This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a333030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a333030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: J1UEC5Og+xiekBiItQ29Mv9BuL/51fRCRwIwaDXSD1U= Subject key identifier: 7C:59:70:A3:42:4F:79:A8:F9:DE:ED:7A:D3:BD:0F:2D:84:8C:44:21 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 7A82005EB6BCE62AABDAB782145C6F1246C1B902 Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a333030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:11 +0000 ROA not before: Fri 26 Dec 2025 17:51:11 +0000 ROA not after: Fri 25 Dec 2026 17:56:11 +0000 asID: 266832 IP address blocks: 2803:8ca0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:82:00:5e:b6:bc:e6:2a:ab:da:b7:82:14:5c:6f:12:46:c1:b9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:11 2025 GMT Not After : Dec 25 17:56:11 2026 GMT Subject: CN=7C5970A3424F79A8F9DEED7AD3BD0F2D848C4421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:94:2b:de:20:6b:44:d3:93:22:00:a7:10: b2:49:9b:f7:03:d0:88:be:61:48:d5:d7:2a:b1:27: 4f:a6:4a:08:0e:d1:ba:96:0e:f1:3f:e8:5b:eb:44: f0:07:e6:8b:e9:ae:be:90:95:2b:02:4c:c3:77:88: e1:1a:b1:6d:74:a7:2c:d1:54:43:90:cc:71:68:c6: a8:53:f5:bc:75:20:f8:6c:17:bf:8a:39:a5:39:82: 30:78:b6:11:65:f5:5b:bf:fc:a7:43:01:f0:ea:e1: 24:d8:c4:21:a3:de:a3:41:96:c7:fb:15:75:d6:14: e6:26:12:e9:a2:2b:3c:0d:79:86:75:84:28:0c:a9: 8d:6c:2e:c7:66:3e:66:1b:51:09:ee:36:d6:af:e9: c3:fb:38:e1:84:66:8e:4b:5b:40:ea:dd:ff:4a:23: 4e:3d:1a:be:fa:34:e3:43:05:76:88:46:1d:71:ac: 61:79:dc:56:9a:5f:1f:92:d0:9b:d0:4e:2e:50:c5: d7:c0:65:2d:13:da:d7:9e:28:00:d8:17:ff:4c:83: 1e:64:0a:c0:78:f8:51:e5:82:3d:f2:c6:16:36:67: d0:f0:6d:dc:32:2c:63:da:33:f1:bf:4f:39:8d:24: 32:cb:b7:7b:e0:67:c2:3f:45:79:bd:b5:b6:29:01: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:70:A3:42:4F:79:A8:F9:DE:ED:7A:D3:BD:0F:2D:84:8C:44:21 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a333030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 0e:dd:04:bd:82:d9:ca:d6:94:f1:17:1c:2b:a3:db:4a:02:cb: 59:ff:40:59:da:12:9e:2a:4d:41:1d:70:45:dc:d3:89:e7:a3: 37:0a:2d:8e:7c:67:e3:32:18:e3:71:a0:b6:bd:60:07:ba:04: 4d:7d:91:16:91:16:18:6d:21:dd:f5:7a:a7:03:9c:ef:9e:da: ad:73:65:37:d7:a7:21:26:7e:35:4c:59:18:65:04:53:36:55: 57:20:de:18:ea:88:96:6a:1d:d3:bd:33:55:64:52:ee:87:db: 3c:c4:b6:32:54:09:61:f7:71:56:9d:9d:63:bd:d2:2c:db:4e: 12:b3:33:2f:86:42:9c:33:1e:71:94:15:d9:22:0c:0f:4c:1d: 95:23:31:44:bb:82:9a:bc:aa:bf:71:80:cb:f7:b8:06:bb:e4: ab:ef:34:a3:cc:d7:f0:36:09:a9:b4:1f:48:ef:1d:d6:1f:3f: dc:d2:1b:9b:28:99:21:7c:45:6c:81:0f:ba:db:c8:66:5b:e2: 98:12:54:24:ff:72:2f:a1:fd:66:19:53:39:bd:d3:4d:53:2d: e3:a3:3d:a3:d6:f8:7f:d0:2e:c9:81:68:84:c5:83:86:90:99: 72:45:0e:cc:07:1e:eb:4c:c6:d9:05:84:73:f5:03:04:a3:22: 82:27:f8:f7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUeoIAXra85iqr2reCFFxvEkbBuQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMTFaFw0yNjEyMjUxNzU2MTFaMDMxMTAvBgNV BAMTKDdDNTk3MEEzNDI0Rjc5QThGOURFRUQ3QUQzQkQwRjJEODQ4QzQ0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIJQr3iBrRNOTIgCnELJJm/cD 0Ii+YUjV1yqxJ0+mSggO0bqWDvE/6FvrRPAH5ovprr6QlSsCTMN3iOEasW10pyzR VEOQzHFoxqhT9bx1IPhsF7+KOaU5gjB4thFl9Vu//KdDAfDq4STYxCGj3qNBlsf7 FXXWFOYmEumiKzwNeYZ1hCgMqY1sLsdmPmYbUQnuNtav6cP7OOGEZo5LW0Dq3f9K I049Gr76NONDBXaIRh1xrGF53FaaXx+S0JvQTi5QxdfAZS0T2teeKADYF/9Mgx5k CsB4+FHlgj3yxhY2Z9DwbdwyLGPaM/G/TzmNJDLLt3vgZ8I/RXm9tbYpASRBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfFlwo0JPeaj53u16070PLYSMRCEwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygMDANBgkqhkiG9w0BAQsFAAOCAQEADt0EvYLZytaU8RccK6PbSgLL Wf9AWdoSnipNQR1wRdzTieejNwotjnxn4zIY43Ggtr1gB7oETX2RFpEWGG0h3fV6 pwOc757arXNlN9enISZ+NUxZGGUEUzZVVyDeGOqIlmod070zVWRS7ofbPMS2MlQJ YfdxVp2dY73SLNtOErMzL4ZCnDMecZQV2SIMD0wdlSMxRLuCmryqv3GAy/e4Brvk q+80o8zX8DYJqbQfSO8d1h8/3NIbmyiZIXxFbIEPutvIZlvimBJUJP9yL6H9ZhlT Ob3TTVMt46M9o9b4f9AuyYFohMWDhpCZckUOzAce60zG2QWEc/UDBKMigif49w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:30:24 2026 by rpki-client