This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa File: 323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa (raw, json) Hash identifier: 6n4EIJGmvMYkIHSeWqNJCptnHX42uGY6Lv6d4/1Zcf8= Subject key identifier: 7C:F6:FC:05:71:CD:83:7A:23:8D:A7:23:C7:E5:79:97:52:4D:EA:34 Certificate issuer: /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998 Certificate serial: 4E4F2D2ABECDF0654858D915F603199F8D567969 Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa Signing time: Tue 06 Jan 2026 19:07:42 +0000 ROA not before: Tue 06 Jan 2026 19:02:42 +0000 ROA not after: Tue 05 Jan 2027 19:07:42 +0000 asID: 271992 IP address blocks: 2803:9110:3000::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 14:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4f:2d:2a:be:cd:f0:65:48:58:d9:15:f6:03:19:9f:8d:56:79:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998 Validity Not Before: Jan 6 19:02:42 2026 GMT Not After : Jan 5 19:07:42 2027 GMT Subject: CN=7CF6FC0571CD837A238DA723C7E57997524DEA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:bc:53:48:52:1c:25:63:db:c5:3e:c8:e7: 0d:7c:24:39:2e:35:a4:25:44:eb:17:76:6f:0e:f1: 57:e7:73:bd:9d:61:61:4f:94:ea:cc:28:41:bd:fc: d4:dc:d2:c4:f5:13:8f:17:5b:3e:20:72:6d:f3:42: 86:70:f5:b2:2f:90:33:e9:55:64:bd:1c:9d:6f:a8: 73:91:e6:8b:34:fb:ad:b9:0a:99:0f:52:2c:71:13: a6:0c:60:aa:85:ec:31:d9:20:29:20:47:ca:da:78: 3c:16:ef:ff:a8:b2:87:0d:a5:93:76:0c:1c:09:4c: 3e:ba:ea:1c:2b:0d:72:77:bc:8c:72:c9:71:3b:29: a5:09:c8:c4:42:ac:c5:15:86:e1:14:60:6f:2f:46: dc:33:e9:3c:bf:57:b0:bf:f1:e8:8e:9b:0f:7f:f0: e0:85:6c:30:cb:a9:7d:89:9b:26:f9:3f:a1:ba:08: 81:8a:f5:8a:f9:f5:45:a5:0e:a3:24:7e:67:62:24: 45:34:86:8d:e0:18:3e:c5:2c:05:d9:cb:47:2c:5d: fa:bd:15:c3:7b:05:25:bd:1c:31:60:cc:5e:a6:ab: d9:83:8a:d8:65:cf:fe:ab:e1:e2:8c:ad:b6:3d:a6: 6e:a6:77:e0:a4:56:85:58:51:bd:13:51:3c:e3:35: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:FC:05:71:CD:83:7A:23:8D:A7:23:C7:E5:79:97:52:4D:EA:34 X509v3 Authority Key Identifier: keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9110:3000::/48 Signature Algorithm: sha256WithRSAEncryption 81:61:78:ff:7d:e9:35:a3:12:a3:c0:d4:ee:57:6b:09:01:a8: ce:21:e7:8f:6d:79:1e:2d:cf:b6:fa:3a:ee:64:b4:6d:56:1b: 16:95:9b:8c:1b:de:43:b7:90:1e:bd:e7:f4:b2:ea:68:71:da: 95:b1:96:32:8c:da:fb:21:6c:e2:cb:80:e0:24:99:40:41:fc: b7:82:d6:5c:64:1b:95:2e:ee:9f:b2:e8:b8:d5:be:3a:64:df: c0:62:ee:68:82:b5:68:55:88:7a:c3:f5:29:ed:56:69:dd:4a: eb:c7:8e:9f:e0:fc:6f:09:f0:49:89:b8:83:7b:8e:be:55:74: 14:24:b3:0d:2c:8b:ca:6f:cf:80:6e:a3:8c:b0:2b:e1:80:d7: ba:52:a9:ac:7b:7c:b9:55:d4:ef:d3:1a:71:c5:7b:63:18:1c: be:0a:f4:a8:c8:34:2e:7d:5c:95:ca:68:21:a4:b8:6b:e9:c0: 2b:9b:af:9b:33:39:57:38:44:e8:8b:79:9c:6e:9a:d4:e7:e2: e4:c9:d0:39:42:11:9a:e7:9e:31:dc:1e:0b:f9:16:32:4c:ae: 18:34:21:de:39:2f:03:56:ed:75:50:2a:8f:1c:d6:00:27:5d: aa:6f:2e:29:96:e3:09:35:d5:52:f9:4d:66:4a:9d:0a:13:42: d6:3f:26:a8 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUTk8tKr7N8GVIWNkV9gMZn41WeWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0MkFDRkNDMTQyMENEMzRFOUUyOUJGREY4NEY3MDk0 NzBGRTk5ODAeFw0yNjAxMDYxOTAyNDJaFw0yNzAxMDUxOTA3NDJaMDMxMTAvBgNV BAMTKDdDRjZGQzA1NzFDRDgzN0EyMzhEQTcyM0M3RTU3OTk3NTI0REVBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQbxTSFIcJWPbxT7I5w18JDku NaQlROsXdm8O8Vfnc72dYWFPlOrMKEG9/NTc0sT1E48XWz4gcm3zQoZw9bIvkDPp VWS9HJ1vqHOR5os0+625CpkPUixxE6YMYKqF7DHZICkgR8raeDwW7/+osocNpZN2 DBwJTD666hwrDXJ3vIxyyXE7KaUJyMRCrMUVhuEUYG8vRtwz6Ty/V7C/8eiOmw9/ 8OCFbDDLqX2Jmyb5P6G6CIGK9Yr59UWlDqMkfmdiJEU0ho3gGD7FLAXZy0csXfq9 FcN7BSW9HDFgzF6mq9mDithlz/6r4eKMrbY9pm6md+CkVoVYUb0TUTzjNX0TAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUfPb8BXHNg3ojjacjx+V5l1JN6jQwHwYDVR0j BBgwFoAUtkKs/MFCDNNOnim/34T3CUcP6ZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MUZDMzM0MzYxN0Q5MkU0NEYxNDM1QUU5Nzc3RDdGNEVC NTlGRUFCNURGQzFENEI0MTU2MTczMTg5Q0E2NTYzLzAvQjY0MkFDRkNDMTQyMENE MzRFOUUyOUJGREY4NEY3MDk0NzBGRTk5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjQyQUNGQ0MxNDIwQ0QzNEU5 RTI5QkZERjg0RjcwOTQ3MEZFOTk4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjFGQzMzNDM2MTdEOTJFNDRGMTQzNUFFOTc3N0Q3RjRFQjU5RkVBQjVE RkMxRDRCNDE1NjE3MzE4OUNBNjU2My8wLzMyMzgzMDMzM2EzOTMxMzEzMDNhMzMz MDMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM3MzEzOTM5MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA5EQMAAwDQYJKoZIhvcNAQELBQADggEBAIFheP996TWjEqPA1O5XawkB qM4h549teR4tz7b6Ou5ktG1WGxaVm4wb3kO3kB695/Sy6mhx2pWxljKM2vshbOLL gOAkmUBB/LeC1lxkG5Uu7p+y6LjVvjpk38Bi7miCtWhViHrD9SntVmndSuvHjp/g /G8J8EmJuIN7jr5VdBQksw0si8pvz4Buo4ywK+GA17pSqax7fLlV1O/TGnHFe2MY HL4K9KjINC59XJXKaCGkuGvpwCubr5szOVc4ROiLeZxumtTn4uTJ0DlCEZrnnjHc Hgv5FjJMrhg0Id45LwNW7XVQKo8c1gAnXapvLimW4wk11VL5TWZKnQoTQtY/Jqg= -----END CERTIFICATE-----Generated at Sun Jan 25 13:20:10 2026 by rpki-client