This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa File: 323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa (raw, json) Hash identifier: POl/sSG+5MAoRhAO2VvjuWoM64x1guTsN0aD7K6xqcE= Subject key identifier: E9:90:4F:52:CE:08:03:C3:88:32:82:B3:8C:0E:7A:E2:CE:FE:FB:72 Certificate issuer: /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2 Certificate serial: 13F0F6C973498C87C3F1DD7F878B02C9A48260C2 Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa Signing time: Tue 06 Jan 2026 18:57:31 +0000 ROA not before: Tue 06 Jan 2026 18:52:31 +0000 ROA not after: Tue 05 Jan 2027 18:57:31 +0000 asID: 273001 IP address blocks: 2803:a5c0:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f0:f6:c9:73:49:8c:87:c3:f1:dd:7f:87:8b:02:c9:a4:82:60:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2 Validity Not Before: Jan 6 18:52:31 2026 GMT Not After : Jan 5 18:57:31 2027 GMT Subject: CN=E9904F52CE0803C3883282B38C0E7AE2CEFEFB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:4a:22:28:18:84:0d:04:3e:3c:31:a5:ba: b6:9c:8d:cc:90:8a:ac:2b:87:12:95:b7:95:cf:37: 41:8c:aa:33:db:1d:9b:cc:95:08:7e:f5:84:59:32: 07:88:45:d7:ca:64:f4:37:3f:27:96:59:8b:d5:4f: 44:00:0a:57:61:2a:b5:98:08:eb:44:4e:7a:6d:68: d0:0d:ed:39:a7:61:90:ff:08:5f:71:96:81:4d:81: e2:85:91:a5:d0:79:b8:fd:99:89:47:18:ae:6d:a3: d7:4d:08:6d:44:be:e9:29:d2:21:d6:78:fa:f7:83: 2b:ff:15:5f:75:9f:2b:55:5c:54:44:d2:f4:72:97: f9:1e:cb:17:07:84:d8:ec:37:e1:d3:aa:9f:92:e1: 7c:b7:6e:bd:f6:72:2c:6c:2f:c0:78:3f:8f:2b:03: 98:10:ff:98:15:77:3c:0a:c2:c9:23:03:b4:12:b7: 3a:23:46:00:c8:22:c7:b8:82:94:87:db:30:70:00: 77:f0:e9:c0:86:92:6d:05:e1:1c:01:06:92:2e:e9: b7:73:6b:4a:06:78:46:5b:8b:bd:5a:bf:1d:56:fb: 5a:cc:88:08:5c:8e:24:24:16:a1:cc:61:f7:8b:4d: 21:2e:15:5d:b0:72:27:66:91:72:99:fc:06:04:94: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:4F:52:CE:08:03:C3:88:32:82:B3:8C:0E:7A:E2:CE:FE:FB:72 X509v3 Authority Key Identifier: keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a5c0:8000::/36 Signature Algorithm: sha256WithRSAEncryption c3:f4:b2:d8:94:78:a4:d0:d8:c2:64:ee:d6:a3:c0:5a:8d:10: 06:46:9b:a7:f1:32:2b:6d:ca:b9:b1:84:3a:81:ae:cc:46:f4: cf:a8:89:08:f0:a8:24:1f:d8:3c:b9:11:0d:02:b7:a9:c3:07: 55:ba:ec:ff:be:f8:9b:1f:86:b2:0f:44:c8:64:9f:ba:2d:42: d7:ad:ed:42:08:e2:01:cd:69:c5:82:cb:b1:b5:b8:27:46:6e: 64:16:9c:88:a9:77:5f:6a:92:eb:72:96:79:b7:fe:ff:32:56: 75:f4:fd:f1:3d:58:9e:71:19:b5:d9:0c:ba:12:a4:53:7d:03: b2:67:90:d9:23:90:19:e0:67:a2:e2:b0:0d:95:db:40:3d:a2: 34:56:90:55:84:d8:62:1e:72:0a:b2:6a:03:ea:04:13:46:98: 36:c7:4d:d2:30:93:5c:78:e6:8f:23:d1:ab:bb:1f:a1:cf:38: 2f:74:44:98:5a:b8:d6:cf:08:16:0b:67:3e:f8:76:8c:d0:40: 33:fc:15:78:24:14:09:43:f2:cb:01:af:ba:17:e6:16:5f:fe: 0a:e2:54:e1:eb:34:8f:ac:b6:3f:dc:44:03:05:ee:8a:0d:de: d7:9d:07:d1:1b:e8:67:29:db:4a:e5:2c:2c:10:87:ca:6d:5f: 19:fe:f8:65 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUE/D2yXNJjIfD8d1/h4sCyaSCYMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwM0U1MTQzRjk2NkVCMDM5ODRBQTU5NjE1MUI0N0Yw QTdDMzhFMjAeFw0yNjAxMDYxODUyMzFaFw0yNzAxMDUxODU3MzFaMDMxMTAvBgNV BAMTKEU5OTA0RjUyQ0UwODAzQzM4ODMyODJCMzhDMEU3QUUyQ0VGRUZCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUEoiKBiEDQQ+PDGluracjcyQ iqwrhxKVt5XPN0GMqjPbHZvMlQh+9YRZMgeIRdfKZPQ3PyeWWYvVT0QACldhKrWY COtETnptaNAN7TmnYZD/CF9xloFNgeKFkaXQebj9mYlHGK5to9dNCG1Evukp0iHW ePr3gyv/FV91nytVXFRE0vRyl/keyxcHhNjsN+HTqp+S4Xy3br32cixsL8B4P48r A5gQ/5gVdzwKwskjA7QStzojRgDIIse4gpSH2zBwAHfw6cCGkm0F4RwBBpIu6bdz a0oGeEZbi71avx1W+1rMiAhcjiQkFqHMYfeLTSEuFV2wcidmkXKZ/AYElNxHAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU6ZBPUs4IA8OIMoKzjA564s7++3IwHwYDVR0j BBgwFoAULwPlFD+WbrA5hKpZYVG0fwp8OOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RjM4M0M1MkRENTc3RDJEMUFGMUJBRkI0MjY3RUVENzZC OUI1NTQwRkZENDUyRjdDNjZDMDEyOUE4MjA0NTE5LzAvMkYwM0U1MTQzRjk2NkVC MDM5ODRBQTU5NjE1MUI0N0YwQTdDMzhFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjAzRTUxNDNGOTY2RUIwMzk4 NEFBNTk2MTUxQjQ3RjBBN0MzOEUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUYzODNDNTJERDU3N0QyRDFBRjFCQUZCNDI2N0VFRDc2QjlCNTU0MEZG RDQ1MkY3QzY2QzAxMjlBODIwNDUxOS8wLzMyMzgzMDMzM2E2MTM1NjMzMDNhMzgz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzMzMDMwMzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA6XAgDANBgkqhkiG9w0BAQsFAAOCAQEAw/Sy2JR4pNDYwmTu1qPAWo0Q Bkabp/EyK23KubGEOoGuzEb0z6iJCPCoJB/YPLkRDQK3qcMHVbrs/774mx+Gsg9E yGSfui1C163tQgjiAc1pxYLLsbW4J0ZuZBaciKl3X2qS63KWebf+/zJWdfT98T1Y nnEZtdkMuhKkU30DsmeQ2SOQGeBnouKwDZXbQD2iNFaQVYTYYh5yCrJqA+oEE0aY NsdN0jCTXHjmjyPRq7sfoc84L3REmFq41s8IFgtnPvh2jNBAM/wVeCQUCUPyywGv uhfmFl/+CuJU4es0j6y2P9xEAwXuig3e150H0RvoZynbSuUsLBCHym1fGf74ZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:23 2026 by rpki-client