This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa File: 323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa (raw, json) Hash identifier: vtJlNS1F9O0HlQt6EJWNSrL4kLZrTLD9lheJsB7wP+I= Subject key identifier: F9:B9:4D:45:81:5C:BF:16:4C:FE:75:49:B5:D8:90:AD:3A:E3:D8:77 Certificate issuer: /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3 Certificate serial: 623CDAC75885A8DED4851E59B0AB2A777B71B955 Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa Signing time: Tue 06 Jan 2026 19:34:19 +0000 ROA not before: Tue 06 Jan 2026 19:29:19 +0000 ROA not after: Tue 05 Jan 2027 19:34:19 +0000 asID: 270081 IP address blocks: 2803:8be0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3c:da:c7:58:85:a8:de:d4:85:1e:59:b0:ab:2a:77:7b:71:b9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3 Validity Not Before: Jan 6 19:29:19 2026 GMT Not After : Jan 5 19:34:19 2027 GMT Subject: CN=F9B94D45815CBF164CFE7549B5D890AD3AE3D877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:bb:ba:11:13:2b:da:92:7d:b7:01:cd:53: c6:83:86:4a:64:10:01:0e:e5:f7:f6:df:64:80:62: 79:ee:fa:3a:e5:e6:ef:73:ee:02:66:92:cc:e6:77: 8f:20:85:fe:6c:b2:12:46:68:e8:e4:a2:00:97:6b: 95:b8:78:fc:da:1a:0b:a4:a6:b7:99:a1:cf:75:66: 81:7f:c2:7e:9c:f3:2f:74:6b:4f:b6:b6:a6:bd:75: aa:17:44:a4:58:26:e9:49:f4:0a:e8:9e:27:a3:48: db:b7:6e:40:67:7b:d1:6a:25:62:11:90:8e:ac:22: b3:6d:25:ed:2b:0b:df:ba:5d:6d:93:25:7a:d4:16: f3:ce:d9:5b:39:28:29:e1:e4:2e:ba:63:53:f4:88: 34:f9:1d:eb:86:d3:dd:5e:00:eb:02:eb:b8:8b:9d: e7:78:55:0b:5c:fe:48:80:fa:f5:57:80:7a:84:ea: 0b:bd:4c:63:a8:d8:57:b1:a6:9a:73:39:e2:58:01: 19:e5:81:d6:4e:89:b9:39:34:0d:ad:e4:75:7e:71: 6d:d1:06:af:ca:15:d0:c6:ec:d7:3d:91:5e:40:19: 7c:38:73:fe:89:02:86:13:ea:4e:0d:66:d9:8f:b9: c3:44:64:d6:64:33:71:e4:6f:75:b1:c3:8f:f5:75: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B9:4D:45:81:5C:BF:16:4C:FE:75:49:B5:D8:90:AD:3A:E3:D8:77 X509v3 Authority Key Identifier: keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8be0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 61:51:1f:8a:21:ba:fc:dd:21:ad:f0:e1:e2:87:e8:98:7b:96: 1e:ee:b2:00:1e:c7:15:21:94:a3:9e:0d:31:1d:aa:74:39:5a: c3:36:6b:3e:76:09:ce:9f:ca:40:c9:54:25:a0:0b:2d:8e:1b: be:6f:6e:b1:73:0c:67:60:f1:bf:32:7e:4b:be:3c:65:5f:fa: e7:55:2c:1e:75:dd:d9:55:3e:51:aa:ef:9f:fc:f1:92:da:ed: 0a:22:78:30:e4:61:d3:3f:af:19:e1:6c:bf:05:52:9e:a5:9e: 38:78:43:ae:ea:7a:b5:28:f0:3b:30:8b:2a:ab:30:7b:73:76: 8d:09:5a:5f:85:37:75:62:52:c3:05:ba:6a:16:23:36:c7:19: c9:90:95:5d:b7:10:58:4b:8f:c4:d2:72:33:ed:07:9c:a1:8a: c9:2c:0f:c1:d6:28:4b:6a:6d:32:2e:61:22:a0:64:55:47:e8: fd:0f:ba:ac:96:a4:c9:1a:3b:9a:c8:f9:ad:28:4e:c6:0c:57: b5:89:48:a0:77:63:65:bc:87:64:88:b9:82:6f:0e:16:b3:84: 9d:17:18:00:b5:a2:51:71:c3:99:1c:b1:96:89:40:51:f4:a9: 92:85:4b:f8:c9:d3:26:c7:9b:27:30:4c:c0:e5:7e:f4:6c:f4: b2:84:c0:ef -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUYjzax1iFqN7UhR5ZsKsqd3txuVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy RTM5MDhDMzAeFw0yNjAxMDYxOTI5MTlaFw0yNzAxMDUxOTM0MTlaMDMxMTAvBgNV BAMTKEY5Qjk0RDQ1ODE1Q0JGMTY0Q0ZFNzU0OUI1RDg5MEFEM0FFM0Q4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQm7u6ERMr2pJ9twHNU8aDhkpk EAEO5ff232SAYnnu+jrl5u9z7gJmkszmd48ghf5sshJGaOjkogCXa5W4ePzaGguk preZoc91ZoF/wn6c8y90a0+2tqa9daoXRKRYJulJ9AroniejSNu3bkBne9FqJWIR kI6sIrNtJe0rC9+6XW2TJXrUFvPO2Vs5KCnh5C66Y1P0iDT5HeuG091eAOsC67iL ned4VQtc/kiA+vVXgHqE6gu9TGOo2FexpppzOeJYARnlgdZOibk5NA2t5HV+cW3R Bq/KFdDG7Nc9kV5AGXw4c/6JAoYT6k4NZtmPucNEZNZkM3Hkb3Wxw4/1dVOJAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU+blNRYFcvxZM/nVJtdiQrTrj2HcwHwYDVR0j BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2 M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMyMzgzMDMzM2EzODYyNjUzMDNhMzgz MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzAzMDM4MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgcoA4vggDANBgkqhkiG9w0BAQsFAAOCAQEAYVEfiiG6/N0hrfDh4ofomHuW Hu6yAB7HFSGUo54NMR2qdDlawzZrPnYJzp/KQMlUJaALLY4bvm9usXMMZ2DxvzJ+ S748ZV/651UsHnXd2VU+Uarvn/zxktrtCiJ4MORh0z+vGeFsvwVSnqWeOHhDrup6 tSjwOzCLKqswe3N2jQlaX4U3dWJSwwW6ahYjNscZyZCVXbcQWEuPxNJyM+0HnKGK ySwPwdYoS2ptMi5hIqBkVUfo/Q+6rJakyRo7msj5rShOxgxXtYlIoHdjZbyHZIi5 gm8OFrOEnRcYALWiUXHDmRyxlolAUfSpkoVL+MnTJsebJzBMwOV+9Gz0soTA7w== -----END CERTIFICATE-----Generated at Sun Jan 25 10:02:17 2026 by rpki-client