This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa File: 323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa (raw, json) Hash identifier: zCmBAM3E0l4xuOxFV8A7kY02x6OQCwaMqbST2eDzJqA= Subject key identifier: E9:9E:CE:32:F0:97:2D:EB:7D:0E:D2:A2:63:A4:35:D4:2E:E1:47:0C Certificate issuer: /CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B Certificate serial: 43AB4C059AA5DB5B693CD31BBDF83287D7FA5161 Authority key identifier: C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa Signing time: Tue 06 Jan 2026 19:18:57 +0000 ROA not before: Tue 06 Jan 2026 19:13:57 +0000 ROA not after: Tue 05 Jan 2027 19:18:57 +0000 asID: 273140 IP address blocks: 2803:8c50:8000::/33 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 00:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ab:4c:05:9a:a5:db:5b:69:3c:d3:1b:bd:f8:32:87:d7:fa:51:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B Validity Not Before: Jan 6 19:13:57 2026 GMT Not After : Jan 5 19:18:57 2027 GMT Subject: CN=E99ECE32F0972DEB7D0ED2A263A435D42EE1470C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ec:f3:fd:03:b5:62:54:8c:2a:42:f8:30:6c: 01:7d:6b:83:a7:e1:d1:ab:63:41:6d:1e:a1:ce:de: 46:a1:20:74:5c:90:5c:66:5b:24:7e:61:b2:33:79: f9:f9:fc:d5:9b:e1:47:63:5d:52:62:ee:d4:ef:9d: b5:87:1e:c9:24:af:c9:1b:32:4a:1a:80:3a:d2:21: bd:92:a0:1c:b7:a0:b0:2d:16:c8:c6:e0:ca:e6:fc: 17:57:e1:68:03:ac:94:18:f9:f9:2d:1e:5a:a1:19: 4e:4f:59:1e:2a:9c:32:fb:d2:eb:e9:63:6c:a9:c3: b9:3a:51:f1:d5:46:88:e0:61:8d:de:c9:db:68:40: 9e:a0:7b:5c:e9:d8:26:d6:99:d8:8e:fd:aa:56:71: 35:f7:27:2a:11:da:d9:9a:46:f0:85:ca:bb:42:16: 27:ad:67:10:9b:a7:95:4b:07:f8:f1:dd:c0:87:35: 0d:0e:08:ef:e4:a5:2d:40:02:98:55:2a:e9:fa:f0: 77:bd:9d:63:ec:6a:eb:4f:30:7c:1b:bc:3f:75:34: 71:e3:e2:5e:12:3b:5e:de:cb:52:95:06:bd:19:6c: 0a:7e:3b:b1:46:6c:2c:36:d6:43:03:c1:33:fc:df: 83:63:53:84:2d:4a:41:11:77:50:8e:e9:8b:e6:ef: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:CE:32:F0:97:2D:EB:7D:0E:D2:A2:63:A4:35:D4:2E:E1:47:0C X509v3 Authority Key Identifier: keyid:C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a383030303a3a2f33332d3430203d3e20323733313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8c50:8000::/33 Signature Algorithm: sha256WithRSAEncryption 4d:75:29:62:17:34:df:5b:77:4b:9a:60:5b:b4:d3:38:23:98: 4c:b9:bc:20:f7:c3:c6:2d:70:35:ea:19:09:4f:5a:60:17:64: d0:95:c3:00:97:a0:58:70:7a:95:55:fe:90:60:a1:d7:5a:f8: 36:67:c7:a2:c8:db:cb:39:a1:39:84:56:89:52:9c:84:fa:86: 24:fb:08:9e:b7:a8:e8:5c:95:66:69:df:53:4e:33:b2:43:07: ed:a1:26:24:8a:aa:e9:36:c3:28:58:79:55:08:3e:fa:56:81: ad:ee:e2:80:33:dd:83:73:3a:2a:0b:70:00:f7:5a:9e:98:48: 60:9e:17:37:4b:23:2b:a1:bc:28:1f:5f:db:9a:44:a3:ec:68: 36:70:36:15:49:f5:a8:4c:83:ef:9b:14:a8:71:88:d6:89:23: ed:ce:40:a3:ec:44:4f:fe:79:cc:af:08:66:0d:a2:ab:e6:d3: 44:b1:21:da:65:15:d7:f8:b8:99:f1:c8:c1:b4:67:41:e9:e6: 47:09:a9:1c:67:f8:1a:b0:f3:a3:a0:78:a0:fc:74:63:23:e4: 51:69:86:07:6e:29:97:ba:98:c2:bb:7d:90:4c:5b:f5:3d:ae: 64:4f:33:8a:80:be:2a:3f:f8:8a:12:83:02:64:83:b5:a5:e5: 9c:04:e1:a4 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQ6tMBZql21tpPNMbvfgyh9f6UWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODVGNjk3MzJEMzM2MzIwQ0MxNTg4REM2QjE2RDlG NTREREU5QjAeFw0yNjAxMDYxOTEzNTdaFw0yNzAxMDUxOTE4NTdaMDMxMTAvBgNV BAMTKEU5OUVDRTMyRjA5NzJERUI3RDBFRDJBMjYzQTQzNUQ0MkVFMTQ3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7PP9A7ViVIwqQvgwbAF9a4On 4dGrY0FtHqHO3kahIHRckFxmWyR+YbIzefn5/NWb4UdjXVJi7tTvnbWHHskkr8kb MkoagDrSIb2SoBy3oLAtFsjG4Mrm/BdX4WgDrJQY+fktHlqhGU5PWR4qnDL70uvp Y2ypw7k6UfHVRojgYY3eydtoQJ6ge1zp2CbWmdiO/apWcTX3JyoR2tmaRvCFyrtC FietZxCbp5VLB/jx3cCHNQ0OCO/kpS1AAphVKun68He9nWPsautPMHwbvD91NHHj 4l4SO17ey1KVBr0ZbAp+O7FGbCw21kMDwTP834NjU4QtSkERd1CO6Yvm7749AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU6Z7OMvCXLet9DtKiY6Q11C7hRwwwHwYDVR0j BBgwFoAUyFhfaXMtM2MgzBWI3GsW2fVN3pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOUNDRUM3MEMxREE4MjUzRTc2OUQ4OTMwNjQ3QURFOTBE ODQ1QzFERkMzNEQyM0MxNkQ3Nzk4REM3OTkzOUVFLzAvQzg1ODVGNjk3MzJEMzM2 MzIwQ0MxNTg4REM2QjE2RDlGNTREREU5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODU4NUY2OTczMkQzMzYzMjBD QzE1ODhEQzZCMTZEOUY1NERERTlCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjlDQ0VDNzBDMURBODI1M0U3NjlEODkzMDY0N0FERTkwRDg0NUMxREZD MzREMjNDMTZENzc5OERDNzk5MzlFRS8wLzMyMzgzMDMzM2EzODYzMzUzMDNhMzgz MDMwMzAzYTNhMmYzMzMzMmQzNDMwMjAzZDNlMjAzMjM3MzMzMTM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgcoA4xQgDANBgkqhkiG9w0BAQsFAAOCAQEATXUpYhc031t3S5pgW7TTOCOY TLm8IPfDxi1wNeoZCU9aYBdk0JXDAJegWHB6lVX+kGCh11r4NmfHosjbyzmhOYRW iVKchPqGJPsInreo6FyVZmnfU04zskMH7aEmJIqq6TbDKFh5VQg++laBre7igDPd g3M6KgtwAPdanphIYJ4XN0sjK6G8KB9f25pEo+xoNnA2FUn1qEyD75sUqHGI1okj 7c5Ao+xET/55zK8IZg2iq+bTRLEh2mUV1/i4mfHIwbRnQenmRwmpHGf4GrDzo6B4 oPx0YyPkUWmGB24pl7qYwrt9kExb9T2uZE8zioC+Kj/4ihKDAmSDtaXlnAThpA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:24:10 2026 by rpki-client