This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a313030303a3a2f33362d3336203d3e20323732383132.roa File: 323830333a663839303a313030303a3a2f33362d3336203d3e20323732383132.roa (raw, json) Hash identifier: xu+siYYA3otZCzpgUc7h/uxgoQbr+JUFBU8LhPuHNng= Subject key identifier: 59:57:72:04:A4:35:EA:5F:80:69:AD:E0:3B:84:5D:CA:D5:7B:C8:38 Certificate issuer: /CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4 Certificate serial: 742FD484F4567EF95EB2F03F4C186C08AED0239B Authority key identifier: 4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a313030303a3a2f33362d3336203d3e20323732383132.roa Signing time: Sun 18 Jan 2026 17:26:02 +0000 ROA not before: Sun 18 Jan 2026 17:21:02 +0000 ROA not after: Sun 17 Jan 2027 17:26:02 +0000 asID: 272812 IP address blocks: 2803:f890:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 22:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2f:d4:84:f4:56:7e:f9:5e:b2:f0:3f:4c:18:6c:08:ae:d0:23:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4 Validity Not Before: Jan 18 17:21:02 2026 GMT Not After : Jan 17 17:26:02 2027 GMT Subject: CN=59577204A435EA5F8069ADE03B845DCAD57BC838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:05:be:f6:44:a1:95:77:f9:de:ae:0f:03: 19:ac:08:35:6b:b4:31:61:73:0d:f2:88:4e:7c:0d: 62:9c:65:0f:f0:c6:c8:f8:d0:9c:46:60:21:2e:2f: c5:c9:a1:19:aa:99:a9:9a:eb:b5:3c:6d:0e:f1:67: 92:fd:4d:b3:39:13:d7:a5:91:d7:d8:52:14:e5:7f: e7:4a:bf:b5:79:69:71:77:55:ef:10:de:8c:53:cc: f7:69:f4:c8:cd:c9:14:7c:ff:e0:7b:4f:6b:1e:d2: fa:40:20:21:d7:e6:e9:e5:a0:8e:78:1b:a5:40:41: e8:ae:af:6b:49:e4:26:e2:be:9c:57:9b:35:90:0b: 06:de:d5:9e:64:84:dd:97:34:e8:0d:84:93:3c:9b: c0:c7:47:aa:ab:ac:61:06:8f:25:86:79:9c:c7:2d: 91:06:f3:0b:02:fe:bb:36:6a:92:7c:30:2b:aa:11: 9f:1b:32:db:f9:43:f9:0a:00:cc:9d:37:2e:2b:f3: 4d:35:5a:2d:04:4c:9a:be:f1:6d:44:1a:37:2b:4e: 70:8d:34:6c:14:17:be:d5:f4:08:ed:d6:37:1d:42: a9:52:5a:24:26:a8:9b:d7:2c:04:a3:39:1e:fb:ec: 53:e5:15:39:3b:cf:70:43:98:08:2a:f0:13:d5:cb: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:72:04:A4:35:EA:5F:80:69:AD:E0:3B:84:5D:CA:D5:7B:C8:38 X509v3 Authority Key Identifier: keyid:4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a313030303a3a2f33362d3336203d3e20323732383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f890:1000::/36 Signature Algorithm: sha256WithRSAEncryption 3e:d0:f9:f6:44:f7:2c:31:50:3c:39:42:be:7c:2b:66:94:39: 11:90:82:53:4a:b8:0c:52:46:2d:0e:e0:fd:77:de:af:97:4f: 0e:f4:83:55:a4:cb:e9:a5:b6:70:71:c6:df:3a:e4:78:d1:ac: 01:72:31:de:3e:9e:99:0f:47:ac:9b:a3:f5:76:02:22:46:36: 55:a1:10:dc:71:9a:f8:a8:c4:75:94:a4:4c:6e:31:31:ed:c5: ef:c6:f0:7b:5c:b2:ac:da:23:b1:be:e8:90:21:72:3d:87:55: bc:ae:06:2e:e3:47:f0:9f:3a:83:56:89:38:d9:b9:31:4c:d7: 2b:84:0e:87:ff:b0:42:6d:2f:3c:63:f8:a0:85:db:bb:e8:54: 68:35:5b:68:2e:16:67:08:d5:f5:dc:dd:36:35:9d:65:d6:af: e5:40:aa:cb:29:7e:0e:a6:e1:04:1d:66:c2:59:cf:12:ce:34: b1:6b:33:bb:33:4d:ec:cb:bb:55:81:fc:ea:ad:84:8a:cf:dc: 31:8e:ac:1b:d5:55:a9:2e:1b:44:d5:8e:24:d3:cb:17:38:83: 52:18:6c:13:34:ef:5d:63:a4:82:33:88:d5:6b:a2:49:a6:76: 2e:bd:1a:a5:e4:4f:b5:80:e8:8a:4a:49:c7:9a:8c:a6:62:1e: ea:89:c9:46 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUdC/UhPRWfvlesvA/TBhsCK7QI5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYxN0ZDQzhDM0VBQkJERjgzMTE3QkJBNDEzNjlENjM5 ODNFOTZDNDAeFw0yNjAxMTgxNzIxMDJaFw0yNzAxMTcxNzI2MDJaMDMxMTAvBgNV BAMTKDU5NTc3MjA0QTQzNUVBNUY4MDY5QURFMDNCODQ1RENBRDU3QkM4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEAW+9kShlXf53q4PAxmsCDVr tDFhcw3yiE58DWKcZQ/wxsj40JxGYCEuL8XJoRmqmama67U8bQ7xZ5L9TbM5E9el kdfYUhTlf+dKv7V5aXF3Ve8Q3oxTzPdp9MjNyRR8/+B7T2se0vpAICHX5unloI54 G6VAQeiur2tJ5CbivpxXmzWQCwbe1Z5khN2XNOgNhJM8m8DHR6qrrGEGjyWGeZzH LZEG8wsC/rs2apJ8MCuqEZ8bMtv5Q/kKAMydNy4r8001Wi0ETJq+8W1EGjcrTnCN NGwUF77V9Ajt1jcdQqlSWiQmqJvXLASjOR777FPlFTk7z3BDmAgq8BPVy1tjAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWVdyBKQ16l+Aaa3gO4RdytV7yDgwHwYDVR0j BBgwFoAUTxf8yMPqu9+DEXu6QTadY5g+lsQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNTkzMjY3RENBQjk4M0Y5NDg3NkNFNENDOTI0RDZDNDgx OTQwRjBFNjc0MTJENEVBNDUzMTRFODE2MzJCNEU1LzAvNEYxN0ZDQzhDM0VBQkJE RjgzMTE3QkJBNDEzNjlENjM5ODNFOTZDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjE3RkNDOEMzRUFCQkRGODMx MTdCQkE0MTM2OUQ2Mzk4M0U5NkM0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzU5MzI2N0RDQUI5ODNGOTQ4NzZDRTRDQzkyNEQ2QzQ4MTk0MEYwRTY3 NDEyRDRFQTQ1MzE0RTgxNjMyQjRFNS8wLzMyMzgzMDMzM2E2NjM4MzkzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzODMxMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA/iQEDANBgkqhkiG9w0BAQsFAAOCAQEAPtD59kT3LDFQPDlCvnwrZpQ5 EZCCU0q4DFJGLQ7g/Xfer5dPDvSDVaTL6aW2cHHG3zrkeNGsAXIx3j6emQ9HrJuj 9XYCIkY2VaEQ3HGa+KjEdZSkTG4xMe3F78bwe1yyrNojsb7okCFyPYdVvK4GLuNH 8J86g1aJONm5MUzXK4QOh/+wQm0vPGP4oIXbu+hUaDVbaC4WZwjV9dzdNjWdZdav 5UCqyyl+DqbhBB1mwlnPEs40sWszuzNN7Mu7VYH86q2Eis/cMY6sG9VVqS4bRNWO JNPLFziDUhhsEzTvXWOkgjOI1WuiSaZ2Lr0apeRPtYDoikpJx5qMpmIe6onJRg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:30:09 2026 by rpki-client