This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a663030303a3a2f33362d3336203d3e20323634363238.roa File: 323830333a633030303a663030303a3a2f33362d3336203d3e20323634363238.roa (raw, json) Hash identifier: 2Hte9ZcrtkS0b5czHn0iUGVbEZGd69KBdsc6yFEUiIA= Subject key identifier: A3:21:4C:9A:C9:DC:E3:94:D7:3A:C7:4D:5C:8F:B6:0F:FB:31:AA:65 Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Certificate serial: 12F83CDC06A1FC3D31F0C98C1D56814E407F3599 Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a663030303a3a2f33362d3336203d3e20323634363238.roa Signing time: Wed 07 Jan 2026 20:45:01 +0000 ROA not before: Wed 07 Jan 2026 20:40:01 +0000 ROA not after: Wed 06 Jan 2027 20:45:01 +0000 asID: 264628 IP address blocks: 2803:c000:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:3c:dc:06:a1:fc:3d:31:f0:c9:8c:1d:56:81:4e:40:7f:35:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133 Validity Not Before: Jan 7 20:40:01 2026 GMT Not After : Jan 6 20:45:01 2027 GMT Subject: CN=A3214C9AC9DCE394D73AC74D5C8FB60FFB31AA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:dd:be:6e:a4:fd:a5:b9:68:a7:86:6c:d2: a6:db:0b:48:38:11:99:a7:d1:dc:75:e5:41:1c:85: 6a:5d:cf:57:c7:2c:df:12:63:3e:dc:09:55:58:c5: 5e:41:7b:d0:c6:68:7c:48:aa:59:0b:b8:ab:04:09: 79:e1:fc:a1:a8:19:c9:f2:a2:cf:6a:f5:de:19:72: 6b:b8:4e:cf:61:cb:2e:0b:8c:f9:65:ea:a7:d7:fd: 34:62:c3:20:a1:99:32:05:0f:bb:90:52:94:86:86: 1a:8b:7a:6f:3e:29:af:ef:fb:82:91:e1:9f:12:4c: c6:b3:28:8f:36:34:9a:a1:c3:76:2e:dc:a8:e5:bc: 65:b1:62:8c:57:4c:f4:af:d8:ef:02:97:f2:c5:f1: 72:f0:0d:fe:85:ba:5b:26:21:1e:95:60:c1:9f:29: aa:5a:ec:84:cb:c5:6d:05:79:69:09:00:9e:95:24: ec:63:10:fe:c8:19:0e:0d:d0:06:06:96:b6:98:64: 12:3d:05:be:e3:d9:51:8f:4a:76:52:72:25:78:d5: 02:e6:b9:23:6f:d7:3d:12:3e:03:8c:10:87:3a:0c: f1:d1:b2:73:96:83:05:3f:99:ff:f6:6c:87:04:5b: dd:a4:0f:b1:dc:7e:bf:47:3a:dd:d6:61:a0:48:a6: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:4C:9A:C9:DC:E3:94:D7:3A:C7:4D:5C:8F:B6:0F:FB:31:AA:65 X509v3 Authority Key Identifier: keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a663030303a3a2f33362d3336203d3e20323634363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c000:f000::/36 Signature Algorithm: sha256WithRSAEncryption 33:f0:40:56:70:e1:14:42:eb:bf:6d:f1:cc:fc:63:ce:14:50: 21:5e:2f:81:db:1c:a7:f4:b4:d7:99:99:5b:3d:5f:df:86:38: 30:12:ce:33:3a:b8:c0:c8:f3:a5:87:56:06:93:e9:cc:55:44: 30:0d:df:99:65:9d:47:1e:53:a1:7f:a0:d9:ab:76:5e:d0:20: ab:9b:a6:ab:a2:5f:ca:02:6c:87:76:e3:58:63:03:c2:47:5d: 32:be:aa:9b:76:89:b2:a7:54:e9:8c:1f:68:14:5b:8a:39:16: 5c:d9:35:de:0b:b6:d2:9d:9f:0d:c5:42:82:20:44:72:6f:70: 8b:4f:0f:6a:95:19:a8:00:41:7b:4b:76:3f:30:66:e4:b8:eb: 66:96:21:4d:f9:71:e2:0e:d7:e5:1f:69:c9:14:75:01:2a:97: 7a:48:1d:c3:b4:20:23:27:71:92:e6:12:0b:b8:ab:09:4e:55: 21:03:54:c3:08:3c:75:0b:9e:a6:86:05:b3:c7:b1:ae:1b:62: 40:d7:71:80:af:23:34:d1:75:f8:fc:70:4c:1a:b1:4a:42:61: 78:c0:63:f4:fd:5f:82:46:4a:3d:2d:e6:34:ee:46:69:4b:c0: 08:8c:f6:7e:87:86:35:06:bf:30:c6:aa:9f:af:cd:70:02:71: 1d:dc:54:c9 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEvg83Aah/D0x8MmMHVaBTkB/NZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD MzVCRDEzMzAeFw0yNjAxMDcyMDQwMDFaFw0yNzAxMDYyMDQ1MDFaMDMxMTAvBgNV BAMTKEEzMjE0QzlBQzlEQ0UzOTRENzNBQzc0RDVDOEZCNjBGRkIzMUFBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMV92+bqT9pblop4Zs0qbbC0g4 EZmn0dx15UEchWpdz1fHLN8SYz7cCVVYxV5Be9DGaHxIqlkLuKsECXnh/KGoGcny os9q9d4Zcmu4Ts9hyy4LjPll6qfX/TRiwyChmTIFD7uQUpSGhhqLem8+Ka/v+4KR 4Z8STMazKI82NJqhw3Yu3KjlvGWxYoxXTPSv2O8Cl/LF8XLwDf6FulsmIR6VYMGf Kapa7ITLxW0FeWkJAJ6VJOxjEP7IGQ4N0AYGlraYZBI9Bb7j2VGPSnZSciV41QLm uSNv1z0SPgOMEIc6DPHRsnOWgwU/mf/2bIcEW92kD7Hcfr9HOt3WYaBIplSnAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUoyFMmsnc45TXOsdNXI+2D/sxqmUwHwYDVR0j BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1 MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzMyMzgzMDMzM2E2MzMwMzAzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzNjMyMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8AA8DANBgkqhkiG9w0BAQsFAAOCAQEAM/BAVnDhFELrv23xzPxjzhRQ IV4vgdscp/S015mZWz1f34Y4MBLOMzq4wMjzpYdWBpPpzFVEMA3fmWWdRx5ToX+g 2at2XtAgq5umq6JfygJsh3bjWGMDwkddMr6qm3aJsqdU6YwfaBRbijkWXNk13gu2 0p2fDcVCgiBEcm9wi08PapUZqABBe0t2PzBm5LjrZpYhTflx4g7X5R9pyRR1ASqX ekgdw7QgIydxkuYSC7irCU5VIQNUwwg8dQuepoYFs8exrhtiQNdxgK8jNNF1+Pxw TBqxSkJheMBj9P1fgkZKPS3mNO5GaUvACIz2foeGNQa/MMaqn6/NcAJxHdxUyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:29 2026 by rpki-client