This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa File: 323830303a3837303a3a2f33322d3332203d3e2036373632.roa (raw, json) Hash identifier: etICJqkpSZdNlckhJs6ylB9lUSntIoiIeFJJiZqFS4A= Subject key identifier: 1C:04:34:AD:13:21:31:78:57:C4:17:2E:11:DF:D0:DC:2E:52:59:68 Certificate issuer: /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D Certificate serial: 068AEFA46FF687E731D0AFADFBE131828E6C03AF Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa Signing time: Tue 06 Jan 2026 19:14:27 +0000 ROA not before: Tue 06 Jan 2026 19:09:27 +0000 ROA not after: Tue 05 Jan 2027 19:14:27 +0000 asID: 6762 IP address blocks: 2800:870::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8a:ef:a4:6f:f6:87:e7:31:d0:af:ad:fb:e1:31:82:8e:6c:03:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D Validity Not Before: Jan 6 19:09:27 2026 GMT Not After : Jan 5 19:14:27 2027 GMT Subject: CN=1C0434AD1321317857C4172E11DFD0DC2E525968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:42:32:eb:13:1b:ee:82:6a:49:dc:bd:7b: 32:f9:61:a4:c0:cb:82:94:ad:ca:3e:40:71:80:2e: e6:77:86:10:e6:93:df:a5:ff:56:6a:6e:1a:ae:32: 99:15:63:57:f0:2d:00:26:8f:f9:3b:68:79:72:2f: 9d:1a:a3:f7:08:69:2d:40:16:d7:72:f8:80:9d:bc: 68:08:ef:89:5a:09:41:0a:be:f2:73:9a:77:7c:a8: 07:f5:85:3f:11:64:a4:fd:0f:c7:04:de:50:11:2d: 0c:60:34:de:50:d2:2c:ae:2b:d6:fd:58:43:da:8b: e7:1b:a8:01:a8:7c:1a:53:e5:e0:c2:51:d3:02:66: 55:4f:38:49:af:3f:22:5c:80:c9:96:4e:e5:fe:2d: a0:d8:34:80:f4:6d:0a:0a:f5:17:91:d2:86:bb:9a: f9:90:a9:c0:54:cb:d0:67:70:6b:b3:a9:b2:cf:b5: 4a:b6:f1:33:1b:3b:36:34:cb:b3:83:6d:a1:f8:7b: e7:ab:0c:5a:27:34:2a:2f:6a:be:2b:68:b3:9f:f4: bb:2a:e4:15:53:f6:ce:f5:8a:0b:bf:71:21:65:7d: fb:98:5a:a5:68:8e:df:78:d3:95:ee:73:58:d0:d0: 93:29:92:fa:df:2f:25:ed:fc:f4:89:01:39:03:28: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:04:34:AD:13:21:31:78:57:C4:17:2E:11:DF:D0:DC:2E:52:59:68 X509v3 Authority Key Identifier: keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:870::/32 Signature Algorithm: sha256WithRSAEncryption 8c:59:14:7f:19:75:78:e9:91:34:53:44:fd:fd:89:4e:42:71: 32:dc:c1:30:08:fc:e4:22:8f:f0:75:c4:3b:47:1b:3c:33:dd: d7:55:44:15:18:92:1c:03:6c:9c:41:30:54:9d:a8:1e:a3:30: 50:2b:73:ba:23:fc:72:b4:c0:24:40:0d:a5:5d:06:07:6e:b3: 5b:a2:8b:7e:c7:d9:ec:25:47:d5:3c:6e:cb:f2:eb:89:7a:b4: e7:91:ed:d3:99:b5:ab:ca:a2:eb:31:8a:f4:c9:74:4c:01:7d: 8b:da:ce:8c:42:53:0c:c4:9d:0d:53:b7:a9:73:d2:ac:6d:a7: 28:c1:aa:08:be:5e:db:d0:22:29:86:f7:31:bb:20:fb:dc:c4: 6d:5d:43:de:8f:0f:46:74:df:93:67:8b:9c:17:55:a0:b3:21: 71:81:6e:17:c5:e1:7d:78:c9:d9:2a:7d:17:4c:b6:0e:6a:b7: c0:be:c5:37:6b:49:13:c6:ea:9f:54:a3:14:c6:7a:a2:e9:35: 9e:60:d8:f7:e6:00:d5:98:af:66:f4:08:ad:37:e8:89:d9:4e: 9c:18:28:6b:80:9c:45:59:a7:49:15:21:57:f1:6c:08:2d:2a: 9c:87:c6:13:99:38:a3:6d:24:6f:86:e5:cf:d3:32:1e:bf:37: b1:e6:3b:f9 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUBorvpG/2h+cx0K+t++Exgo5sA68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2NDA2RjJBOURCQjA4QTlFRTNBQzJCNEY3OEVDMjVG MkRGRDcyRDAeFw0yNjAxMDYxOTA5MjdaFw0yNzAxMDUxOTE0MjdaMDMxMTAvBgNV BAMTKDFDMDQzNEFEMTMyMTMxNzg1N0M0MTcyRTExREZEMERDMkU1MjU5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQRkIy6xMb7oJqSdy9ezL5YaTA y4KUrco+QHGALuZ3hhDmk9+l/1ZqbhquMpkVY1fwLQAmj/k7aHlyL50ao/cIaS1A Ftdy+ICdvGgI74laCUEKvvJzmnd8qAf1hT8RZKT9D8cE3lARLQxgNN5Q0iyuK9b9 WEPai+cbqAGofBpT5eDCUdMCZlVPOEmvPyJcgMmWTuX+LaDYNID0bQoK9ReR0oa7 mvmQqcBUy9BncGuzqbLPtUq28TMbOzY0y7ODbaH4e+erDFonNCovar4raLOf9Lsq 5BVT9s71igu/cSFlffuYWqVojt9405Xuc1jQ0JMpkvrfLyXt/PSJATkDKBgBAgMB AAGjggLDMIICvzAdBgNVHQ4EFgQUHAQ0rRMhMXhXxBcuEd/Q3C5SWWgwHwYDVR0j BBgwFoAU72QG8qnbsIqe46wrT3jsJfLf1y0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNDkwOUNFMEZERUU3Q0RENjdCQUVBRDdCNzg5QTE4MTQ1 MDY1RjcyRjkzRjFFMTgwNDRCNEExQTQ4NUM2NEExLzAvRUY2NDA2RjJBOURCQjA4 QTlFRTNBQzJCNEY3OEVDMjVGMkRGRDcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjY0MDZGMkE5REJCMDhBOUVF M0FDMkI0Rjc4RUMyNUYyREZENzJELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzQ5MDlDRTBGREVFN0NERDY3QkFFQUQ3Qjc4OUExODE0NTA2NUY3MkY5 M0YxRTE4MDQ0QjRBMUE0ODVDNjRBMS8wLzMyMzgzMDMwM2EzODM3MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzNjM3MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgACHAwDQYJKoZI hvcNAQELBQADggEBAIxZFH8ZdXjpkTRTRP39iU5CcTLcwTAI/OQij/B1xDtHGzwz 3ddVRBUYkhwDbJxBMFSdqB6jMFArc7oj/HK0wCRADaVdBgdus1uii37H2ewlR9U8 bsvy64l6tOeR7dOZtavKousxivTJdEwBfYvazoxCUwzEnQ1Tt6lz0qxtpyjBqgi+ XtvQIimG9zG7IPvcxG1dQ96PD0Z035Nni5wXVaCzIXGBbhfF4X14ydkqfRdMtg5q t8C+xTdrSRPG6p9UoxTGeqLpNZ5g2PfmANWYr2b0CK036InZTpwYKGuAnEVZp0kV IVfxbAgtKpyHxhOZOKNtJG+G5c/TMh6/N7HmO/k= -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:04 2026 by rpki-client