This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa File: 323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (raw, json) Hash identifier: SNmRBjJ8aTw2AGRck0KRpKzT2J6Un+G5221adGph+zM= Subject key identifier: C5:C1:91:8C:85:ED:7B:11:1E:38:33:C8:9D:F8:87:07:EB:8C:A9:BB Certificate issuer: /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292 Certificate serial: 2812FEC905B887DB9AAE1D6FE48A149E855E0012 Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa Signing time: Tue 06 Jan 2026 19:05:39 +0000 ROA not before: Tue 06 Jan 2026 19:00:39 +0000 ROA not after: Tue 05 Jan 2027 19:05:39 +0000 asID: 272859 IP address blocks: 2803:6290::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:12:fe:c9:05:b8:87:db:9a:ae:1d:6f:e4:8a:14:9e:85:5e:00:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292 Validity Not Before: Jan 6 19:00:39 2026 GMT Not After : Jan 5 19:05:39 2027 GMT Subject: CN=C5C1918C85ED7B111E3833C89DF88707EB8CA9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:a2:d6:03:66:63:89:87:ac:12:0c:5a:75: 48:3c:cd:6f:1f:d6:0c:45:3c:23:48:07:70:f2:ad: bd:e0:22:6c:2c:b0:0c:9b:5b:59:bc:20:c2:ee:19: 5c:be:e5:13:b3:49:cc:ac:76:a3:e6:fd:c7:21:98: 30:50:df:0c:28:69:eb:d0:f6:fc:a0:a6:e4:cf:57: 42:52:fd:f8:e1:a0:0c:5b:08:0c:f0:b2:d1:d0:a0: 68:a0:c3:e6:28:c9:2d:5e:49:f2:d3:91:94:fd:21: 18:1c:d6:de:1d:6a:b2:9c:ee:28:61:69:ed:a9:25: 5f:38:2c:f1:74:b7:59:86:46:3e:00:26:a9:01:82: 1d:c8:26:63:72:87:2a:fd:67:92:47:66:4e:43:41: d2:29:de:1a:26:79:43:60:06:10:4a:04:56:0e:3e: 9c:73:91:05:fb:9a:42:3c:02:0a:7a:e2:ad:e0:3b: b8:a2:0a:c4:ba:6c:38:62:f9:7e:cc:be:92:07:14: 57:0f:a7:99:e2:d9:43:b9:27:49:f4:d3:f7:a6:a3: 58:d5:11:b4:78:6c:bd:1d:ce:70:f6:cd:42:ce:08: 46:c9:19:94:9f:47:cf:f2:d4:15:bb:e9:20:35:70: e2:e2:a1:4b:84:a3:f3:8a:24:c7:10:e5:32:ba:27: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:91:8C:85:ED:7B:11:1E:38:33:C8:9D:F8:87:07:EB:8C:A9:BB X509v3 Authority Key Identifier: keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323732383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6290::/32 Signature Algorithm: sha256WithRSAEncryption 61:27:ae:70:af:36:32:63:42:4f:b6:b0:05:60:d5:94:30:71: 28:0d:03:0e:3a:f0:e5:8f:f8:1c:2a:50:57:7c:14:db:a5:28: 1f:0b:51:16:a4:fe:d2:72:53:c7:ae:93:72:a9:7f:8f:27:72: 9b:c7:8f:74:dd:f5:bc:bb:ff:d9:c0:e1:4e:a6:33:48:bb:c6: 16:46:15:b0:6a:d4:8c:7e:1b:c7:b4:5d:44:8b:98:12:c5:e4: 62:66:91:08:81:fb:ca:aa:92:37:59:a2:4b:cb:40:13:c4:51: f9:dc:18:e5:f9:c3:47:1a:12:6f:2d:3a:17:6d:23:48:41:6c: 86:fb:aa:71:8c:42:70:25:56:67:cf:54:f9:36:45:f4:7a:36: 11:4f:1c:c4:70:69:98:52:9d:c2:c7:0a:5c:95:ca:ce:08:47: 7b:0d:a2:41:fa:ad:38:e6:af:1f:e9:3f:0c:ce:66:d4:17:8c: 66:51:4c:28:37:eb:3a:d2:5d:e6:48:96:bc:92:84:8b:f0:7b: c5:9f:67:49:9b:09:4a:2f:44:89:eb:0d:15:ac:d0:61:0c:69: e5:03:27:c8:44:63:b1:9e:f5:38:d1:d9:96:d3:7f:d5:f2:7a: 56:7c:69:b7:5e:2d:27:18:b3:08:58:a8:e7:22:9f:e1:bf:e1: 8e:a0:e1:57 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUKBL+yQW4h9uarh1v5IoUnoVeABIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC MkIxNjI5MjAeFw0yNjAxMDYxOTAwMzlaFw0yNzAxMDUxOTA1MzlaMDMxMTAvBgNV BAMTKEM1QzE5MThDODVFRDdCMTExRTM4MzNDODlERjg4NzA3RUI4Q0E5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3KLWA2ZjiYesEgxadUg8zW8f 1gxFPCNIB3Dyrb3gImwssAybW1m8IMLuGVy+5ROzScysdqPm/cchmDBQ3wwoaevQ 9vygpuTPV0JS/fjhoAxbCAzwstHQoGigw+YoyS1eSfLTkZT9IRgc1t4darKc7ihh ae2pJV84LPF0t1mGRj4AJqkBgh3IJmNyhyr9Z5JHZk5DQdIp3homeUNgBhBKBFYO PpxzkQX7mkI8Agp64q3gO7iiCsS6bDhi+X7MvpIHFFcPp5ni2UO5J0n00/emo1jV EbR4bL0dznD2zULOCEbJGZSfR8/y1BW76SA1cOLioUuEo/OKJMcQ5TK6J0M3AgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUxcGRjIXtexEeODPInfiHB+uMqbswHwYDVR0j BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzMyMzgzMDMzM2EzNjMyMzkzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzUzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYpAw DQYJKoZIhvcNAQELBQADggEBAGEnrnCvNjJjQk+2sAVg1ZQwcSgNAw468OWP+Bwq UFd8FNulKB8LURak/tJyU8euk3Kpf48ncpvHj3Td9by7/9nA4U6mM0i7xhZGFbBq 1Ix+G8e0XUSLmBLF5GJmkQiB+8qqkjdZokvLQBPEUfncGOX5w0caEm8tOhdtI0hB bIb7qnGMQnAlVmfPVPk2RfR6NhFPHMRwaZhSncLHClyVys4IR3sNokH6rTjmrx/p PwzOZtQXjGZRTCg36zrSXeZIlryShIvwe8WfZ0mbCUovRInrDRWs0GEMaeUDJ8hE Y7Ge9TjR2ZbTf9XyelZ8abdeLScYswhYqOcin+G/4Y6g4Vc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:57:23 2026 by rpki-client