This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a653030303a3a2f33362d3336203d3e20323634363238.roa File: 323830333a633030303a653030303a3a2f33362d3336203d3e20323634363238.roa (raw, json) Hash identifier: lLNNXoeS6GdrgWJCUmgfZ8++oc90whqunresyBgSGLQ= Subject key identifier: C5:F7:40:64:F5:62:9F:DE:5D:CF:38:C8:71:31:A9:3D:DB:E8:E4:81 Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Certificate serial: 56C2FC58F7990C2818FECB7BF8E7D4CE9236F87E Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a653030303a3a2f33362d3336203d3e20323634363238.roa Signing time: Wed 07 Jan 2026 20:45:00 +0000 ROA not before: Wed 07 Jan 2026 20:40:00 +0000 ROA not after: Wed 06 Jan 2027 20:45:00 +0000 asID: 264628 IP address blocks: 2803:c000:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c2:fc:58:f7:99:0c:28:18:fe:cb:7b:f8:e7:d4:ce:92:36:f8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Validity Not Before: Jan 7 20:40:00 2026 GMT Not After : Jan 6 20:45:00 2027 GMT Subject: CN=C5F74064F5629FDE5DCF38C87131A93DDBE8E481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:3a:c1:07:ac:a8:fe:cd:fc:4a:dd:4e:e8: de:a7:45:02:88:5b:e2:81:87:49:82:5c:9b:02:73: 4c:4f:fc:95:1e:c2:ff:cc:c1:6f:ae:a6:34:af:2e: bb:4b:8f:69:5b:e8:60:d2:4c:af:10:56:40:ca:38: 43:cb:cf:10:2d:78:f0:85:b9:1e:cc:c6:65:56:af: ef:4e:22:5d:10:7c:1f:6b:9e:d1:a5:90:4c:b2:ad: dc:79:84:0a:32:e6:e0:cd:2b:a5:ab:5a:34:89:82: 7f:61:4c:29:4c:75:ee:ec:ed:ed:8f:33:16:5b:bb: 06:f6:7c:15:66:81:b0:d8:d3:62:1a:4d:f5:de:a7: f2:5b:23:ab:0b:b3:06:2e:fb:0c:78:27:56:53:19: 6c:46:60:af:e7:ac:37:d3:ee:38:30:ce:5a:b0:88: b2:0a:28:3a:3c:fd:63:44:6b:81:2e:a3:cd:fb:25: ea:44:44:32:0a:fd:81:b3:d3:59:ce:aa:0f:e9:9a: ae:3a:7a:2d:3e:21:1e:2a:38:f7:69:5d:e8:24:1d: ab:c8:d5:f3:17:e2:27:5b:c4:49:34:1c:f6:09:d5: be:e1:d3:17:0b:14:57:3f:d5:44:b9:67:37:35:cf: f0:53:0f:98:40:74:a1:ac:a0:51:bb:ba:23:7c:b5: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F7:40:64:F5:62:9F:DE:5D:CF:38:C8:71:31:A9:3D:DB:E8:E4:81 X509v3 Authority Key Identifier: keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a653030303a3a2f33362d3336203d3e20323634363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c000:e000::/36 Signature Algorithm: sha256WithRSAEncryption 81:17:65:fa:ba:d0:20:85:54:59:02:b7:16:b1:a5:c0:bd:2b: c5:b5:57:40:5c:af:a5:79:99:bd:38:ec:9e:c5:bd:0d:3d:1c: 3c:08:ec:7a:a8:af:4f:e6:21:52:98:2b:27:02:85:01:27:af: 7d:1c:a9:73:2c:7e:6a:d2:dc:29:e8:5d:92:4a:11:54:e7:64: a3:af:d6:2f:9a:d8:21:4e:67:b9:5f:6a:34:1d:65:d9:ea:9e: c4:9f:42:dc:43:a1:73:fa:4f:74:62:0f:1d:5c:84:cc:c9:61: c8:5a:0d:8d:5b:cb:fb:1a:07:3c:2f:5e:44:64:f3:56:3f:47: 47:d4:96:56:f8:d0:f2:57:fa:89:c8:89:69:0f:af:1a:0b:d7: 4f:b8:fd:8d:45:2f:bc:4b:21:fb:92:94:b1:b3:93:dd:f2:d9: b0:eb:99:52:ad:ca:1b:28:47:a3:e3:56:37:f4:3c:8b:b1:2d: 7e:65:d4:34:3b:86:3a:c3:68:01:3e:b1:91:e1:65:8b:af:b3: ab:a4:8b:97:9b:00:5e:9a:38:5e:de:ec:e1:52:ef:79:11:5c: f4:c2:90:79:30:66:1b:32:ec:91:08:52:3e:df:dd:66:19:10: 83:b5:c6:ec:2a:30:75:fc:d3:7d:a5:ef:5d:e0:1a:9f:5e:94: cb:db:c3:1e -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUVsL8WPeZDCgY/st7+OfUzpI2+H4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD MzVCRDEzMzAeFw0yNjAxMDcyMDQwMDBaFw0yNzAxMDYyMDQ1MDBaMDMxMTAvBgNV BAMTKEM1Rjc0MDY0RjU2MjlGREU1RENGMzhDODcxMzFBOTNEREJFOEU0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FTrBB6yo/s38St1O6N6nRQKI W+KBh0mCXJsCc0xP/JUewv/MwW+upjSvLrtLj2lb6GDSTK8QVkDKOEPLzxAtePCF uR7MxmVWr+9OIl0QfB9rntGlkEyyrdx5hAoy5uDNK6WrWjSJgn9hTClMde7s7e2P MxZbuwb2fBVmgbDY02IaTfXep/JbI6sLswYu+wx4J1ZTGWxGYK/nrDfT7jgwzlqw iLIKKDo8/WNEa4Euo837JepERDIK/YGz01nOqg/pmq46ei0+IR4qOPdpXegkHavI 1fMX4idbxEk0HPYJ1b7h0xcLFFc/1US5Zzc1z/BTD5hAdKGsoFG7uiN8tSO7AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUxfdAZPVin95dzzjIcTGpPdvo5IEwHwYDVR0j BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1 MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzMyMzgzMDMzM2E2MzMwMzAzMDNhNjUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzNjMyMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8AA4DANBgkqhkiG9w0BAQsFAAOCAQEAgRdl+rrQIIVUWQK3FrGlwL0r xbVXQFyvpXmZvTjsnsW9DT0cPAjseqivT+YhUpgrJwKFASevfRypcyx+atLcKehd kkoRVOdko6/WL5rYIU5nuV9qNB1l2eqexJ9C3EOhc/pPdGIPHVyEzMlhyFoNjVvL +xoHPC9eRGTzVj9HR9SWVvjQ8lf6iciJaQ+vGgvXT7j9jUUvvEsh+5KUsbOT3fLZ sOuZUq3KGyhHo+NWN/Q8i7EtfmXUNDuGOsNoAT6xkeFli6+zq6SLl5sAXpo4Xt7s 4VLveRFc9MKQeTBmGzLskQhSPt/dZhkQg7XG7CowdfzTfaXvXeAan16Uy9vDHg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:29 2026 by rpki-client