This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa File: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (raw, json) Hash identifier: TZcaKNFut/dhLqBs3dmqk2hLPmqrOndrVgvyix/pd4s= Subject key identifier: DB:95:B0:3C:43:2A:93:58:4F:A6:E2:37:63:3D:53:22:D3:CC:3D:05 Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 20FA7A0F1E3BFFBB1495375AF257C137396D4425 Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa Signing time: Tue 06 Jan 2026 19:11:23 +0000 ROA not before: Tue 06 Jan 2026 19:06:23 +0000 ROA not after: Tue 05 Jan 2027 19:11:23 +0000 asID: 19429 IP address blocks: 2801:11:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fa:7a:0f:1e:3b:ff:bb:14:95:37:5a:f2:57:c1:37:39:6d:44:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Jan 6 19:06:23 2026 GMT Not After : Jan 5 19:11:23 2027 GMT Subject: CN=DB95B03C432A93584FA6E237633D5322D3CC3D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:cf:0e:62:c9:b7:70:c2:c1:08:fd:dd:95: b4:d4:1c:5e:49:7c:37:54:93:d9:06:be:b7:e5:92: 80:fb:61:7d:61:e9:8b:9a:49:20:bb:39:f4:43:4e: 3a:38:da:48:aa:b7:3b:8a:e8:db:ea:fe:0e:a3:05: f0:8d:cc:6e:29:57:d7:ee:1a:3a:e4:7f:fd:4a:dd: 65:f8:ff:29:2f:1b:e4:15:ac:7e:39:18:a9:52:b9: 08:3b:16:96:8b:ef:4f:7b:df:6b:45:44:04:3e:45: 99:71:bf:c0:0d:8b:7a:eb:5d:d5:1a:83:42:3c:81: 18:98:d5:06:dc:66:21:21:a2:19:a1:ed:f8:b8:f6: 04:7b:2e:dd:3c:86:75:6e:ce:55:42:48:5c:45:44: 04:4f:b7:e9:36:c9:0e:c8:ec:45:ef:d5:66:fc:b8: a0:dd:8a:03:ad:a8:cf:6f:3f:7f:a8:34:cb:d4:fb: 33:32:19:a3:e1:0f:c0:39:24:ff:4c:ff:e1:ea:90: af:c8:82:c3:bf:6c:9d:e6:e6:c3:16:4e:99:f8:44: 4c:c5:cf:7c:39:b9:a3:52:00:ec:4d:59:15:a6:62: ee:42:cc:98:ff:27:f7:ee:81:f8:31:1c:83:f1:a6: 00:d6:d1:3c:b2:2b:63:78:09:82:33:ca:ca:53:1b: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:B0:3C:43:2A:93:58:4F:A6:E2:37:63:3D:53:22:D3:CC:3D:05 X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:11:8800::/48 Signature Algorithm: sha256WithRSAEncryption 17:c4:8f:83:93:03:84:d5:c7:5e:79:4a:b8:aa:f7:9e:60:87: 47:41:9d:4a:a1:28:50:30:c3:c0:e2:eb:5d:e9:5c:d2:17:e2: 27:84:bd:20:88:eb:0b:32:d0:21:a4:08:16:9b:3f:a8:04:5a: 91:80:37:ca:7d:7c:30:51:44:d7:6c:77:dd:bd:50:ef:b4:b0: fe:c8:47:19:d6:39:0e:7f:12:3b:7f:20:e3:e9:b9:dc:95:e8: 5a:09:16:c3:1f:ad:9f:6f:cf:6e:26:2f:c8:4c:80:3f:07:d6: 60:3c:be:23:32:3c:c8:4b:26:61:f1:00:8a:f3:1c:df:22:78: ee:0d:de:6a:b2:1e:a6:11:5c:12:67:3b:0e:64:31:28:5e:81: 0f:34:16:a9:51:99:9d:b1:c8:bd:c9:4d:54:1b:9d:69:d5:eb: 9c:35:88:d4:62:0a:8c:18:55:b4:f2:5e:a5:f6:31:ab:58:18: 14:53:7c:a4:7c:0a:2e:e5:68:c2:db:fd:86:b6:33:1d:e0:0f: 0d:96:3e:8d:92:60:41:cd:21:db:b3:86:42:4f:5f:34:19:02: 94:db:c4:55:a8:67:5b:c0:95:27:01:a5:39:03:73:96:cb:e5: 52:02:63:c2:48:ff:71:0a:6a:bd:94:8c:00:6a:39:9f:d2:e4: cc:af:01:0d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIPp6Dx47/7sUlTda8lfBNzltRCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNjAxMDYxOTA2MjNaFw0yNzAxMDUxOTExMjNaMDMxMTAvBgNV BAMTKERCOTVCMDNDNDMyQTkzNTg0RkE2RTIzNzYzM0Q1MzIyRDNDQzNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvj88OYsm3cMLBCP3dlbTUHF5J fDdUk9kGvrflkoD7YX1h6YuaSSC7OfRDTjo42kiqtzuK6Nvq/g6jBfCNzG4pV9fu Gjrkf/1K3WX4/ykvG+QVrH45GKlSuQg7FpaL709732tFRAQ+RZlxv8ANi3rrXdUa g0I8gRiY1QbcZiEhohmh7fi49gR7Lt08hnVuzlVCSFxFRARPt+k2yQ7I7EXv1Wb8 uKDdigOtqM9vP3+oNMvU+zMyGaPhD8A5JP9M/+HqkK/IgsO/bJ3m5sMWTpn4REzF z3w5uaNSAOxNWRWmYu5CzJj/J/fugfgxHIPxpgDW0TyyK2N4CYIzyspTG06BAgMB AAGjggLPMIICyzAdBgNVHQ4EFgQU25WwPEMqk1hPpuI3Yz1TItPMPQUwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wLzMyMzgzMDMxM2EzMTMxM2EzODM4MzAz MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo AQARiAAwDQYJKoZIhvcNAQELBQADggEBABfEj4OTA4TVx155Sriq955gh0dBnUqh KFAww8Di613pXNIX4ieEvSCI6wsy0CGkCBabP6gEWpGAN8p9fDBRRNdsd929UO+0 sP7IRxnWOQ5/Ejt/IOPpudyV6FoJFsMfrZ9vz24mL8hMgD8H1mA8viMyPMhLJmHx AIrzHN8ieO4N3mqyHqYRXBJnOw5kMShegQ80FqlRmZ2xyL3JTVQbnWnV65w1iNRi CowYVbTyXqX2MatYGBRTfKR8Ci7laMLb/Ya2Mx3gDw2WPo2SYEHNIduzhkJPXzQZ ApTbxFWoZ1vAlScBpTkDc5bL5VICY8JI/3EKar2UjABqOZ/S5MyvAQ0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:41:19 2026 by rpki-client