This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa File: 323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa (raw, json) Hash identifier: tOWZpiAcERgE2f62zFYhl2nCT/JctwAkmk+5gD2fyRk= Subject key identifier: 42:42:9B:86:59:7B:F7:B7:F0:5C:2B:D9:63:5B:F6:C6:5C:85:DB:4E Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Certificate serial: 26ACA34B2DF2F8054168C939068C446277B307E3 Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa Signing time: Tue 06 Jan 2026 19:44:17 +0000 ROA not before: Tue 06 Jan 2026 19:39:17 +0000 ROA not after: Tue 05 Jan 2027 19:44:17 +0000 asID: 265554 IP address blocks: 2803:aba0:2300::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ac:a3:4b:2d:f2:f8:05:41:68:c9:39:06:8c:44:62:77:b3:07:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Validity Not Before: Jan 6 19:39:17 2026 GMT Not After : Jan 5 19:44:17 2027 GMT Subject: CN=42429B86597BF7B7F05C2BD9635BF6C65C85DB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:3b:72:9e:8b:4c:0f:b6:d6:09:cc:78:26: 9f:e8:bd:71:41:28:e2:87:04:37:34:35:dc:c4:57: d1:6c:db:b5:ff:8f:23:b3:b4:e2:9a:d9:cd:48:54: 03:c7:32:95:60:fd:08:cb:29:d0:53:d1:58:e4:d4: 44:c1:f9:de:c2:24:9b:6f:9d:5d:e9:32:0c:ed:c0: 62:7c:f4:49:f5:89:24:dc:05:58:a9:98:8c:7f:66: ef:d8:9c:07:ff:4b:41:5b:7b:87:53:83:af:21:fc: 17:66:58:fb:cf:09:6c:e6:73:25:a0:76:27:33:aa: c1:22:f5:49:d5:f7:ce:35:c5:1c:4a:fc:2f:20:6d: 6d:3d:90:43:b8:67:59:79:c6:48:08:8b:8b:25:a0: b8:fb:2f:78:48:d2:54:e1:03:72:a1:36:54:39:77: 0a:e9:b7:82:d0:ea:a8:f4:87:68:3e:52:26:99:6f: d3:0d:1a:e2:18:38:c7:04:a7:80:03:97:68:fc:4e: e6:d0:dc:56:8c:2d:62:0d:78:38:6d:65:e8:8b:c0: 86:03:53:b9:a6:08:41:d4:89:d0:0a:54:6d:8c:b7: 9f:5e:94:c0:e0:eb:d2:36:ee:31:45:61:0d:75:dc: db:41:64:72:c0:b2:d0:0b:99:04:6a:4e:52:e2:33: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:9B:86:59:7B:F7:B7:F0:5C:2B:D9:63:5B:F6:C6:5C:85:DB:4E X509v3 Authority Key Identifier: keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:aba0:2300::/48 Signature Algorithm: sha256WithRSAEncryption 70:96:46:10:fb:93:c1:b2:aa:25:bd:0b:06:82:08:9a:d5:8f: 87:8e:cf:58:11:e6:df:14:65:fd:05:f5:fe:09:f5:d4:8d:99: 99:32:43:40:8a:8e:7d:34:f1:0b:91:00:86:1a:6f:4a:ba:44: 12:9a:45:99:84:0c:95:c9:7c:87:c1:d0:8f:a1:e2:bc:70:a6: 74:74:9a:f4:4c:c4:23:9a:78:17:99:e0:46:9f:85:48:93:4a: 16:71:16:42:86:ce:b9:d7:8f:f6:ba:1c:2d:02:0c:89:7d:a2: 15:de:44:bd:5b:57:ae:6a:42:86:26:60:80:8e:dd:29:b2:14: c4:41:d2:a5:89:f4:19:41:4c:fe:9e:4a:00:6a:33:68:84:f0: 4d:27:b4:74:eb:64:90:e4:f8:31:81:f9:97:77:b7:8e:55:a4: 9b:9a:fc:59:14:2d:e4:88:65:21:54:19:50:03:47:05:a5:80: 21:dd:e2:70:28:15:12:c0:7b:91:4b:9e:47:7f:57:db:27:33: 6f:04:89:4a:00:f6:c5:54:fa:50:4a:0c:53:33:e5:d4:10:54: f7:4b:a2:9d:05:26:cf:e2:98:04:af:0e:b4:ea:70:25:f8:ef: 21:71:1c:ad:d2:74:91:f8:27:66:6b:ce:8a:70:6b:78:e7:49: 04:43:cc:a4 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUJqyjSy3y+AVBaMk5BoxEYnezB+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF OEM2RDg0RDAeFw0yNjAxMDYxOTM5MTdaFw0yNzAxMDUxOTQ0MTdaMDMxMTAvBgNV BAMTKDQyNDI5Qjg2NTk3QkY3QjdGMDVDMkJEOTYzNUJGNkM2NUM4NURCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5ztynotMD7bWCcx4Jp/ovXFB KOKHBDc0NdzEV9Fs27X/jyOztOKa2c1IVAPHMpVg/QjLKdBT0Vjk1ETB+d7CJJtv nV3pMgztwGJ89En1iSTcBVipmIx/Zu/YnAf/S0Fbe4dTg68h/BdmWPvPCWzmcyWg diczqsEi9UnV9841xRxK/C8gbW09kEO4Z1l5xkgIi4sloLj7L3hI0lThA3KhNlQ5 dwrpt4LQ6qj0h2g+UiaZb9MNGuIYOMcEp4ADl2j8TubQ3FaMLWINeDhtZeiLwIYD U7mmCEHUidAKVG2Mt59elMDg69I27jFFYQ113NtBZHLAstALmQRqTlLiM96ZAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUQkKbhll797fwXCvZY1v2xlyF204wHwYDVR0j BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3 OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1 MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzMyMzgzMDMzM2E2MTYyNjEzMDNhMzIz MzMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNTM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA6ugIwAwDQYJKoZIhvcNAQELBQADggEBAHCWRhD7k8GyqiW9CwaCCJrV j4eOz1gR5t8UZf0F9f4J9dSNmZkyQ0CKjn008QuRAIYab0q6RBKaRZmEDJXJfIfB 0I+h4rxwpnR0mvRMxCOaeBeZ4EafhUiTShZxFkKGzrnXj/a6HC0CDIl9ohXeRL1b V65qQoYmYICO3SmyFMRB0qWJ9BlBTP6eSgBqM2iE8E0ntHTrZJDk+DGB+Zd3t45V pJua/FkULeSIZSFUGVADRwWlgCHd4nAoFRLAe5FLnkd/V9snM28EiUoA9sVU+lBK DFMz5dQQVPdLop0FJs/imASvDrTqcCX47yFxHK3SdJH4J2Zrzopwa3jnSQRDzKQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:59 2026 by rpki-client