This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a313030303a3a2f34302d3438203d3e20323733383930.roa File: 323830333a373736303a313030303a3a2f34302d3438203d3e20323733383930.roa (raw, json) Hash identifier: f/FRzbHWLPcDxwFomo8qtj98NFnfKihPB1T+o6LPLkY= Subject key identifier: 04:A3:F0:99:AF:0E:49:4B:2F:9A:C4:E0:54:D5:58:74:10:B4:78:5F Certificate issuer: /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7 Certificate serial: 3EFF02FE3854C592DCC9B6263240A26CD21D93ED Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a313030303a3a2f34302d3438203d3e20323733383930.roa Signing time: Mon 12 Jan 2026 13:25:00 +0000 ROA not before: Mon 12 Jan 2026 13:20:00 +0000 ROA not after: Mon 11 Jan 2027 13:25:00 +0000 asID: 273890 IP address blocks: 2803:7760:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 21:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:02:fe:38:54:c5:92:dc:c9:b6:26:32:40:a2:6c:d2:1d:93:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7 Validity Not Before: Jan 12 13:20:00 2026 GMT Not After : Jan 11 13:25:00 2027 GMT Subject: CN=04A3F099AF0E494B2F9AC4E054D5587410B4785F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:b2:b2:53:26:5e:b1:59:0d:81:0f:07:24: 2d:6a:7d:53:a9:88:76:79:c5:c9:a9:9d:3d:76:85: 47:a8:01:fa:55:19:d8:11:51:f8:44:b6:e3:0e:b5: 1b:88:b9:c3:64:6f:10:d6:4e:56:ee:32:ec:75:7f: 43:42:b4:5d:37:7e:b0:09:a2:2c:60:99:d4:71:4e: 0e:a7:61:d0:4c:39:ea:57:05:fe:54:98:93:69:a0: 93:96:33:74:61:1a:6a:ab:b9:35:a7:9b:83:a4:eb: ae:27:84:ed:db:1a:0c:0e:19:56:c5:28:f9:db:98: a1:13:6f:4e:43:25:ca:a2:0d:9c:60:fb:61:a2:2b: 33:b2:9b:20:f7:60:bc:59:95:37:5e:7a:a0:f3:52: c1:37:f6:ff:ed:55:01:a8:19:09:41:cb:62:03:39: d9:a0:1f:34:a4:8c:7a:c4:bc:49:ad:a1:be:f8:23: 8e:8b:3a:62:d0:6d:ff:4b:0b:cd:86:32:ab:12:d9: c7:b3:2d:1e:40:be:d4:53:d0:f8:2c:6f:c3:a6:e4: f6:b0:ae:85:57:1e:c8:00:c9:92:68:ca:2d:9a:6e: fe:aa:4b:7d:e2:ee:fd:74:b1:41:48:3b:2b:f7:f8: 28:96:80:1b:03:c1:96:b6:78:3a:a4:14:a1:b8:01: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A3:F0:99:AF:0E:49:4B:2F:9A:C4:E0:54:D5:58:74:10:B4:78:5F X509v3 Authority Key Identifier: keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a313030303a3a2f34302d3438203d3e20323733383930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7760:1000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:6b:f8:fd:b8:cf:9a:01:9d:20:ca:70:82:bc:6e:12:ed:3a: d8:1f:a9:15:d0:5e:ce:05:f0:f0:14:e2:1c:a6:e9:22:ed:6a: b9:44:ee:2e:76:7f:8a:f2:51:34:1f:8d:9c:8b:88:99:32:ec: 21:29:ee:59:01:bf:b0:89:4a:b6:62:15:86:46:67:9e:c7:34: 12:ff:25:bf:dd:37:39:4a:ef:87:9b:e3:79:19:7b:cd:ee:3c: 3c:46:d1:0b:2c:db:b4:1d:f5:3f:46:77:ac:a8:30:89:e0:f9: 06:5d:3e:3d:73:f4:ef:f5:0e:7c:4c:93:bb:09:f2:93:94:b8: ee:2b:7d:45:d0:89:d0:f6:88:ab:6a:d7:25:7e:4b:34:43:01: 37:b7:27:62:61:70:6d:09:31:58:45:d6:c9:68:af:38:1a:dd: f9:dc:5f:ff:b3:51:ed:83:41:59:d3:1d:6d:a0:2c:84:70:70: 1e:f8:ae:3a:33:4c:4d:1d:7d:80:56:f1:e4:d0:2e:53:8f:cd: 65:d0:a3:f6:cd:bd:2c:50:4e:1e:ba:e5:c2:29:45:5a:c6:7e: ff:54:da:a4:28:d7:1b:e2:b4:42:41:09:f0:23:85:f0:2a:ce: 86:7a:c8:ca:20:fd:7e:c5:e5:bf:1d:8d:4c:aa:fd:c4:5a:6a: 1a:60:f8:92 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUPv8C/jhUxZLcybYmMkCibNIdk+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2NDhFQzU0M0MzQzdDMjA5NEE0NUU0Njc4RDc2OEM0 MkI4NjhDNzAeFw0yNjAxMTIxMzIwMDBaFw0yNzAxMTExMzI1MDBaMDMxMTAvBgNV BAMTKDA0QTNGMDk5QUYwRTQ5NEIyRjlBQzRFMDU0RDU1ODc0MTBCNDc4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvbKyUyZesVkNgQ8HJC1qfVOp iHZ5xcmpnT12hUeoAfpVGdgRUfhEtuMOtRuIucNkbxDWTlbuMux1f0NCtF03frAJ oixgmdRxTg6nYdBMOepXBf5UmJNpoJOWM3RhGmqruTWnm4Ok664nhO3bGgwOGVbF KPnbmKETb05DJcqiDZxg+2GiKzOymyD3YLxZlTdeeqDzUsE39v/tVQGoGQlBy2ID OdmgHzSkjHrEvEmtob74I46LOmLQbf9LC82GMqsS2cezLR5AvtRT0Pgsb8Om5Paw roVXHsgAyZJoyi2abv6qS33i7v10sUFIOyv3+CiWgBsDwZa2eDqkFKG4AXRvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUBKPwma8OSUsvmsTgVNVYdBC0eF8wHwYDVR0j BBgwFoAUD2SOxUPDx8IJSkXkZ412jEK4aMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzc3RTU3RUE2REJEMjVFOUUwRTFDRTMwNkM3NzBCQzkx RUU4NDY3NDAxNTI3QzkxOTY1QzM4MjhGRDAwMDY5LzAvMEY2NDhFQzU0M0MzQzdD MjA5NEE0NUU0Njc4RDc2OEM0MkI4NjhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjY0OEVDNTQzQzNDN0MyMDk0 QTQ1RTQ2NzhENzY4QzQyQjg2OEM3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjc3N0U1N0VBNkRCRDI1RTlFMEUxQ0UzMDZDNzcwQkM5MUVFODQ2NzQw MTUyN0M5MTk2NUMzODI4RkQwMDA2OS8wLzMyMzgzMDMzM2EzNzM3MzYzMDNhMzEz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzODM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA3dgEDANBgkqhkiG9w0BAQsFAAOCAQEATmv4/bjPmgGdIMpwgrxuEu06 2B+pFdBezgXw8BTiHKbpIu1quUTuLnZ/ivJRNB+NnIuImTLsISnuWQG/sIlKtmIV hkZnnsc0Ev8lv903OUrvh5vjeRl7ze48PEbRCyzbtB31P0Z3rKgwieD5Bl0+PXP0 7/UOfEyTuwnyk5S47it9RdCJ0PaIq2rXJX5LNEMBN7cnYmFwbQkxWEXWyWivOBrd +dxf/7NR7YNBWdMdbaAshHBwHviuOjNMTR19gFbx5NAuU4/NZdCj9s29LFBOHrrl wilFWsZ+/1TapCjXG+K0QkEJ8COF8CrOhnrIyiD9fsXlvx2NTKr9xFpqGmD4kg== -----END CERTIFICATE-----Generated at Tue Jan 13 07:39:32 2026 by rpki-client