This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa File: 323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa (raw, json) Hash identifier: IMhs69wLO4srK/J/L2wLUtmauB+x/tL804f7/CgBzzI= Subject key identifier: C2:B9:C6:76:B3:62:E4:58:9E:94:BD:6F:C6:A7:71:18:C1:8F:56:AA Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Certificate serial: 3928B95CE9126B63802948144D47155CA7925105 Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa Signing time: Tue 06 Jan 2026 19:44:17 +0000 ROA not before: Tue 06 Jan 2026 19:39:17 +0000 ROA not after: Tue 05 Jan 2027 19:44:17 +0000 asID: 265554 IP address blocks: 2803:aba0:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:28:b9:5c:e9:12:6b:63:80:29:48:14:4d:47:15:5c:a7:92:51:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Validity Not Before: Jan 6 19:39:17 2026 GMT Not After : Jan 5 19:44:17 2027 GMT Subject: CN=C2B9C676B362E4589E94BD6FC6A77118C18F56AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:0b:98:b7:78:25:39:66:cb:3b:45:0e:b4: 0e:b7:df:32:eb:ce:e7:20:ba:3b:b9:08:02:73:c3: 36:2c:47:09:8a:72:c9:de:2c:91:7e:d6:9a:38:e5: 40:1c:bb:d9:72:38:68:12:ee:83:e6:2f:0b:11:96: a1:33:ec:14:27:80:76:01:ae:b5:c0:03:08:b6:3d: 78:20:d2:56:7f:58:69:07:a0:26:4e:d4:2f:8a:e2: 41:b8:93:ec:95:f8:d7:75:5c:f3:bf:51:f4:c8:4d: f4:29:14:0f:2a:12:cf:17:8f:36:22:11:e8:b8:ea: 1e:f4:57:8b:9c:43:65:bd:f4:c9:c2:9e:9b:15:6d: a3:8f:9d:67:67:c9:36:83:a6:22:65:5d:f9:78:9d: 28:45:f9:cb:0f:58:3f:04:ba:a7:12:b1:72:8b:7e: 8f:51:0e:39:44:bb:03:24:37:87:54:dc:eb:c3:2a: 9a:44:2d:58:e6:a0:b0:23:37:bf:89:73:d4:b7:1c: bb:f5:2a:4a:11:96:90:9a:1c:44:57:4e:02:2f:d5: 19:24:e4:06:da:55:6c:45:30:0e:a3:32:df:3d:b7: 68:4d:73:4b:85:8e:9b:93:47:28:03:04:04:12:4f: 50:2d:18:cc:d2:4f:ae:62:db:e0:df:00:8a:99:21: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:C6:76:B3:62:E4:58:9E:94:BD:6F:C6:A7:71:18:C1:8F:56:AA X509v3 Authority Key Identifier: keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:aba0:2200::/40 Signature Algorithm: sha256WithRSAEncryption a8:5e:b3:b8:33:07:a6:14:16:cc:70:7a:63:98:e7:0c:77:04: 27:62:4d:cf:58:18:85:8c:d1:ef:66:89:83:3c:18:1b:6c:b2: 68:c4:81:3e:c4:61:f8:11:f0:f7:60:cf:82:20:aa:3c:62:c8: c4:f6:91:ef:c2:bb:b3:d1:30:86:b1:d0:e3:1e:a2:45:3a:fa: 04:6e:c3:53:8f:e1:c9:f0:27:1d:2a:03:b9:50:40:0b:a4:4d: 7f:cf:49:b1:5e:9e:ed:8c:9e:2b:e1:14:47:6e:68:cc:de:6e: c6:68:a6:4e:3e:54:93:53:f0:0d:bb:8f:b7:d5:9d:71:de:b3: e4:e7:7e:20:78:55:0a:23:cc:10:d5:fa:d1:c7:0f:b7:6f:63: 7a:88:94:90:89:d1:81:34:da:c5:9d:a3:db:d8:6b:d8:20:4c: 62:59:e9:8e:0f:a9:51:de:8f:0e:d4:d9:2a:32:3c:cc:81:d4: 4a:7b:e8:83:34:da:4a:dd:e2:95:a3:50:39:ef:0a:54:6a:eb: 2a:12:15:75:81:2a:f7:08:43:94:78:26:6f:db:74:3d:ae:8a: 0e:9d:ca:82:97:de:91:a9:66:36:c8:81:7e:7c:69:4f:c2:d5: 7b:2e:76:99:5f:c9:43:58:9d:4d:5c:70:5c:0e:2d:fd:30:2c: c4:fd:8f:ef -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUOSi5XOkSa2OAKUgUTUcVXKeSUQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF OEM2RDg0RDAeFw0yNjAxMDYxOTM5MTdaFw0yNzAxMDUxOTQ0MTdaMDMxMTAvBgNV BAMTKEMyQjlDNjc2QjM2MkU0NTg5RTk0QkQ2RkM2QTc3MTE4QzE4RjU2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGguYt3glOWbLO0UOtA633zLr zucguju5CAJzwzYsRwmKcsneLJF+1po45UAcu9lyOGgS7oPmLwsRlqEz7BQngHYB rrXAAwi2PXgg0lZ/WGkHoCZO1C+K4kG4k+yV+Nd1XPO/UfTITfQpFA8qEs8XjzYi Eei46h70V4ucQ2W99MnCnpsVbaOPnWdnyTaDpiJlXfl4nShF+csPWD8EuqcSsXKL fo9RDjlEuwMkN4dU3OvDKppELVjmoLAjN7+Jc9S3HLv1KkoRlpCaHERXTgIv1Rkk 5AbaVWxFMA6jMt89t2hNc0uFjpuTRygDBAQST1AtGMzST65i2+DfAIqZIVbpAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUwrnGdrNi5FielL1vxqdxGMGPVqowHwYDVR0j BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3 OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1 MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzMyMzgzMDMzM2E2MTYyNjEzMDNhMzIz MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzUzNTM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA6ugIjANBgkqhkiG9w0BAQsFAAOCAQEAqF6zuDMHphQWzHB6Y5jnDHcE J2JNz1gYhYzR72aJgzwYG2yyaMSBPsRh+BHw92DPgiCqPGLIxPaR78K7s9EwhrHQ 4x6iRTr6BG7DU4/hyfAnHSoDuVBAC6RNf89JsV6e7YyeK+EUR25ozN5uxmimTj5U k1PwDbuPt9Wdcd6z5Od+IHhVCiPMENX60ccPt29jeoiUkInRgTTaxZ2j29hr2CBM Ylnpjg+pUd6PDtTZKjI8zIHUSnvogzTaSt3ilaNQOe8KVGrrKhIVdYEq9whDlHgm b9t0Pa6KDp3KgpfekalmNsiBfnxpT8LVey52mV/JQ1idTVxwXA4t/TAsxP2P7w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:00 2026 by rpki-client