This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa File: 323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa (raw, json) Hash identifier: zhCnraPdZt/7Lt2+MS2fT4n47SP5zjrt5lTbGMwCC4Q= Subject key identifier: 43:BC:FC:32:B7:5F:CD:52:26:F0:0C:A1:B1:18:03:ED:38:D5:DF:85 Certificate issuer: /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3 Certificate serial: 7C75BA77C319C9A34E256A147DEFA25D86749C01 Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa Signing time: Tue 06 Jan 2026 19:34:17 +0000 ROA not before: Tue 06 Jan 2026 19:29:17 +0000 ROA not after: Tue 05 Jan 2027 19:34:17 +0000 asID: 270081 IP address blocks: 2803:8be0:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:75:ba:77:c3:19:c9:a3:4e:25:6a:14:7d:ef:a2:5d:86:74:9c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3 Validity Not Before: Jan 6 19:29:17 2026 GMT Not After : Jan 5 19:34:17 2027 GMT Subject: CN=43BCFC32B75FCD5226F00CA1B11803ED38D5DF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:c8:33:84:83:46:c4:53:72:24:e7:1c:60: 7a:41:1f:7f:7e:7a:ea:b1:5c:9a:7c:19:86:22:83: fa:71:83:39:0d:2c:46:b7:e8:96:fb:4f:f3:a7:3a: b3:cb:6e:39:12:ec:3d:37:86:60:67:e5:05:f1:21: 97:37:e3:57:53:96:c6:69:7d:2e:6e:82:8b:19:8e: 68:43:5e:21:5f:b3:04:5c:08:28:81:2c:d4:bb:91: 9c:fa:70:e1:52:5e:59:23:b2:22:f3:df:de:66:fd: 2e:f4:a8:64:3c:e2:c9:74:c3:84:68:ae:25:e6:c4: 0c:35:aa:63:1f:3e:19:3c:33:df:63:2d:c9:be:7b: 14:d5:da:22:7f:fa:99:79:5d:6b:bd:8c:10:bd:04: b5:16:ea:3e:59:2a:31:ab:50:f1:b2:33:6b:ef:9e: 57:8b:30:8a:e5:2a:57:54:bc:a0:b2:b2:8a:64:da: a4:12:72:a6:b7:88:80:e5:ea:27:70:de:f4:c0:e9: b0:52:2c:b1:c9:89:9a:fa:85:5f:bc:22:a0:29:22: c1:4f:43:6b:36:fd:c2:88:e8:68:d4:ba:6e:da:d0: 9f:76:0c:4a:44:cb:c0:4e:4d:41:9d:bb:25:d7:0f: c8:a4:c7:92:c4:d1:47:ed:ad:12:55:2e:5c:2e:97: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:FC:32:B7:5F:CD:52:26:F0:0C:A1:B1:18:03:ED:38:D5:DF:85 X509v3 Authority Key Identifier: keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8be0:8000::/34 Signature Algorithm: sha256WithRSAEncryption 33:88:b1:e8:99:78:80:17:1b:37:f5:ec:b9:77:a5:54:78:9b: 83:1b:c7:64:91:84:21:05:bc:3d:92:a3:a1:a0:89:4d:8e:21: 95:b6:12:df:50:85:89:7a:2d:1d:af:ff:bd:75:33:54:ea:78: 59:a9:15:b1:db:16:64:1d:85:70:27:82:55:d6:b0:04:40:d4: 9a:91:a4:cb:ae:3e:14:fe:6e:98:9e:5c:dc:6c:d3:4c:e0:c2: 7d:c9:d0:f1:95:37:e3:77:9e:7a:ca:2f:d7:31:57:ee:52:2c: 77:4c:67:71:ca:d5:11:2f:f1:bf:04:0a:49:d7:08:a1:b5:bb: 6d:cf:63:06:43:17:6c:31:fb:77:a2:40:1f:46:08:c9:d7:c4: 58:c6:ba:89:10:c9:9b:1a:db:df:17:e8:f1:42:f6:c0:4f:63: a6:cf:3b:4b:72:82:2a:ef:b0:31:e3:78:1a:85:70:be:b2:12: cd:f2:a8:0b:16:67:37:00:b4:8a:26:8c:3e:9f:ef:ab:fb:0e: 6b:f8:3e:04:af:4d:e3:86:6f:09:97:12:b7:39:cb:fc:a6:d8: 07:fe:6e:5c:28:a3:eb:48:78:66:29:f9:53:12:87:39:0f:70: d4:da:66:7e:f1:e3:13:91:9d:41:1a:96:8f:55:27:c7:0a:2e: be:3c:dd:66 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfHW6d8MZyaNOJWoUfe+iXYZ0nAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy RTM5MDhDMzAeFw0yNjAxMDYxOTI5MTdaFw0yNzAxMDUxOTM0MTdaMDMxMTAvBgNV BAMTKDQzQkNGQzMyQjc1RkNENTIyNkYwMENBMUIxMTgwM0VEMzhENURGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WMgzhINGxFNyJOccYHpBH39+ euqxXJp8GYYig/pxgzkNLEa36Jb7T/OnOrPLbjkS7D03hmBn5QXxIZc341dTlsZp fS5ugosZjmhDXiFfswRcCCiBLNS7kZz6cOFSXlkjsiLz395m/S70qGQ84sl0w4Ro riXmxAw1qmMfPhk8M99jLcm+exTV2iJ/+pl5XWu9jBC9BLUW6j5ZKjGrUPGyM2vv nleLMIrlKldUvKCysopk2qQScqa3iIDl6idw3vTA6bBSLLHJiZr6hV+8IqApIsFP Q2s2/cKI6GjUum7a0J92DEpEy8BOTUGduyXXD8ikx5LE0UftrRJVLlwulwnpAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUQ7z8MrdfzVIm8AyhsRgD7TjV34UwHwYDVR0j BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2 M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMyMzgzMDMzM2EzODYyNjUzMDNhMzgz MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzAzMDM4MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYoA4vggDANBgkqhkiG9w0BAQsFAAOCAQEAM4ix6Jl4gBcbN/XsuXelVHib gxvHZJGEIQW8PZKjoaCJTY4hlbYS31CFiXotHa//vXUzVOp4WakVsdsWZB2FcCeC VdawBEDUmpGky64+FP5umJ5c3GzTTODCfcnQ8ZU343eeesov1zFX7lIsd0xnccrV ES/xvwQKSdcIobW7bc9jBkMXbDH7d6JAH0YIydfEWMa6iRDJmxrb3xfo8UL2wE9j ps87S3KCKu+wMeN4GoVwvrISzfKoCxZnNwC0iiaMPp/vq/sOa/g+BK9N44ZvCZcS tznL/KbYB/5uXCij60h4Zin5UxKHOQ9w1NpmfvHjE5GdQRqWj1UnxwouvjzdZg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:02:22 2026 by rpki-client