This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa File: 323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa (raw, json) Hash identifier: 8FpRYq1o9okoQKnDUognoKNLP0thCGmbrs4pqPal63w= Subject key identifier: 3E:42:85:B1:13:1C:FE:AF:82:0D:20:FB:9D:D7:F1:76:74:2C:AF:54 Certificate issuer: /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Certificate serial: 3666869585361E11FC4FDD191C649C13BF59B26D Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa Signing time: Tue 06 Jan 2026 20:58:36 +0000 ROA not before: Tue 06 Jan 2026 20:53:36 +0000 ROA not after: Tue 05 Jan 2027 20:58:36 +0000 asID: 272146 IP address blocks: 2803:d090:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:86:95:85:36:1e:11:fc:4f:dd:19:1c:64:9c:13:bf:59:b2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Validity Not Before: Jan 6 20:53:36 2026 GMT Not After : Jan 5 20:58:36 2027 GMT Subject: CN=3E4285B1131CFEAF820D20FB9DD7F176742CAF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:45:9d:ba:e6:c9:65:ea:8e:f6:8d:27:90: b6:25:11:d6:1d:59:aa:b2:09:15:5d:f0:1b:12:a4: fe:e8:92:0e:29:a8:a3:be:68:91:41:e2:43:31:38: d4:e4:9c:bb:f8:7c:91:c6:24:8e:23:91:10:f5:a8: 0d:b7:50:8e:1d:ac:13:fb:2f:17:5d:53:ed:c5:d0: 79:7b:02:be:17:cb:dc:b3:40:45:3b:57:31:c4:69: 0f:73:02:29:ea:e1:66:b5:6d:78:c5:01:e6:f9:67: 4c:5a:35:7e:8b:df:24:11:95:37:19:35:4d:76:c0: 27:a6:2d:d2:db:29:ef:74:4d:4e:4d:e5:5a:b0:ea: 32:ae:55:9d:be:d9:ca:c8:0e:58:30:d9:93:28:34: d5:c1:7f:c8:4a:01:bd:48:3a:ee:f2:52:51:96:74: c3:49:91:46:d5:7f:fa:b5:ba:7c:3b:c8:25:aa:70: 97:20:69:74:2f:f2:a2:b0:7e:02:d9:c5:3f:0c:c5: a3:3f:2e:5b:6c:44:d8:e2:bc:77:00:28:a1:ae:c5: fc:2f:76:37:97:39:32:e2:73:df:83:1d:5a:c3:d8: 2d:01:28:cf:c8:05:18:d5:f1:29:ea:0e:83:c2:ab: c9:63:c0:fd:ff:9e:9e:98:c4:04:d0:99:75:a7:7d: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:85:B1:13:1C:FE:AF:82:0D:20:FB:9D:D7:F1:76:74:2C:AF:54 X509v3 Authority Key Identifier: keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a343030303a3a2f33362d3336203d3e20323732313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d090:4000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:94:05:87:ea:c3:f6:af:89:6e:ad:a4:dd:e0:d5:23:b6:52: cd:0a:9a:64:8b:94:56:c2:8f:7c:3b:82:b0:08:71:8c:ba:8e: 88:23:6a:67:e4:91:73:e6:95:ab:da:5c:6c:47:53:4b:66:69: 2e:c0:de:38:3a:f4:4f:0d:6e:b7:29:c0:46:2e:92:96:f6:0b: d8:fb:5a:0f:ef:ca:83:2e:7c:c3:05:9a:84:0b:79:34:36:be: 58:ec:1a:17:d0:26:ec:94:52:eb:47:09:1b:b9:52:e7:ab:ab: 75:04:11:ad:22:8b:14:75:c3:49:76:70:27:e9:dd:95:b0:76: d7:2d:e1:0e:ba:76:e7:38:92:d4:63:35:df:ee:35:18:82:4c: fa:6f:ae:b8:83:d3:2b:51:68:e1:8b:4f:ec:88:bf:b9:03:d7: 7c:52:b3:0c:05:e0:0a:59:ce:e9:94:1c:c0:b1:8c:92:bf:ce: 39:de:3b:13:95:de:c5:dd:dd:0c:f0:af:b5:97:f2:0c:44:e8: b4:4b:db:a9:42:02:44:85:55:b1:5a:a8:06:b6:ff:41:87:d9: e1:65:02:78:da:2c:ab:79:1b:f3:7e:de:f1:6f:46:38:87:46: 71:93:ff:3c:c8:19:fe:f8:46:e8:b3:24:6d:e7:e9:4e:bd:68: 60:65:2d:20 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNmaGlYU2HhH8T90ZHGScE79Zsm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREOTUxNkM2OEEwMkM4OTgwRjkyMzNBQkFDRDk4MzRD N0MzN0M3NDAeFw0yNjAxMDYyMDUzMzZaFw0yNzAxMDUyMDU4MzZaMDMxMTAvBgNV BAMTKDNFNDI4NUIxMTMxQ0ZFQUY4MjBEMjBGQjlERDdGMTc2NzQyQ0FGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfEWduubJZeqO9o0nkLYlEdYd WaqyCRVd8BsSpP7okg4pqKO+aJFB4kMxONTknLv4fJHGJI4jkRD1qA23UI4drBP7 LxddU+3F0Hl7Ar4Xy9yzQEU7VzHEaQ9zAinq4Wa1bXjFAeb5Z0xaNX6L3yQRlTcZ NU12wCemLdLbKe90TU5N5Vqw6jKuVZ2+2crIDlgw2ZMoNNXBf8hKAb1IOu7yUlGW dMNJkUbVf/q1unw7yCWqcJcgaXQv8qKwfgLZxT8MxaM/LltsRNjivHcAKKGuxfwv djeXOTLic9+DHVrD2C0BKM/IBRjV8SnqDoPCq8ljwP3/np6YxATQmXWnfaf9AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUPkKFsRMc/q+CDSD7ndfxdnQsr1QwHwYDVR0j BBgwFoAUndlRbGigLImA+SM6us2YNMfDfHQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTZEMjRBMDlENEM2M0E2MzBENkM0NkQ5QTVFOTdFQTgw MjVENjcwM0JGNUMwNTlBQzFGMTlGMDczQzI0ODNGLzAvOUREOTUxNkM2OEEwMkM4 OTgwRjkyMzNBQkFDRDk4MzRDN0MzN0M3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REQ5NTE2QzY4QTAyQzg5ODBG OTIzM0FCQUNEOTgzNEM3QzM3Qzc0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU2RDI0QTA5RDRDNjNBNjMwRDZDNDZEOUE1RTk3RUE4MDI1RDY3MDNC RjVDMDU5QUMxRjE5RjA3M0MyNDgzRi8wLzMyMzgzMDMzM2E2NDMwMzkzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMTM0MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA9CQQDANBgkqhkiG9w0BAQsFAAOCAQEAipQFh+rD9q+Jbq2k3eDVI7ZS zQqaZIuUVsKPfDuCsAhxjLqOiCNqZ+SRc+aVq9pcbEdTS2ZpLsDeODr0Tw1utynA Ri6SlvYL2PtaD+/Kgy58wwWahAt5NDa+WOwaF9Am7JRS60cJG7lS56urdQQRrSKL FHXDSXZwJ+ndlbB21y3hDrp25ziS1GM13+41GIJM+m+uuIPTK1Fo4YtP7Ii/uQPX fFKzDAXgClnO6ZQcwLGMkr/OOd47E5Xexd3dDPCvtZfyDETotEvbqUICRIVVsVqo Brb/QYfZ4WUCeNosq3kb837e8W9GOIdGcZP/PMgZ/vhG6LMkbefpTr1oYGUtIA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:18:07 2026 by rpki-client