This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa File: 323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa (raw, json) Hash identifier: tdHzulkihWiVSTeEkXXUKXZD2wbDST02dkZ8pfEm0G0= Subject key identifier: 18:60:C1:80:B5:70:D1:98:11:E4:B5:77:65:07:70:8A:61:3D:41:9F Certificate issuer: /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Certificate serial: 0AB27B470CA4795F026D53CAB266002C022B277F Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa Signing time: Tue 06 Jan 2026 20:58:35 +0000 ROA not before: Tue 06 Jan 2026 20:53:35 +0000 ROA not after: Tue 05 Jan 2027 20:58:35 +0000 asID: 272146 IP address blocks: 2803:d090:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:7b:47:0c:a4:79:5f:02:6d:53:ca:b2:66:00:2c:02:2b:27:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Validity Not Before: Jan 6 20:53:35 2026 GMT Not After : Jan 5 20:58:35 2027 GMT Subject: CN=1860C180B570D19811E4B5776507708A613D419F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:bb:4c:af:9e:1f:f8:49:00:7c:0a:b3:70: a0:56:75:9e:c9:fd:46:93:09:32:41:a4:dc:56:a3: cc:f1:15:d8:fa:1c:30:1c:14:72:35:ed:a0:4a:b8: 9b:4e:2d:18:ed:83:24:61:a0:a1:36:63:f7:88:81: ef:ad:62:32:c8:9e:bc:f2:0e:89:bd:90:3c:88:8c: 9d:a5:b7:35:f0:6f:3e:bc:6c:96:82:bf:ee:de:9b: 79:f2:04:17:09:17:4d:c7:2b:41:dd:f5:9b:ba:69: ad:5a:59:ea:34:b1:32:c9:f7:82:69:46:70:8b:de: 75:82:56:0c:46:30:40:d2:1c:93:8e:d9:75:f4:71: c5:bd:20:09:17:e2:b5:57:23:eb:03:55:3d:01:fc: cd:6a:8c:e8:a5:a0:b5:0e:f9:93:08:49:f0:1d:4f: 45:90:6e:64:0e:31:6d:cb:b4:5a:9a:f4:69:03:8a: b9:10:dd:13:dc:6a:7b:19:27:b8:5c:23:3a:25:46: 91:bb:d7:cc:9a:ab:e9:9b:8a:9f:bf:90:69:c4:1d: 89:17:c3:25:ba:51:72:9b:65:34:d4:3f:69:5c:e7: 69:fa:64:02:76:e6:01:85:27:2d:c9:1a:ff:2d:6f: 43:4d:73:80:b9:5e:37:ac:ac:43:06:72:0d:5c:12: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:C1:80:B5:70:D1:98:11:E4:B5:77:65:07:70:8A:61:3D:41:9F X509v3 Authority Key Identifier: keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d090:2000::/36 Signature Algorithm: sha256WithRSAEncryption 8d:36:be:48:3b:f6:3d:02:7f:18:7d:05:3c:e3:20:c6:bc:e4: ab:dd:ec:ed:1e:77:d8:09:cf:0d:d4:7e:8b:7e:18:a0:f0:9a: a5:af:3f:93:1e:29:24:8c:03:ba:06:2e:e5:db:14:fb:66:b5: 50:6d:41:85:62:9b:b2:ae:95:27:f5:4f:6d:58:ce:d4:74:0e: dc:a7:19:08:10:02:34:9a:63:d7:2e:f5:74:97:8f:b0:e0:93: a0:92:8e:e1:0f:e8:cb:37:3b:cb:10:67:c0:85:54:cd:95:7c: d6:06:18:13:17:a5:9e:44:93:93:2d:0f:bb:c5:bf:ae:ed:26: fd:11:fd:b7:05:a0:12:f5:e2:90:38:79:ab:e8:a6:b0:18:ae: 51:45:68:45:b0:d8:7c:fe:43:86:d0:af:73:54:87:4e:c4:25: 9c:e0:65:b8:ce:6c:be:14:a8:46:50:3f:77:0c:d2:f7:ff:b5: a8:3b:48:a2:67:f2:de:2c:7e:42:f2:39:67:28:05:da:a3:d1: 71:61:a6:68:85:44:70:2d:07:f1:20:19:8d:ef:ab:ba:5b:63: b9:89:53:3c:bd:05:9b:c4:9f:5f:0a:e7:5f:b2:02:3a:92:1c: d8:91:8e:88:78:83:f6:b2:45:6b:be:9f:a6:7c:98:24:2c:f8: 73:03:5d:f2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUCrJ7RwykeV8CbVPKsmYALAIrJ38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREOTUxNkM2OEEwMkM4OTgwRjkyMzNBQkFDRDk4MzRD N0MzN0M3NDAeFw0yNjAxMDYyMDUzMzVaFw0yNzAxMDUyMDU4MzVaMDMxMTAvBgNV BAMTKDE4NjBDMTgwQjU3MEQxOTgxMUU0QjU3NzY1MDc3MDhBNjEzRDQxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexrtMr54f+EkAfAqzcKBWdZ7J /UaTCTJBpNxWo8zxFdj6HDAcFHI17aBKuJtOLRjtgyRhoKE2Y/eIge+tYjLInrzy Dom9kDyIjJ2ltzXwbz68bJaCv+7em3nyBBcJF03HK0Hd9Zu6aa1aWeo0sTLJ94Jp RnCL3nWCVgxGMEDSHJOO2XX0ccW9IAkX4rVXI+sDVT0B/M1qjOiloLUO+ZMISfAd T0WQbmQOMW3LtFqa9GkDirkQ3RPcansZJ7hcIzolRpG718yaq+mbip+/kGnEHYkX wyW6UXKbZTTUP2lc52n6ZAJ25gGFJy3JGv8tb0NNc4C5XjesrEMGcg1cEipZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGGDBgLVw0ZgR5LV3ZQdwimE9QZ8wHwYDVR0j BBgwFoAUndlRbGigLImA+SM6us2YNMfDfHQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTZEMjRBMDlENEM2M0E2MzBENkM0NkQ5QTVFOTdFQTgw MjVENjcwM0JGNUMwNTlBQzFGMTlGMDczQzI0ODNGLzAvOUREOTUxNkM2OEEwMkM4 OTgwRjkyMzNBQkFDRDk4MzRDN0MzN0M3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REQ5NTE2QzY4QTAyQzg5ODBG OTIzM0FCQUNEOTgzNEM3QzM3Qzc0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU2RDI0QTA5RDRDNjNBNjMwRDZDNDZEOUE1RTk3RUE4MDI1RDY3MDNC RjVDMDU5QUMxRjE5RjA3M0MyNDgzRi8wLzMyMzgzMDMzM2E2NDMwMzkzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMTM0MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA9CQIDANBgkqhkiG9w0BAQsFAAOCAQEAjTa+SDv2PQJ/GH0FPOMgxrzk q93s7R532AnPDdR+i34YoPCapa8/kx4pJIwDugYu5dsU+2a1UG1BhWKbsq6VJ/VP bVjO1HQO3KcZCBACNJpj1y71dJePsOCToJKO4Q/oyzc7yxBnwIVUzZV81gYYExel nkSTky0Pu8W/ru0m/RH9twWgEvXikDh5q+imsBiuUUVoRbDYfP5DhtCvc1SHTsQl nOBluM5svhSoRlA/dwzS9/+1qDtIomfy3ix+QvI5ZygF2qPRcWGmaIVEcC0H8SAZ je+rultjuYlTPL0Fm8SfXwrnX7ICOpIc2JGOiHiD9rJFa76fpnyYJCz4cwNd8g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:50:35 2026 by rpki-client