This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/323830363a3361343a3a2f33322d3332203d3e20323635363233.roa File: 323830363a3361343a3a2f33322d3332203d3e20323635363233.roa (raw, json) Hash identifier: x71BL0ahppLixZEgpnIIMoD2ldln25J2ra+2De0SImk= Subject key identifier: 84:3A:12:82:E0:17:44:75:8A:27:D3:E2:02:28:D8:1F:CD:A5:BE:7F Certificate issuer: /CN=820671988E907632A2724A1AD953CE30FC87B161 Certificate serial: 2402CA882A46D615110E1027CB4A515B0D228FB7 Authority key identifier: 82:06:71:98:8E:90:76:32:A2:72:4A:1A:D9:53:CE:30:FC:87:B1:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/820671988E907632A2724A1AD953CE30FC87B161.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/323830363a3361343a3a2f33322d3332203d3e20323635363233.roa Signing time: Tue 06 Jan 2026 19:41:51 +0000 ROA not before: Tue 06 Jan 2026 19:36:51 +0000 ROA not after: Tue 05 Jan 2027 19:41:51 +0000 asID: 265623 IP address blocks: 2806:3a4::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/820671988E907632A2724A1AD953CE30FC87B161.crl rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/820671988E907632A2724A1AD953CE30FC87B161.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/820671988E907632A2724A1AD953CE30FC87B161.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 11:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:02:ca:88:2a:46:d6:15:11:0e:10:27:cb:4a:51:5b:0d:22:8f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820671988E907632A2724A1AD953CE30FC87B161 Validity Not Before: Jan 6 19:36:51 2026 GMT Not After : Jan 5 19:41:51 2027 GMT Subject: CN=843A1282E01744758A27D3E20228D81FCDA5BE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:f3:f3:ba:8a:9f:66:7b:d7:47:4b:ec:11: 89:e0:80:eb:c7:99:a4:8e:ce:cf:3b:f4:45:c4:05: 81:19:13:00:9c:08:0a:fc:21:78:7f:db:03:15:0a: 47:ef:24:6f:28:3f:12:0e:12:86:da:ff:df:53:c0: 32:32:a8:18:ee:f8:cc:b8:7f:a3:10:70:b0:77:2f: 03:61:4a:4d:45:87:e4:78:e8:93:4f:d5:2d:e2:ae: 9e:0d:af:a7:af:c3:cd:3c:70:af:55:f7:30:cb:e7: e3:bf:7c:ac:aa:e7:42:9c:41:84:71:1d:da:4b:57: df:a8:e6:b0:e4:7b:9e:60:83:67:b7:63:03:ac:ff: 61:d7:d2:11:3c:58:8d:ed:41:4d:fc:0b:36:b0:43: 6c:4d:f0:7d:ad:f1:3f:7f:db:68:44:9b:b4:7f:c8: 4e:55:d2:ea:79:3c:75:33:d6:0c:7f:ea:b7:7a:3c: df:1c:de:b1:1d:28:87:e4:2d:ea:2a:8f:5e:9a:0f: 0f:fc:0b:59:be:62:66:0a:d0:69:4f:aa:2b:f1:17: c4:c6:5f:8d:ba:bf:98:37:12:e3:fa:d6:7f:a0:2a: 27:b7:dc:a9:31:cd:3b:30:0b:24:98:f6:09:b8:82: 72:42:d8:fb:9f:69:f0:4c:e3:44:42:b4:97:d4:7e: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3A:12:82:E0:17:44:75:8A:27:D3:E2:02:28:D8:1F:CD:A5:BE:7F X509v3 Authority Key Identifier: keyid:82:06:71:98:8E:90:76:32:A2:72:4A:1A:D9:53:CE:30:FC:87:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/820671988E907632A2724A1AD953CE30FC87B161.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/820671988E907632A2724A1AD953CE30FC87B161.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/323830363a3361343a3a2f33322d3332203d3e20323635363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3a4::/32 Signature Algorithm: sha256WithRSAEncryption 63:55:7c:f9:20:ec:06:27:c1:18:0a:91:04:72:a2:31:c7:36: 5a:9e:c1:d9:e6:1d:4c:74:9e:75:8b:c5:8b:87:27:54:5e:33: 27:10:08:d6:51:85:1f:76:ee:41:a5:55:61:43:92:a0:25:ae: ab:55:89:80:fc:5d:c4:f5:d2:d2:d7:0c:87:d5:cd:49:38:6b: ef:ea:56:6c:b3:81:48:78:a9:9b:d2:64:f6:af:53:d0:d6:35: 81:6f:8f:c7:b6:df:f6:e3:9b:98:21:af:37:44:e1:8b:0d:06: 68:fb:f8:1e:53:12:5c:d4:5d:ca:6c:d2:db:3e:88:e8:8d:c7: fc:8e:05:24:4e:57:7d:96:a0:73:0f:16:87:f0:0d:2a:d1:91: e9:2d:ec:ff:d3:4f:05:14:ae:9b:77:5b:7c:3d:fd:38:e3:a5: 8e:fc:4d:2a:72:3a:f7:0e:4f:b6:e5:14:f6:29:59:d8:9d:4f: 7f:c6:b2:e0:d8:e4:d6:64:4b:03:3b:5a:69:91:29:af:a7:cf: 66:9f:e1:e1:09:7b:99:bd:22:76:85:42:b8:a3:da:bc:6b:ad: 7a:7e:3e:74:08:01:bd:9c:3a:ec:bd:9a:e5:a4:a4:03:90:d3: 65:af:23:80:10:86:e9:f4:52:74:29:f0:e7:32:b2:d0:45:f1: 8b:e2:11:b0 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUJALKiCpG1hURDhAny0pRWw0ij7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwNjcxOTg4RTkwNzYzMkEyNzI0QTFBRDk1M0NFMzBG Qzg3QjE2MTAeFw0yNjAxMDYxOTM2NTFaFw0yNzAxMDUxOTQxNTFaMDMxMTAvBgNV BAMTKDg0M0ExMjgyRTAxNzQ0NzU4QTI3RDNFMjAyMjhEODFGQ0RBNUJFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycfPzuoqfZnvXR0vsEYnggOvH maSOzs879EXEBYEZEwCcCAr8IXh/2wMVCkfvJG8oPxIOEoba/99TwDIyqBju+My4 f6MQcLB3LwNhSk1Fh+R46JNP1S3irp4Nr6evw808cK9V9zDL5+O/fKyq50KcQYRx HdpLV9+o5rDke55gg2e3YwOs/2HX0hE8WI3tQU38CzawQ2xN8H2t8T9/22hEm7R/ yE5V0up5PHUz1gx/6rd6PN8c3rEdKIfkLeoqj16aDw/8C1m+YmYK0GlPqivxF8TG X426v5g3EuP61n+gKie33KkxzTswCySY9gm4gnJC2PufafBM40RCtJfUfuR/AgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUhDoSguAXRHWKJ9PiAijYH82lvn8wHwYDVR0j BBgwFoAUggZxmI6QdjKickoa2VPOMPyHsWEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMUJBQUJDMjhBNDY0NTEzMEVFMEE1MkVGNUZCRDIzOTBE MEExMzhBQTUzNTNERUE1ODQwQUIzMzEzQ0Q3NDlGLzAvODIwNjcxOTg4RTkwNzYz MkEyNzI0QTFBRDk1M0NFMzBGQzg3QjE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjA2NzE5ODhFOTA3NjMyQTI3 MjRBMUFEOTUzQ0UzMEZDODdCMTYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzFCQUFCQzI4QTQ2NDUxMzBFRTBBNTJFRjVGQkQyMzkwRDBBMTM4QUE1 MzUzREVBNTg0MEFCMzMxM0NENzQ5Ri8wLzMyMzgzMDM2M2EzMzYxMzQzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNjMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgOkMA0G CSqGSIb3DQEBCwUAA4IBAQBjVXz5IOwGJ8EYCpEEcqIxxzZansHZ5h1MdJ51i8WL hydUXjMnEAjWUYUfdu5BpVVhQ5KgJa6rVYmA/F3E9dLS1wyH1c1JOGvv6lZss4FI eKmb0mT2r1PQ1jWBb4/Htt/245uYIa83ROGLDQZo+/geUxJc1F3KbNLbPojojcf8 jgUkTld9lqBzDxaH8A0q0ZHpLez/008FFK6bd1t8Pf0446WO/E0qcjr3Dk+25RT2 KVnYnU9/xrLg2OTWZEsDO1ppkSmvp89mn+HhCXuZvSJ2hUK4o9q8a616fj50CAG9 nDrsvZrlpKQDkNNlryOAEIbp9FJ0KfDnMrLQRfGL4hGw -----END CERTIFICATE-----Generated at Sun Jan 25 13:19:20 2026 by rpki-client