This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa File: 323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa (raw, json) Hash identifier: cGn4BqAmOTAr3F3POgNmDBYFRUwctFdKh+z37f2OyIc= Subject key identifier: 3F:7C:B0:D7:03:68:72:73:40:DB:1C:29:43:12:AB:0D:81:9D:72:B9 Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Certificate serial: 1A8B780FD8AEEA9F2CDCDFF90D5EED824AB33A9A Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa Signing time: Tue 06 Jan 2026 19:44:17 +0000 ROA not before: Tue 06 Jan 2026 19:39:17 +0000 ROA not after: Tue 05 Jan 2027 19:44:17 +0000 asID: 265554 IP address blocks: 2803:aba0:2000::/39 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8b:78:0f:d8:ae:ea:9f:2c:dc:df:f9:0d:5e:ed:82:4a:b3:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Validity Not Before: Jan 6 19:39:17 2026 GMT Not After : Jan 5 19:44:17 2027 GMT Subject: CN=3F7CB0D70368727340DB1C294312AB0D819D72B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:f9:32:4a:9e:5d:16:24:04:65:65:9c:f0: 94:69:db:68:c6:08:c1:b2:90:1e:c6:a2:be:f1:42: d6:0d:48:a6:39:6d:52:ab:6f:41:79:50:f4:38:34: 03:77:50:a2:d1:60:ea:1a:f5:49:51:a5:97:6e:f7: ad:b9:99:bb:b7:23:81:4a:8b:e0:db:53:ad:b0:90: 1a:0a:27:15:b8:98:29:69:b7:56:03:08:9a:44:f8: 68:dc:50:6f:ae:ea:62:20:e9:ce:2a:3c:9f:87:1a: d2:a9:18:20:b6:24:d4:00:6c:b3:b0:d6:48:60:d6: 3c:1e:04:dc:91:dc:cb:51:46:8e:59:3c:99:20:25: 09:c0:6c:31:fd:8e:6a:18:73:51:f7:9e:76:f0:b5: 3d:86:6d:68:54:c8:28:be:7e:3b:96:76:eb:e3:6a: 8d:8c:02:90:bb:95:c0:82:1c:d0:15:63:74:7b:24: 47:ea:80:5e:a5:b7:1d:a8:58:48:95:58:a4:1e:b7: c3:8d:60:15:39:65:35:84:f4:89:a2:58:c7:c6:33: ba:5e:90:df:7d:44:89:31:ff:93:9d:97:40:2c:3d: 30:88:a8:63:38:31:e5:05:fa:c8:93:ef:c7:75:ae: fd:4d:2b:d6:3a:0e:17:8a:ff:2d:7b:2d:8b:21:1d: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:B0:D7:03:68:72:73:40:DB:1C:29:43:12:AB:0D:81:9D:72:B9 X509v3 Authority Key Identifier: keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:aba0:2000::/39 Signature Algorithm: sha256WithRSAEncryption 18:c1:60:7f:d7:d8:0c:e6:d7:b1:79:6b:78:6f:e9:8b:a9:0c: d0:f8:01:87:95:3a:86:57:f1:48:6f:d4:7d:f8:8f:f3:3a:77: 93:ac:82:61:f9:28:53:37:54:6e:74:16:40:c8:18:71:ca:a2: ba:a6:fb:9c:2e:a7:9d:7a:4f:ba:1c:8e:5e:06:0c:1b:77:6c: 2b:3c:0a:8b:a2:50:ba:07:50:29:aa:aa:ba:6d:f5:6d:bf:e9: 0f:1c:a2:06:9b:26:64:93:aa:96:4e:e6:25:4c:83:83:9c:75: 7f:c1:01:98:95:b4:15:f7:d5:59:bf:f2:1d:24:cc:54:95:e1: a8:b1:77:c5:0b:ac:94:72:51:c9:6f:d3:cb:57:e1:ab:5a:be: c3:15:7a:5b:cf:aa:9f:1b:b9:b6:fb:2e:e2:76:36:02:80:75: da:06:5b:3c:53:35:f8:1c:cb:89:71:24:be:2c:e2:6d:2b:99: da:ab:8b:ec:bf:e2:10:3d:71:2a:e0:11:88:39:2c:99:eb:f3: db:20:df:69:ee:3a:09:ef:39:e6:78:d3:3b:e4:a5:04:6e:c5: cc:29:7e:e3:ba:5c:f4:d3:19:c6:97:2a:c1:7b:7b:a9:55:28: c6:94:0a:15:bc:d5:a2:c3:65:61:bb:48:1e:fd:bc:31:71:a2: 24:64:a6:c7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUGot4D9iu6p8s3N/5DV7tgkqzOpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF OEM2RDg0RDAeFw0yNjAxMDYxOTM5MTdaFw0yNzAxMDUxOTQ0MTdaMDMxMTAvBgNV BAMTKDNGN0NCMEQ3MDM2ODcyNzM0MERCMUMyOTQzMTJBQjBEODE5RDcyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qPkySp5dFiQEZWWc8JRp22jG CMGykB7Gor7xQtYNSKY5bVKrb0F5UPQ4NAN3UKLRYOoa9UlRpZdu9625mbu3I4FK i+DbU62wkBoKJxW4mClpt1YDCJpE+GjcUG+u6mIg6c4qPJ+HGtKpGCC2JNQAbLOw 1khg1jweBNyR3MtRRo5ZPJkgJQnAbDH9jmoYc1H3nnbwtT2GbWhUyCi+fjuWduvj ao2MApC7lcCCHNAVY3R7JEfqgF6ltx2oWEiVWKQet8ONYBU5ZTWE9ImiWMfGM7pe kN99RIkx/5Odl0AsPTCIqGM4MeUF+siT78d1rv1NK9Y6DheK/y17LYshHaK1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUP3yw1wNocnNA2xwpQxKrDYGdcrkwHwYDVR0j BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3 OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1 MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzMyMzgzMDMzM2E2MTYyNjEzMDNhMzIz MDMwMzAzYTNhMmYzMzM5MmQzNDMwMjAzZDNlMjAzMjM2MzUzNTM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEoA6ugIDANBgkqhkiG9w0BAQsFAAOCAQEAGMFgf9fYDObXsXlreG/pi6kM 0PgBh5U6hlfxSG/UffiP8zp3k6yCYfkoUzdUbnQWQMgYccqiuqb7nC6nnXpPuhyO XgYMG3dsKzwKi6JQugdQKaqqum31bb/pDxyiBpsmZJOqlk7mJUyDg5x1f8EBmJW0 FffVWb/yHSTMVJXhqLF3xQuslHJRyW/Ty1fhq1q+wxV6W8+qnxu5tvsu4nY2AoB1 2gZbPFM1+BzLiXEkvizibSuZ2quL7L/iED1xKuARiDksmevz2yDfae46Ce855njT O+SlBG7FzCl+47pc9NMZxpcqwXt7qVUoxpQKFbzVosNlYbtIHv28MXGiJGSmxw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:00 2026 by rpki-client