This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa File: 323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa (raw, json) Hash identifier: VxpEYZdNmzMPy6JhhgsFrtaduz5j2iYYTcOTwiYIg4Y= Subject key identifier: 5D:AD:8B:65:71:05:10:FA:1E:F0:E2:E3:90:24:6C:7E:E1:9A:08:C2 Certificate issuer: /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998 Certificate serial: 56ED617E6440BA0DE65DAE11321B5875D0DA44B1 Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa Signing time: Tue 06 Jan 2026 19:07:42 +0000 ROA not before: Tue 06 Jan 2026 19:02:42 +0000 ROA not after: Tue 05 Jan 2027 19:07:42 +0000 asID: 271992 IP address blocks: 2803:9110:2000::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 14:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ed:61:7e:64:40:ba:0d:e6:5d:ae:11:32:1b:58:75:d0:da:44:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998 Validity Not Before: Jan 6 19:02:42 2026 GMT Not After : Jan 5 19:07:42 2027 GMT Subject: CN=5DAD8B65710510FA1EF0E2E390246C7EE19A08C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:b2:72:2b:d2:66:5d:c4:22:8c:c5:92:8c: c3:19:fb:a9:82:dd:44:58:6e:d5:09:e8:9f:fd:56: 81:20:34:26:e1:22:f4:3a:f3:35:b3:b3:86:18:a1: 51:08:44:9f:83:f0:97:fc:9e:24:2a:ee:d2:f6:88: 69:e2:c2:3c:ea:64:19:1f:a7:05:ff:46:23:ee:bf: 57:c4:ce:62:a5:8d:10:58:df:c6:5d:2d:2d:34:f5: 34:6c:10:47:aa:53:5c:3a:07:61:c6:2d:15:34:78: 5a:b0:38:38:b8:0c:1a:13:bd:a3:14:86:2e:b1:e6: e7:c4:7c:54:2c:fd:91:c3:28:37:9e:61:1c:dc:e4: 73:ab:0a:e6:e1:cd:92:80:11:49:3b:b1:5c:74:1d: 33:9d:9a:4b:7e:e3:b6:3d:b3:4d:13:6e:7f:5f:9c: 91:48:30:47:2b:31:46:6a:b4:6e:08:c4:53:74:a0: 8d:e4:59:d9:f9:51:41:f9:1e:58:15:53:96:0e:a3: 8a:58:50:70:5b:51:3d:20:25:72:53:b9:8d:c6:06: 7d:85:c0:cb:b9:17:ca:22:40:94:49:26:2a:fc:67: f1:ce:6d:92:6b:6c:43:7c:3c:38:cc:6d:08:f1:fb: d7:1b:7d:6c:37:d1:e5:e5:d7:38:e9:35:66:ee:6a: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AD:8B:65:71:05:10:FA:1E:F0:E2:E3:90:24:6C:7E:E1:9A:08:C2 X509v3 Authority Key Identifier: keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9110:2000::/48 Signature Algorithm: sha256WithRSAEncryption 2e:95:4e:e6:a3:0c:7c:3f:6a:02:cb:61:4d:eb:c9:9b:db:75: 81:15:8e:47:c8:08:ac:33:23:d7:e0:fc:b2:85:5b:63:7a:6d: 5a:50:39:b9:ce:19:bf:dc:05:b7:75:f8:a4:ed:f9:c2:2d:a0: 77:9f:79:18:74:9d:fc:4c:0d:82:a2:c8:5b:45:8c:48:f6:cc: b9:c2:d6:e2:6a:0e:71:47:e1:6f:e0:38:f3:c4:37:0c:e8:18: 59:1c:71:40:c3:a8:e6:9a:0d:58:cd:79:90:d4:40:9a:6f:cc: 16:32:99:f2:23:74:3d:94:80:d6:ed:6c:3a:b5:df:38:06:8d: 13:82:a0:17:d7:8f:e0:3f:63:5f:57:06:84:ae:ea:06:45:69: 68:f9:bc:f4:2a:7a:74:c0:ca:86:51:a0:e4:0f:ab:bc:60:89: ef:80:be:97:53:57:b0:3e:b3:dc:32:42:6d:55:14:54:e4:eb: a1:b6:17:c6:2a:ba:4b:02:76:08:18:b6:e0:14:8a:52:b7:81: 79:28:11:ae:7e:0f:5d:ba:f1:5b:43:9d:e1:e4:38:46:49:5f: aa:cd:1b:34:7b:6e:bf:48:33:c7:f3:1c:e1:70:d3:02:f6:bd: c1:b7:6c:bb:d4:7a:78:a0:69:6c:cf:05:01:c2:67:4f:cf:c3: ea:9f:a9:ac -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUVu1hfmRAug3mXa4RMhtYddDaRLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0MkFDRkNDMTQyMENEMzRFOUUyOUJGREY4NEY3MDk0 NzBGRTk5ODAeFw0yNjAxMDYxOTAyNDJaFw0yNzAxMDUxOTA3NDJaMDMxMTAvBgNV BAMTKDVEQUQ4QjY1NzEwNTEwRkExRUYwRTJFMzkwMjQ2QzdFRTE5QTA4QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N7JyK9JmXcQijMWSjMMZ+6mC 3URYbtUJ6J/9VoEgNCbhIvQ68zWzs4YYoVEIRJ+D8Jf8niQq7tL2iGniwjzqZBkf pwX/RiPuv1fEzmKljRBY38ZdLS009TRsEEeqU1w6B2HGLRU0eFqwODi4DBoTvaMU hi6x5ufEfFQs/ZHDKDeeYRzc5HOrCubhzZKAEUk7sVx0HTOdmkt+47Y9s00Tbn9f nJFIMEcrMUZqtG4IxFN0oI3kWdn5UUH5HlgVU5YOo4pYUHBbUT0gJXJTuY3GBn2F wMu5F8oiQJRJJir8Z/HObZJrbEN8PDjMbQjx+9cbfWw30eXl1zjpNWbuaiJPAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUXa2LZXEFEPoe8OLjkCRsfuGaCMIwHwYDVR0j BBgwFoAUtkKs/MFCDNNOnim/34T3CUcP6ZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MUZDMzM0MzYxN0Q5MkU0NEYxNDM1QUU5Nzc3RDdGNEVC NTlGRUFCNURGQzFENEI0MTU2MTczMTg5Q0E2NTYzLzAvQjY0MkFDRkNDMTQyMENE MzRFOUUyOUJGREY4NEY3MDk0NzBGRTk5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjQyQUNGQ0MxNDIwQ0QzNEU5 RTI5QkZERjg0RjcwOTQ3MEZFOTk4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjFGQzMzNDM2MTdEOTJFNDRGMTQzNUFFOTc3N0Q3RjRFQjU5RkVBQjVE RkMxRDRCNDE1NjE3MzE4OUNBNjU2My8wLzMyMzgzMDMzM2EzOTMxMzEzMDNhMzIz MDMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM3MzEzOTM5MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA5EQIAAwDQYJKoZIhvcNAQELBQADggEBAC6VTuajDHw/agLLYU3ryZvb dYEVjkfICKwzI9fg/LKFW2N6bVpQObnOGb/cBbd1+KTt+cItoHefeRh0nfxMDYKi yFtFjEj2zLnC1uJqDnFH4W/gOPPENwzoGFkccUDDqOaaDVjNeZDUQJpvzBYymfIj dD2UgNbtbDq13zgGjROCoBfXj+A/Y19XBoSu6gZFaWj5vPQqenTAyoZRoOQPq7xg ie+AvpdTV7A+s9wyQm1VFFTk66G2F8YquksCdggYtuAUilK3gXkoEa5+D1268VtD neHkOEZJX6rNGzR7br9IM8fzHOFw0wL2vcG3bLvUenigaWzPBQHCZ0/Pw+qfqaw= -----END CERTIFICATE-----Generated at Sun Jan 25 13:20:11 2026 by rpki-client