This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa File: 323830333a643038303a3a2f33322d3634203d3e203237393630.roa (raw, json) Hash identifier: 4VuVqCqg5NV0Fo7uWo9TI41CWhN6vh3aRKi2g3Y+SZM= Subject key identifier: 61:2E:EF:3F:40:0B:B5:E8:A2:3B:FD:30:B0:8D:50:2B:A9:DF:72:A3 Certificate issuer: /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666 Certificate serial: 4A9EE7D51A76A970D4453B0F0785F35C358D0652 Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa Signing time: Tue 06 Jan 2026 19:25:48 +0000 ROA not before: Tue 06 Jan 2026 19:20:48 +0000 ROA not after: Tue 05 Jan 2027 19:25:48 +0000 asID: 27960 IP address blocks: 2803:d080::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 17:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9e:e7:d5:1a:76:a9:70:d4:45:3b:0f:07:85:f3:5c:35:8d:06:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666 Validity Not Before: Jan 6 19:20:48 2026 GMT Not After : Jan 5 19:25:48 2027 GMT Subject: CN=612EEF3F400BB5E8A23BFD30B08D502BA9DF72A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:b8:ee:0d:9e:9e:13:1c:a6:80:23:36:83: aa:94:c2:2f:f3:dc:8b:c6:78:db:4f:0f:2a:39:c3: bc:5b:71:2b:f0:9a:d4:66:e2:cb:e6:fa:4e:45:99: 66:d5:ba:98:f3:2f:25:24:56:8c:4b:ae:59:83:57: c2:83:70:95:41:d9:b7:9a:80:4e:80:04:52:b9:d8: b5:fa:61:bd:2c:48:25:36:a5:ac:35:3a:91:de:f1: e3:9c:54:ae:5c:c9:c8:d8:89:30:16:a4:ce:c7:02: d4:00:30:f4:a0:d3:b1:8f:dd:64:1b:5e:5c:6a:1d: f4:f8:5a:a4:1c:02:dd:7f:c5:c2:e8:a1:0c:a9:e2: 9d:12:ef:54:cb:62:e1:d6:24:d8:85:79:75:70:7f: fe:27:f0:d2:8c:72:f7:28:32:4c:b8:ee:db:c7:54: a4:95:cc:b2:f4:83:d8:93:24:0c:bc:b3:0b:b0:68: 26:97:8b:81:f7:52:60:f5:56:1f:e5:e8:16:fa:72: b5:b1:ff:c7:71:b2:c0:d1:79:ad:66:e3:1d:c2:9d: 25:0e:7a:73:a5:f9:84:3a:52:f3:35:35:de:d0:94: c5:25:8e:f7:72:2e:18:e0:d0:57:d0:33:24:7e:85: 15:6d:89:e4:54:1c:d9:3a:99:68:96:3e:26:2e:e0: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2E:EF:3F:40:0B:B5:E8:A2:3B:FD:30:B0:8D:50:2B:A9:DF:72:A3 X509v3 Authority Key Identifier: keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d080::/32 Signature Algorithm: sha256WithRSAEncryption 57:ec:b0:7b:7c:ab:65:e8:84:36:05:75:36:3c:30:4c:03:7a: 15:b1:4e:96:68:56:a6:de:73:3f:27:5d:52:c3:d0:d0:92:25: 56:4d:1a:a3:ec:f5:d2:d1:68:49:a1:27:00:98:58:7d:b5:2d: 54:0c:99:a1:63:86:c2:2e:63:df:70:f7:c7:7f:9a:3c:b2:82: 97:8a:d2:2e:8a:3e:6c:ec:34:f1:7b:c1:f9:03:84:bf:1b:4a: ea:cf:28:7b:70:c4:c4:59:d1:9a:ea:ae:86:26:af:9d:fc:f5: bd:ad:19:97:7c:80:f5:4e:36:45:ab:88:15:0d:b1:6c:76:36: e1:dd:5e:83:cc:37:a1:99:cb:15:35:9d:c2:d5:d0:95:39:12: 9e:b0:6b:a8:e0:a1:2a:ac:0d:c5:76:03:75:41:01:ed:0f:99: 89:00:5f:e3:ef:24:d6:9b:3e:c1:38:3f:60:26:65:a8:94:5e: 7f:d1:e3:cd:63:26:70:f9:a4:ad:a2:5c:47:01:45:53:4b:fd: bf:c8:e5:74:ef:76:57:9b:2b:92:6f:1c:d4:8f:e2:9d:e9:5c: 52:54:b2:84:65:14:ae:18:eb:ef:44:97:8c:b7:8e:df:cf:36: 2e:c2:90:b8:bd:df:89:8f:de:f1:23:3f:18:43:6c:df:9c:e5: cc:d1:f0:10 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUSp7n1Rp2qXDURTsPB4XzXDWNBlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNGMkYwRTQ4RTBB NDYzMzY2NjAeFw0yNjAxMDYxOTIwNDhaFw0yNzAxMDUxOTI1NDhaMDMxMTAvBgNV BAMTKDYxMkVFRjNGNDAwQkI1RThBMjNCRkQzMEIwOEQ1MDJCQTlERjcyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt9LjuDZ6eExymgCM2g6qUwi/z 3IvGeNtPDyo5w7xbcSvwmtRm4svm+k5FmWbVupjzLyUkVoxLrlmDV8KDcJVB2bea gE6ABFK52LX6Yb0sSCU2paw1OpHe8eOcVK5cycjYiTAWpM7HAtQAMPSg07GP3WQb XlxqHfT4WqQcAt1/xcLooQyp4p0S71TLYuHWJNiFeXVwf/4n8NKMcvcoMky47tvH VKSVzLL0g9iTJAy8swuwaCaXi4H3UmD1Vh/l6Bb6crWx/8dxssDRea1m4x3CnSUO enOl+YQ6UvM1Nd7QlMUljvdyLhjg0FfQMyR+hRVtieRUHNk6mWiWPiYu4OiTAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUYS7vP0ALteiiO/0wsI1QK6nfcqMwHwYDVR0j BBgwFoAU25+nf35eXijMWVvPLw5I4KRjNmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4 REE3QzA5QzQxMUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUy OENDNTk1QkNGMkYwRTQ4RTBBNDYzMzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjlGQTc3RjdFNUU1RTI4Q0M1 OTVCQ0YyRjBFNDhFMEE0NjMzNjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2RDUwMjZDMUYwOERBN0MwOUM0 MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzMyMzgzMDMzM2E2NDMwMzgzMDNhM2Ey ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzczOTM2MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9CAMA0G CSqGSIb3DQEBCwUAA4IBAQBX7LB7fKtl6IQ2BXU2PDBMA3oVsU6WaFam3nM/J11S w9DQkiVWTRqj7PXS0WhJoScAmFh9tS1UDJmhY4bCLmPfcPfHf5o8soKXitIuij5s 7DTxe8H5A4S/G0rqzyh7cMTEWdGa6q6GJq+d/PW9rRmXfID1TjZFq4gVDbFsdjbh 3V6DzDehmcsVNZ3C1dCVORKesGuo4KEqrA3FdgN1QQHtD5mJAF/j7yTWmz7BOD9g JmWolF5/0ePNYyZw+aStolxHAUVTS/2/yOV073ZXmyuSbxzUj+Kd6VxSVLKEZRSu GOvvRJeMt47fzzYuwpC4vd+Jj97xIz8YQ2zfnOXM0fAQ -----END CERTIFICATE-----Generated at Sun Jan 25 11:33:49 2026 by rpki-client