This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa File: 323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (raw, json) Hash identifier: c18jRtqhZN01/gTi9lg46b3cCnkr32f0FoJvifBJVIc= Subject key identifier: FD:D7:5B:60:96:CF:4D:42:BA:0B:E8:6C:0E:A8:93:4E:EB:06:18:15 Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Certificate serial: 6D8F428AFADA5F4E29273B2F5303574866BCE8D2 Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa Signing time: Tue 06 Jan 2026 19:34:21 +0000 ROA not before: Tue 06 Jan 2026 19:29:21 +0000 ROA not after: Tue 05 Jan 2027 19:34:21 +0000 asID: 272909 IP address blocks: 2801:1a9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8f:42:8a:fa:da:5f:4e:29:27:3b:2f:53:03:57:48:66:bc:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Validity Not Before: Jan 6 19:29:21 2026 GMT Not After : Jan 5 19:34:21 2027 GMT Subject: CN=FDD75B6096CF4D42BA0BE86C0EA8934EEB061815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:d8:e7:8c:ab:a3:9b:9e:25:f0:04:e6:9f: eb:50:7b:96:c8:2e:8c:75:62:bd:80:c3:76:ae:3b: f9:04:7e:6c:fb:c5:38:56:f5:98:7b:e5:97:44:1e: f2:a4:3c:d1:6c:93:b5:87:a8:fd:fa:69:74:80:50: f2:ac:c4:a0:f8:54:19:d2:f1:66:39:88:f0:52:60: 60:35:6e:42:39:9f:ca:97:56:b9:1a:61:9b:b2:af: da:45:d8:05:7b:0f:b6:e6:46:19:cc:cc:a8:11:cc: 65:5e:16:36:09:45:21:22:f3:1b:71:9b:6e:bc:9c: af:bd:0a:c3:04:72:bd:a7:12:32:f6:3e:76:4c:db: 62:c4:ee:83:83:c2:ae:08:46:41:96:1f:ae:b2:57: 2d:c3:ae:a2:5d:25:5d:96:44:b9:93:e8:f7:6e:be: 28:bd:c1:20:99:69:bc:95:5c:2e:83:34:a7:9d:5c: 5a:92:94:b8:ca:aa:6b:18:bb:85:d1:91:4f:95:93: 35:14:56:c3:a8:12:fa:4a:b3:b1:68:45:6f:6b:91: 00:ce:c6:40:fc:c6:c2:c5:3b:19:59:31:80:46:8d: 0e:a8:7f:52:2c:c1:41:72:6c:2c:cf:ca:c3:fa:6b: 15:de:1d:07:8b:31:22:54:58:7c:ea:c7:ea:3d:48: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:5B:60:96:CF:4D:42:BA:0B:E8:6C:0E:A8:93:4E:EB:06:18:15 X509v3 Authority Key Identifier: keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a9:1::/48 Signature Algorithm: sha256WithRSAEncryption 34:5b:ef:8c:37:c6:fd:85:bf:cb:59:d1:93:78:67:d8:71:78: 39:a5:c5:59:8c:85:6a:a7:23:db:69:15:0b:b6:cd:43:7a:c8: 93:36:79:8b:f5:e7:f4:15:0d:a3:d4:6e:d7:05:4b:d9:6d:bc: 23:91:3d:64:c9:5a:04:f0:b6:32:7e:f1:c9:c8:aa:c1:32:8e: a9:d8:95:cc:02:55:62:29:a1:e4:d8:35:b0:b0:4b:46:ab:74: 37:d3:1d:ac:98:05:3d:c6:fc:3d:d6:45:f7:be:14:45:85:2c: e5:fd:83:e4:fe:b4:e0:aa:2c:91:af:45:87:d2:37:09:10:46: 87:2b:05:a6:af:bf:37:f9:e6:af:dd:c3:65:e0:75:e9:8b:ba: d0:3b:07:f0:b8:3f:14:3b:ee:6c:bd:c7:fd:aa:5b:c8:3c:d5: 75:90:3d:b5:da:37:33:83:c5:57:c2:5a:da:56:17:15:b5:7c: e9:57:11:21:92:48:b4:44:50:6c:fa:76:86:39:85:ee:ef:bb: 34:ca:4e:c0:a8:97:3f:02:67:98:62:93:fb:b0:28:18:03:5b: 45:ef:db:52:6b:79:50:2c:d1:7f:d5:ff:36:bc:c7:1f:6c:16: 90:9c:4d:cc:46:29:11:71:c7:9e:53:07:08:ab:82:20:21:c7: 21:7c:a8:06 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUbY9CivraX04pJzsvUwNXSGa86NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzNCRjdGQ0EzQjA4NkE3RTMyNzYwQTEyRDZENjAw MzZDQzEzMTAeFw0yNjAxMDYxOTI5MjFaFw0yNzAxMDUxOTM0MjFaMDMxMTAvBgNV BAMTKEZERDc1QjYwOTZDRjRENDJCQTBCRTg2QzBFQTg5MzRFRUIwNjE4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOatjnjKujm54l8ATmn+tQe5bI Lox1Yr2Aw3auO/kEfmz7xThW9Zh75ZdEHvKkPNFsk7WHqP36aXSAUPKsxKD4VBnS 8WY5iPBSYGA1bkI5n8qXVrkaYZuyr9pF2AV7D7bmRhnMzKgRzGVeFjYJRSEi8xtx m268nK+9CsMEcr2nEjL2PnZM22LE7oODwq4IRkGWH66yVy3DrqJdJV2WRLmT6Pdu vii9wSCZabyVXC6DNKedXFqSlLjKqmsYu4XRkU+VkzUUVsOoEvpKs7FoRW9rkQDO xkD8xsLFOxlZMYBGjQ6of1IswUFybCzPysP6axXeHQeLMSJUWHzqx+o9SNzdAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQU/ddbYJbPTUK6C+hsDqiTTusGGBUwHwYDVR0j BBgwFoAUvdw79/yjsIan4ydgoS1tYANswTEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REYzNzk5RTlGQzQ5MURCM0FGRTcwQjVFQzZBQzcyMkVG MzQxNzY5NDM4RDA0QUQ1ODBFRkNENzZBOEQwM0YyLzAvQkREQzNCRjdGQ0EzQjA4 NkE3RTMyNzYwQTEyRDZENjAwMzZDQzEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRERDM0JGN0ZDQTNCMDg2QTdF MzI3NjBBMTJENkQ2MDAzNkNDMTMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERGMzc5OUU5RkM0OTFEQjNBRkU3MEI1RUM2QUM3MjJFRjM0MTc2OTQz OEQwNEFENTgwRUZDRDc2QThEMDNGMi8wLzMyMzgzMDMxM2EzMTYxMzkzYTMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzkzMDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB qQABMA0GCSqGSIb3DQEBCwUAA4IBAQA0W++MN8b9hb/LWdGTeGfYcXg5pcVZjIVq pyPbaRULts1DesiTNnmL9ef0FQ2j1G7XBUvZbbwjkT1kyVoE8LYyfvHJyKrBMo6p 2JXMAlViKaHk2DWwsEtGq3Q30x2smAU9xvw91kX3vhRFhSzl/YPk/rTgqiyRr0WH 0jcJEEaHKwWmr783+eav3cNl4HXpi7rQOwfwuD8UO+5svcf9qlvIPNV1kD212jcz g8VXwlraVhcVtXzpVxEhkki0RFBs+naGOYXu77s0yk7AqJc/AmeYYpP7sCgYA1tF 79tSa3lQLNF/1f82vMcfbBaQnE3MRikRcceeUwcIq4IgIcchfKgG -----END CERTIFICATE-----Generated at Sun Jan 25 16:06:40 2026 by rpki-client