This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a313030303a3a2f33362d3336203d3e20323634363238.roa File: 323830333a633030303a313030303a3a2f33362d3336203d3e20323634363238.roa (raw, json) Hash identifier: gLzL3lvSnrDyA4Kpjl2PqKRYxLWlLsP9Lcp5zDZyoNo= Subject key identifier: 14:1D:88:20:3D:A0:66:43:65:16:CB:FD:3C:C4:DB:6E:70:29:46:01 Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Certificate serial: 553C3C4CF76B30223A457B861D6A5DFC5BD1BF75 Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a313030303a3a2f33362d3336203d3e20323634363238.roa Signing time: Wed 07 Jan 2026 20:45:00 +0000 ROA not before: Wed 07 Jan 2026 20:40:00 +0000 ROA not after: Wed 06 Jan 2027 20:45:00 +0000 asID: 264628 IP address blocks: 2803:c000:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3c:3c:4c:f7:6b:30:22:3a:45:7b:86:1d:6a:5d:fc:5b:d1:bf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Validity Not Before: Jan 7 20:40:00 2026 GMT Not After : Jan 6 20:45:00 2027 GMT Subject: CN=141D88203DA066436516CBFD3CC4DB6E70294601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:eb:cc:8a:b1:aa:66:28:eb:78:d1:a4:5b:5d: de:b7:d6:49:3b:48:f1:26:12:33:ec:a8:cc:c6:58: 31:1a:c5:da:9e:bd:41:a7:5d:72:8f:d9:24:f2:82: d1:79:0a:cf:c4:5e:a9:0f:f4:6f:3e:4f:7f:ce:32: 87:b7:90:38:af:67:a4:5a:28:ec:2d:f6:8f:7b:24: a2:de:c0:32:ce:ff:0a:34:61:3f:33:4c:51:ee:99: dc:f0:7d:f9:f0:a9:87:a1:53:14:4d:da:e2:24:f2: 28:3c:a1:95:1a:83:9f:5e:53:c5:56:05:63:42:f7: c4:d9:ba:b6:bd:99:24:42:ae:e1:01:ae:72:dd:37: 0a:0b:62:eb:88:c7:c6:85:6c:f7:b9:eb:1a:e9:9e: 54:c4:17:31:4a:d0:de:63:ba:50:55:51:8f:28:ef: b9:72:07:5a:5d:3c:7b:47:a4:51:91:64:23:be:fc: 2c:c1:de:7d:3f:05:0d:b8:5d:74:44:77:fd:97:09: 70:69:65:c7:27:9f:62:40:6d:09:2c:44:76:58:54: ca:b4:08:b6:f7:74:00:56:63:e5:d1:ee:06:1d:b9: 8e:59:a6:c3:74:5a:50:33:91:ee:ca:71:dd:93:e9: 5f:48:e5:6f:52:f0:71:75:85:29:c7:82:77:e1:1c: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:88:20:3D:A0:66:43:65:16:CB:FD:3C:C4:DB:6E:70:29:46:01 X509v3 Authority Key Identifier: keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a313030303a3a2f33362d3336203d3e20323634363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c000:1000::/36 Signature Algorithm: sha256WithRSAEncryption 74:18:5a:2e:44:a4:a6:0c:b7:03:0c:11:4f:bc:47:a4:07:b5: 0a:b6:97:1a:4e:64:99:14:41:8c:24:d2:82:f0:02:10:8c:c2: 37:80:ac:4f:18:7d:d5:7d:6c:3b:33:6d:eb:04:91:e0:fb:46: dd:3e:70:ce:c3:46:25:4d:41:38:79:a8:fc:92:37:0a:18:a9: e0:aa:85:bb:84:63:f4:c9:9f:6e:c9:68:5a:73:77:27:2c:42: 74:8d:88:94:ef:df:78:7c:2f:29:60:37:d6:9c:21:4c:0a:f0: 97:77:98:c7:63:e2:56:6b:52:b4:60:27:9a:f0:a4:b5:ff:d8: 69:01:97:25:80:5e:e2:34:93:7d:39:49:39:92:8f:1e:39:cc: 04:ef:c6:31:5a:34:2e:07:6c:0e:4f:3a:32:41:d2:65:4d:71: 42:19:2e:8e:b9:1c:76:4f:c7:24:0f:59:af:5f:46:3c:44:c8: 19:18:1c:c9:e5:bc:25:a3:61:f8:61:da:57:b6:8c:ea:e6:1d: 2e:b0:7f:99:ca:73:cc:60:18:38:ce:9b:95:5c:ea:0e:e6:3b: 2c:69:98:27:b7:db:00:b1:5e:06:da:9e:0d:6e:d1:65:6b:5e: 9a:b4:9d:8f:89:f7:a6:ef:1d:f9:27:f5:73:46:dd:cc:0b:de: 8c:bc:a1:70 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUVTw8TPdrMCI6RXuGHWpd/FvRv3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD MzVCRDEzMzAeFw0yNjAxMDcyMDQwMDBaFw0yNzAxMDYyMDQ1MDBaMDMxMTAvBgNV BAMTKDE0MUQ4ODIwM0RBMDY2NDM2NTE2Q0JGRDNDQzREQjZFNzAyOTQ2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD168yKsapmKOt40aRbXd631kk7 SPEmEjPsqMzGWDEaxdqevUGnXXKP2STygtF5Cs/EXqkP9G8+T3/OMoe3kDivZ6Ra KOwt9o97JKLewDLO/wo0YT8zTFHumdzwffnwqYehUxRN2uIk8ig8oZUag59eU8VW BWNC98TZura9mSRCruEBrnLdNwoLYuuIx8aFbPe56xrpnlTEFzFK0N5julBVUY8o 77lyB1pdPHtHpFGRZCO+/CzB3n0/BQ24XXREd/2XCXBpZccnn2JAbQksRHZYVMq0 CLb3dABWY+XR7gYduY5ZpsN0WlAzke7Kcd2T6V9I5W9S8HF1hSnHgnfhHPR3AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUFB2IID2gZkNlFsv9PMTbbnApRgEwHwYDVR0j BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1 MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzMyMzgzMDMzM2E2MzMwMzAzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzNjMyMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8AAEDANBgkqhkiG9w0BAQsFAAOCAQEAdBhaLkSkpgy3AwwRT7xHpAe1 CraXGk5kmRRBjCTSgvACEIzCN4CsTxh91X1sOzNt6wSR4PtG3T5wzsNGJU1BOHmo /JI3Chip4KqFu4Rj9MmfbsloWnN3JyxCdI2IlO/feHwvKWA31pwhTArwl3eYx2Pi VmtStGAnmvCktf/YaQGXJYBe4jSTfTlJOZKPHjnMBO/GMVo0LgdsDk86MkHSZU1x Qhkujrkcdk/HJA9Zr19GPETIGRgcyeW8JaNh+GHaV7aM6uYdLrB/mcpzzGAYOM6b lVzqDuY7LGmYJ7fbALFeBtqeDW7RZWtemrSdj4n3pu8d+Sf1c0bdzAvejLyhcA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:29 2026 by rpki-client