This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa File: 323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa (raw, json) Hash identifier: DLSYGmEkr4bqhwuIbgJDTiSeGbDLZ2odAnKsCVc0DFI= Subject key identifier: 60:E2:7D:68:26:F1:44:0E:AA:E8:21:E0:E9:36:1C:FF:56:EF:E2:62 Certificate issuer: /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC Certificate serial: 6FD271C8A62E5297DA5FE2BEDB752074F60DB80E Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa Signing time: Tue 06 Jan 2026 19:45:12 +0000 ROA not before: Tue 06 Jan 2026 19:40:12 +0000 ROA not after: Tue 05 Jan 2027 19:45:12 +0000 asID: 272848 IP address blocks: 2803:5200:6413::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 14:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d2:71:c8:a6:2e:52:97:da:5f:e2:be:db:75:20:74:f6:0d:b8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC Validity Not Before: Jan 6 19:40:12 2026 GMT Not After : Jan 5 19:45:12 2027 GMT Subject: CN=60E27D6826F1440EAAE821E0E9361CFF56EFE262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:3f:bb:73:fd:87:15:e1:fe:50:b3:b7:b3: 02:57:df:3c:bf:7d:9a:bf:01:b7:69:1e:0f:eb:43: 5a:52:ec:9a:68:29:6e:c8:28:9c:1c:10:d0:c3:ea: fb:ef:5d:4b:64:6c:76:3e:8a:75:11:65:e9:ee:8d: 71:d2:22:3a:9e:79:80:99:cf:f3:26:54:e1:89:91: 5d:eb:24:65:6e:d3:0a:5e:58:00:df:be:b4:0e:1e: 09:52:28:09:fd:95:79:c8:25:0d:31:af:e1:a6:da: 9a:a2:6e:0f:20:8e:f8:a0:fe:30:ce:93:10:ca:57: 97:f2:6a:61:5b:ba:60:52:32:21:28:54:12:30:2d: 52:41:42:81:0e:7f:ab:91:3c:cc:66:86:f6:5a:1e: 11:a1:20:f4:7b:da:63:cf:33:b7:72:e2:69:65:00: d9:2b:b8:37:73:97:57:ad:ef:8f:de:29:ed:0b:1f: d0:a6:95:0d:1f:bf:54:e9:fa:d9:3c:39:01:19:c3: c2:9d:38:b6:95:bc:c3:50:7a:af:3e:63:d9:c5:0b: c0:9e:5d:c0:5c:48:8c:82:fb:b7:57:b7:b7:0f:f4: 57:1f:fb:23:c2:74:79:f0:8a:a6:d0:fa:13:df:01: 96:f9:14:52:42:58:e6:c2:d5:cb:db:58:2b:81:b5: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:7D:68:26:F1:44:0E:AA:E8:21:E0:E9:36:1C:FF:56:EF:E2:62 X509v3 Authority Key Identifier: keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5200:6413::/48 Signature Algorithm: sha256WithRSAEncryption 9d:93:81:3a:4e:7b:fb:31:c3:02:da:34:2c:df:2b:f0:17:68: 7d:d0:00:b8:62:d1:54:1d:38:f1:7f:54:90:2f:59:49:16:b7: a3:2d:26:60:d3:fd:36:11:7c:82:f9:1e:07:b4:10:35:a7:a2: f6:08:94:b1:09:1a:e7:c4:34:ae:96:9f:d5:96:9d:e1:ea:d3: fd:84:b1:8c:f7:44:73:8e:60:0d:ad:f3:ad:66:d4:7c:95:65: c1:1f:d4:e8:77:42:d7:4a:0d:0f:27:9a:fe:60:0b:4d:0e:01: 42:81:a8:d2:18:a9:e2:04:3a:6b:4a:bc:06:b6:a5:14:f4:a4: b9:e5:18:43:12:dc:6c:3f:2f:38:75:77:54:c7:dc:6b:42:c3: 2b:53:c5:01:97:e5:1b:f9:2f:e7:2e:66:06:5e:28:a1:ba:e2: 0a:46:0b:19:60:4f:11:fe:42:8e:e4:25:c2:db:d7:01:96:67: 0e:08:6e:4a:3b:43:bc:b2:26:0c:2a:6d:16:c1:19:6f:7e:ac: 28:7c:a9:0f:9f:7f:bf:db:81:33:f9:f2:9d:1d:51:55:8b:76: 13:d1:a6:02:72:a4:e2:8e:3b:7c:a2:c6:20:41:5b:cb:59:cd: 44:f5:22:69:b1:3a:47:4f:98:65:7e:92:68:77:c3:dd:6c:38: 13:e4:1b:2a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUb9JxyKYuUpfaX+K+23UgdPYNuA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG NjE3NUVEQzAeFw0yNjAxMDYxOTQwMTJaFw0yNzAxMDUxOTQ1MTJaMDMxMTAvBgNV BAMTKDYwRTI3RDY4MjZGMTQ0MEVBQUU4MjFFMEU5MzYxQ0ZGNTZFRkUyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8D+7c/2HFeH+ULO3swJX3zy/ fZq/AbdpHg/rQ1pS7JpoKW7IKJwcENDD6vvvXUtkbHY+inURZenujXHSIjqeeYCZ z/MmVOGJkV3rJGVu0wpeWADfvrQOHglSKAn9lXnIJQ0xr+Gm2pqibg8gjvig/jDO kxDKV5fyamFbumBSMiEoVBIwLVJBQoEOf6uRPMxmhvZaHhGhIPR72mPPM7dy4mll ANkruDdzl1et74/eKe0LH9CmlQ0fv1Tp+tk8OQEZw8KdOLaVvMNQeq8+Y9nFC8Ce XcBcSIyC+7dXt7cP9Fcf+yPCdHnwiqbQ+hPfAZb5FFJCWObC1cvbWCuBtYkPAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUYOJ9aCbxRA6q6CHg6TYc/1bv4mIwHwYDVR0j BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4 M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzgzMDMzM2EzNTMyMzAzMDNhMzYz NDMxMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA1IAZBMwDQYJKoZIhvcNAQELBQADggEBAJ2TgTpOe/sxwwLaNCzfK/AX aH3QALhi0VQdOPF/VJAvWUkWt6MtJmDT/TYRfIL5Hge0EDWnovYIlLEJGufENK6W n9WWneHq0/2EsYz3RHOOYA2t861m1HyVZcEf1Oh3QtdKDQ8nmv5gC00OAUKBqNIY qeIEOmtKvAa2pRT0pLnlGEMS3Gw/Lzh1d1TH3GtCwytTxQGX5Rv5L+cuZgZeKKG6 4gpGCxlgTxH+Qo7kJcLb1wGWZw4Ibko7Q7yyJgwqbRbBGW9+rCh8qQ+ff7/bgTP5 8p0dUVWLdhPRpgJypOKOO3yixiBBW8tZzUT1ImmxOkdPmGV+kmh3w91sOBPkGyo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:04 2026 by rpki-client