This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/323830303a6239303a3a2f33322d3332203d3e20323633323436.roa File: 323830303a6239303a3a2f33322d3332203d3e20323633323436.roa (raw, json) Hash identifier: +UqE8MYWn553d1/vUk1rgtqUXiE8XxTuAcc7T6Wql+c= Subject key identifier: 89:EF:5A:6A:9B:68:A3:1E:CC:39:61:A8:95:EA:65:16:9A:32:41:51 Certificate issuer: /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624 Certificate serial: 75725EBCA30B3A32CA82352776B22F95A0EE2D17 Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/323830303a6239303a3a2f33322d3332203d3e20323633323436.roa Signing time: Tue 06 Jan 2026 18:58:55 +0000 ROA not before: Tue 06 Jan 2026 18:53:55 +0000 ROA not after: Tue 05 Jan 2027 18:58:55 +0000 asID: 263246 IP address blocks: 2800:b90::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:72:5e:bc:a3:0b:3a:32:ca:82:35:27:76:b2:2f:95:a0:ee:2d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624 Validity Not Before: Jan 6 18:53:55 2026 GMT Not After : Jan 5 18:58:55 2027 GMT Subject: CN=89EF5A6A9B68A31ECC3961A895EA65169A324151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:62:ab:16:b7:a2:c0:b5:2c:24:c8:f2:f4: 98:d6:8a:be:51:1f:78:75:9b:ff:b6:78:93:f2:eb: 1f:2c:8c:45:47:84:f6:16:01:a1:b0:8c:64:9e:4f: 79:64:b4:be:95:fe:cb:cf:05:0d:c5:fc:5f:71:d3: e1:30:25:3f:07:b8:a6:00:f0:95:ee:4f:30:36:1c: 4b:94:5d:54:4c:f2:db:d6:e4:7f:c4:eb:2a:96:55: 0e:ec:3d:df:8e:3d:5b:7b:81:bd:80:04:d7:e2:9a: 2a:39:93:d3:70:1f:41:af:a4:bb:49:37:c6:d1:ad: 30:be:0f:18:16:cf:75:31:fa:e9:f5:5d:4f:67:e4: d6:d8:5a:61:98:d5:13:55:93:9a:54:de:5d:b9:d1: f4:b7:72:33:95:28:57:4e:bb:8a:4c:02:f0:84:6b: bd:26:a1:03:5d:95:fb:1e:65:62:fb:a3:f8:93:83: e6:83:cd:07:9a:05:09:46:17:4e:7c:2e:bc:78:56: 06:79:a3:d8:80:b1:fe:d0:a7:aa:fb:5a:2a:8c:4f: c9:d9:b2:bd:af:5e:cb:6c:01:be:7a:b2:b5:47:a8: b7:1b:1e:e7:c3:90:ee:39:98:d8:bd:9e:e3:c5:6c: 93:4c:c9:1e:0f:d8:db:50:4e:01:1d:26:b9:39:53: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:5A:6A:9B:68:A3:1E:CC:39:61:A8:95:EA:65:16:9A:32:41:51 X509v3 Authority Key Identifier: keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/323830303a6239303a3a2f33322d3332203d3e20323633323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:b90::/32 Signature Algorithm: sha256WithRSAEncryption 4a:de:c1:aa:f5:12:51:49:49:89:19:51:69:99:8a:05:47:7f: 37:bb:4d:97:f9:fe:8f:bd:1e:0d:e1:73:86:83:9b:1e:88:41: 02:cd:24:7b:bd:2e:f7:64:78:fb:7a:87:ae:24:10:2b:96:38: 5e:2a:b9:93:26:1f:83:ed:73:d5:21:2b:f6:ba:4c:f7:6f:71: 29:5e:a5:9c:36:ba:13:c7:44:26:dd:78:c3:af:f6:e8:36:29: 9b:bc:af:18:0e:12:84:57:7a:6e:ca:e9:a6:9c:1f:ea:85:94: 05:67:e8:ad:45:69:d4:ea:ea:09:d2:55:9c:9b:06:84:ef:e3: d8:cb:58:26:50:b6:dd:12:50:6d:1c:1e:79:71:53:ff:14:a0: b6:21:f6:0a:87:9f:4d:ee:d8:b1:bc:b6:2c:c5:f8:4c:fe:09: b0:d0:cf:bf:26:35:09:cf:f0:32:3b:ac:7e:69:9c:26:a7:e5: 94:4a:ed:3b:a9:d8:0e:d9:79:0b:c6:10:b1:70:8d:c0:25:40: ae:86:dc:f0:7e:d2:ee:45:e7:4c:18:e5:ac:09:6a:ba:a6:50: 43:a1:1c:c8:60:05:11:91:c5:1f:52:df:f7:16:30:c9:06:ec: e8:85:00:32:fa:21:37:fe:82:f8:4e:b9:f1:bd:e8:6e:b4:6e: 36:9b:e2:bc -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUdXJevKMLOjLKgjUndrIvlaDuLRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUwRjNGRjBFODQzMEExQ0I0NUFEMzI2MDk4M0E5RDM0 OTcyMjYyNDAeFw0yNjAxMDYxODUzNTVaFw0yNzAxMDUxODU4NTVaMDMxMTAvBgNV BAMTKDg5RUY1QTZBOUI2OEEzMUVDQzM5NjFBODk1RUE2NTE2OUEzMjQxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7WKrFreiwLUsJMjy9JjWir5R H3h1m/+2eJPy6x8sjEVHhPYWAaGwjGSeT3lktL6V/svPBQ3F/F9x0+EwJT8HuKYA 8JXuTzA2HEuUXVRM8tvW5H/E6yqWVQ7sPd+OPVt7gb2ABNfimio5k9NwH0GvpLtJ N8bRrTC+DxgWz3Ux+un1XU9n5NbYWmGY1RNVk5pU3l250fS3cjOVKFdOu4pMAvCE a70moQNdlfseZWL7o/iTg+aDzQeaBQlGF058Lrx4VgZ5o9iAsf7Qp6r7WiqMT8nZ sr2vXstsAb56srVHqLcbHufDkO45mNi9nuPFbJNMyR4P2NtQTgEdJrk5UyuhAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUie9aaptoox7MOWGoleplFpoyQVEwHwYDVR0j BBgwFoAU7g8/8OhDChy0WtMmCYOp00lyJiQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QjcxREU3Q0QxNjBGQjQ3MUJFNEZBOEVCNzcyMTk3QUY4 QkQ4Q0UzNjM3NDU4RDIxOEZGRTMwM0RFNDhBQjk4LzAvRUUwRjNGRjBFODQzMEEx Q0I0NUFEMzI2MDk4M0E5RDM0OTcyMjYyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTBGM0ZGMEU4NDMwQTFDQjQ1 QUQzMjYwOTgzQTlEMzQ5NzIyNjI0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEI3MURFN0NEMTYwRkI0NzFCRTRGQThFQjc3MjE5N0FGOEJEOENFMzYz NzQ1OEQyMThGRkUzMDNERTQ4QUI5OC8wLzMyMzgzMDMwM2E2MjM5MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzMzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAuQMA0G CSqGSIb3DQEBCwUAA4IBAQBK3sGq9RJRSUmJGVFpmYoFR383u02X+f6PvR4N4XOG g5seiEECzSR7vS73ZHj7eoeuJBArljheKrmTJh+D7XPVISv2ukz3b3EpXqWcNroT x0Qm3XjDr/boNimbvK8YDhKEV3puyummnB/qhZQFZ+itRWnU6uoJ0lWcmwaE7+PY y1gmULbdElBtHB55cVP/FKC2IfYKh59N7tixvLYsxfhM/gmw0M+/JjUJz/AyO6x+ aZwmp+WUSu07qdgO2XkLxhCxcI3AJUCuhtzwftLuRedMGOWsCWq6plBDoRzIYAUR kcUfUt/3FjDJBuzohQAy+iE3/oL4TrnxvehutG42m+K8 -----END CERTIFICATE-----Generated at Sun Jan 25 08:29:28 2026 by rpki-client