:be:c4:c3:d1:ab:1a:66:a0:83: bc:77:38:32:80:a5:af:0b:4e:fe:69:0f:86:37:43: a6:49:d0:11:a3:d1:a4:75:48:19:0b:c2:dd:db:88: eb:7f:9f:00:b7:2e:a3:ac:61:24:e1:2a:c3:d4:3e: 66:42:20:85:54:bf:49:5f:64:13:2a:be:7f:25:bb: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CB:C5:4C:C6:B3:24:4E:89:5D:4C:C9:37:DB:D3:74:3C:76:CE:F3 X509v3 Authority Key Identifier: keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4a10:e000::/36 Signature Algorithm: sha256WithRSAEncryption 10:b5:8c:6d:69:a0:fb:b0:08:a7:ab:f6:09:e0:af:2e:8e:62: fa:8b:d2:3c:8f:39:9c:6a:f1:4f:13:5d:99:0e:59:0f:cc:be: 17:fd:45:d2:80:2c:2f:49:7c:57:4f:17:9f:b3:42:97:c4:ec: 14:6e:da:38:e6:58:92:5e:17:73:ae:5d:32:cd:1c:14:f9:92: 34:9e:c8:27:61:5e:46:ce:b3:39:1e:fc:c2:d3:22:12:d5:e8: f7:de:08:f8:e3:d8:4d:8a:e9:ea:d3:cb:2e:71:27:14:b6:f3: cc:e0:7f:c0:66:ab:04:1c:b1:8d:af:b0:cd:61:5a:00:5f:30: 3d:e8:94:43:f7:56:d3:4e:7c:74:05:b0:57:7f:64:07:1c:22: 59:1c:b1:0c:76:75:de:32:cb:b1:01:24:79:3f:72:6e:41:72: 95:d9:54:90:9d:b9:d2:40:83:47:fe:8b:ab:a6:37:1d:2a:9b: 9a:cf:06:21:62:63:45:db:9b:d7:73:6b:f1:46:94:aa:a1:56: 84:32:bb:db:d5:47:ac:69:67:1c:90:a9:aa:d5:37:2a:17:99: 8d:ad:32:76:a3:bc:69:49:fe:06:48:45:16:9d:12:cf:7f:dc: fa:06:8b:04:c6:07:12:8e:6e:f3:54:5e:39:0f:ea:c7:60:b4: d7:d4:0a:aa -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUXuYJoC2OM8K73PSG/jNUSPyvz6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MjE1QzFBQkYwMDk5QkVGRjVENTgwN0E0MTU4NDk3 NTlCOTQ2NzAeFw0yNjAxMDYxOTEyMTNaFw0yNzAxMDUxOTE3MTNaMDMxMTAvBgNV BAMTKDcxQ0JDNTRDQzZCMzI0NEU4OTVENENDOTM3REJEMzc0M0M3NkNFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbiuZo+b9k70bLGbAgFvYInyD 5EBtiGPwzbxAtLTevoAWsrTnCiinqm2J47/bUfqhLTTde+00UiCjMV9yUduNyHrY k8H0wDBqRPX3I+acfNfrULUlzUChHxBkke30SkxZPuWLE8dgwjG9kpG0YQfDgHFW 51Zo1xyGaic94n/cHLuBQzX9G0E3n+4oPdBktHW3uvZKSeoZQNWkHCSlpKvVcdqt okka6hsjcqKabbPWxBTB6Ipbgru6Bb7Ew9GrGmagg7x3ODKApa8LTv5pD4Y3Q6ZJ 0BGj0aR1SBkLwt3biOt/nwC3LqOsYSThKsPUPmZCIIVUv0lfZBMqvn8lu98hAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUccvFTMazJE6JXUzJN9vTdDx2zvMwHwYDVR0j BBgwFoAU5FIVwavwCZvv9dWAekFYSXWblGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMEJBQjRGREM0OUI3REZFMUQ4OUFDQjQ5RjhDOEE5MjI1 RkI2NDVBRkJGNkEwMEQ4MzJEQzlEQzNGMzlCMjUzLzAvRTQ1MjE1QzFBQkYwMDk5 QkVGRjVENTgwN0E0MTU4NDk3NTlCOTQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUyMTVDMUFCRjAwOTlCRUZG NUQ1ODA3QTQxNTg0OTc1OUI5NDY3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjBCQUI0RkRDNDlCN0RGRTFEODlBQ0I0OUY4QzhBOTIyNUZCNjQ1QUZC RjZBMDBEODMyREM5REMzRjM5QjI1My8wLzMyMzgzMDMzM2EzNDYxMzEzMDNhNjUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzEzOTMxMzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA0oQ4DANBgkqhkiG9w0BAQsFAAOCAQEAELWMbWmg+7AIp6v2CeCvLo5i +ovSPI85nGrxTxNdmQ5ZD8y+F/1F0oAsL0l8V08Xn7NCl8TsFG7aOOZYkl4Xc65d Ms0cFPmSNJ7IJ2FeRs6zOR78wtMiEtXo994I+OPYTYrp6tPLLnEnFLbzzOB/wGar BByxja+wzWFaAF8wPeiUQ/dW0058dAWwV39kBxwiWRyxDHZ13jLLsQEkeT9ybkFy ldlUkJ250kCDR/6Lq6Y3HSqbms8GIWJjRdub13Nr8UaUqqFWhDK729VHrGlnHJCp qtU3KheZja0ydqO8aUn+BkhFFp0Sz3/c+gaLBMYHEo5u81ReOQ/qx2C019QKqg== -----END CERTIFICATE-----Generated at Mon Jan 12 14:32:13 2026 by rpki-client