This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: VZUdRVbAkUVfGmGZjghz6D/nrT4bJSaOApTjId56LIw= Subject key identifier: BE:08:9C:67:FD:86:FB:15:40:26:F9:11:50:21:97:00:48:F2:75:C7 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 79043D0102D59D57DE70EC8305E6C1BC7DDB0859 Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:09 +0000 ROA not before: Fri 26 Dec 2025 17:51:09 +0000 ROA not after: Fri 25 Dec 2026 17:56:09 +0000 asID: 266832 IP address blocks: 2803:8ca0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:04:3d:01:02:d5:9d:57:de:70:ec:83:05:e6:c1:bc:7d:db:08:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:09 2025 GMT Not After : Dec 25 17:56:09 2026 GMT Subject: CN=BE089C67FD86FB154026F9115021970048F275C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:63:d4:b5:c3:ce:f9:c4:b8:d6:7f:57:4b: c1:78:cf:17:5c:64:fa:57:e7:70:de:ab:3d:8f:82: be:6a:77:29:a4:a6:6f:fe:3c:a3:74:1e:fe:52:d9: 35:10:59:7e:0a:c3:43:36:a8:52:53:de:71:b4:09: c9:5e:f0:7a:88:51:74:56:c3:cc:23:6f:4d:27:e8: 80:bf:fa:20:4b:2d:22:5a:2d:a7:22:48:22:e0:d7: b6:cb:67:7e:88:53:a6:88:a8:c3:ae:59:1c:19:34: 37:83:56:1f:39:8d:7b:07:6a:01:d1:52:45:60:04: 0e:f1:34:fe:14:76:f9:ea:92:0c:07:20:31:ce:e2: 75:4b:bf:84:fc:16:c3:95:66:f8:fc:b5:5f:2f:e2: 6f:10:34:c1:4e:f5:f0:bd:81:75:43:46:a0:e6:5d: 93:e9:c4:a6:37:88:72:b8:fe:98:4c:00:6a:03:e6: 83:41:e9:16:b4:de:e0:29:56:25:2a:93:c9:6f:2f: de:07:ca:41:c0:92:fe:35:1c:69:0f:09:7e:3c:38: c0:36:86:25:f5:3b:2d:27:66:7c:f3:c1:47:27:bb: 8d:10:ba:6e:c0:93:fa:45:cc:87:b4:31:b9:ec:0b: 64:ac:21:59:b6:67:23:81:3e:35:4d:fe:15:5b:36: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:9C:67:FD:86:FB:15:40:26:F9:11:50:21:97:00:48:F2:75:C7 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6a:39:03:bb:00:10:cb:a3:9d:4f:59:ec:f5:95:d8:77:55:29: a3:de:22:f7:db:b8:ea:c9:44:38:97:ff:f0:63:65:7d:45:55: d3:92:bb:4c:74:d0:66:82:89:1c:9b:b8:f5:65:42:f6:92:b8: 7e:3d:a2:dc:ed:50:84:d9:bf:0e:a8:2e:40:82:eb:dc:d5:dd: 90:e3:4c:e8:c5:63:be:dd:5e:4f:1d:ba:ab:4b:6a:dd:7d:38: 31:f9:22:0a:c8:a4:c4:30:78:e4:4a:77:39:41:8c:07:9a:2a: 75:12:d5:66:9d:a3:8f:89:c8:ad:47:39:86:fb:cd:45:95:37: 9e:42:13:f4:29:80:b3:dd:dc:b3:81:9a:26:a6:52:c9:8b:42: 41:7d:9e:a9:f0:a0:37:62:f0:45:6d:59:7a:ed:6c:47:a6:78: ef:98:9a:c2:6b:23:3d:19:89:b5:af:37:54:63:07:45:58:b6: c2:66:72:4c:ce:b8:04:85:5b:fe:ef:a2:90:f1:31:08:13:15: 2a:de:ad:d4:6c:59:b1:00:05:a0:5f:e6:6c:43:d6:ac:3f:85: a6:3b:f9:b3:63:12:b1:f1:6b:47:98:13:a0:cd:6a:30:74:0a: 3a:88:a8:07:31:47:5e:88:ca:28:88:82:73:41:bd:6c:27:ca: 35:90:8f:7b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUeQQ9AQLVnVfecOyDBebBvH3bCFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMDlaFw0yNjEyMjUxNzU2MDlaMDMxMTAvBgNV BAMTKEJFMDg5QzY3RkQ4NkZCMTU0MDI2RjkxMTUwMjE5NzAwNDhGMjc1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFGPUtcPO+cS41n9XS8F4zxdc ZPpX53Deqz2Pgr5qdymkpm/+PKN0Hv5S2TUQWX4Kw0M2qFJT3nG0Ccle8HqIUXRW w8wjb00n6IC/+iBLLSJaLaciSCLg17bLZ36IU6aIqMOuWRwZNDeDVh85jXsHagHR UkVgBA7xNP4UdvnqkgwHIDHO4nVLv4T8FsOVZvj8tV8v4m8QNMFO9fC9gXVDRqDm XZPpxKY3iHK4/phMAGoD5oNB6Ra03uApViUqk8lvL94HykHAkv41HGkPCX48OMA2 hiX1Oy0nZnzzwUcnu40Qum7Ak/pFzIe0MbnsC2SsIVm2ZyOBPjVN/hVbNoZDAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUvgicZ/2G+xVAJvkRUCGXAEjydccwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygEDANBgkqhkiG9w0BAQsFAAOCAQEAajkDuwAQy6OdT1ns9ZXYd1Up o94i99u46slEOJf/8GNlfUVV05K7THTQZoKJHJu49WVC9pK4fj2i3O1QhNm/Dqgu QILr3NXdkONM6MVjvt1eTx26q0tq3X04MfkiCsikxDB45Ep3OUGMB5oqdRLVZp2j j4nIrUc5hvvNRZU3nkIT9CmAs93cs4GaJqZSyYtCQX2eqfCgN2LwRW1Zeu1sR6Z4 75iawmsjPRmJta83VGMHRVi2wmZyTM64BIVb/u+ikPExCBMVKt6t1GxZsQAFoF/m bEPWrD+Fpjv5s2MSsfFrR5gToM1qMHQKOoioBzFHXojKKIiCc0G9bCfKNZCPew== -----END CERTIFICATE-----Generated at Mon Jan 26 00:23:13 2026 by rpki-client