This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa File: 323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa (raw, json) Hash identifier: pAp6O89rREfe1Q6tybbSy6/CnPTbfsIvjC1Qb9xC/FM= Subject key identifier: D1:F0:3D:71:DC:D7:F4:19:20:F0:A9:CC:D6:D1:A1:7D:02:80:E8:D7 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 30F0C2498E3D7E4ECB9D1CB449C56CD8345C8642 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:28 +0000 ROA not before: Tue 06 Jan 2026 19:07:28 +0000 ROA not after: Tue 05 Jan 2027 19:12:28 +0000 asID: 269782 IP address blocks: 2803:2360:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f0:c2:49:8e:3d:7e:4e:cb:9d:1c:b4:49:c5:6c:d8:34:5c:86:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:28 2026 GMT Not After : Jan 5 19:12:28 2027 GMT Subject: CN=D1F03D71DCD7F41920F0A9CCD6D1A17D0280E8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:22:13:47:22:dc:0b:63:d2:6f:d0:73:f3: 58:75:6a:bc:c4:dd:94:71:73:3a:92:c2:9e:24:ed: 3c:00:34:31:6a:72:22:ee:65:7e:c5:53:16:3a:55: 63:e5:0d:43:17:bd:41:eb:10:94:c1:71:49:99:3e: fa:95:96:dd:8a:98:e7:32:c5:96:1d:bf:8a:ee:b9: 0d:8d:33:3d:6e:6d:49:6b:13:bc:b3:6b:1c:b4:8c: 98:f4:bc:27:99:a3:0c:24:c3:e7:96:28:11:3b:ae: 45:a1:7d:a5:f3:c0:9d:60:a6:48:24:a0:df:52:33: f2:62:96:df:41:07:af:9a:27:bc:be:85:d8:39:a9: 15:06:5e:e3:46:e9:68:46:c9:69:3c:2a:8b:c3:34: 8c:0c:7f:32:19:da:70:97:e7:e3:a0:0a:a1:59:04: 8f:35:92:50:32:ef:73:98:ae:1e:ce:1b:59:01:8d: 45:da:70:37:f9:f1:1f:38:ca:bf:13:d9:46:ee:82: 98:b8:be:30:86:1a:5d:c3:62:05:75:2c:c0:32:ad: b4:7d:92:7f:1e:72:9c:ff:20:22:21:56:84:ab:48: 12:12:f1:f6:cd:e0:93:c7:ed:80:20:65:bf:fb:44: ce:13:c8:ae:9e:dd:ea:d4:cb:d0:6c:28:4f:89:32: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F0:3D:71:DC:D7:F4:19:20:F0:A9:CC:D6:D1:A1:7D:02:80:E8:D7 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a383030303a3a2f33342d3334203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:8000::/34 Signature Algorithm: sha256WithRSAEncryption 6b:f7:44:f4:d5:79:5c:46:21:c5:7d:62:68:3b:41:9b:0f:86: cf:97:65:d6:ed:4c:3d:47:a6:49:5f:41:86:c4:1e:e4:73:3f: b6:ba:fb:0f:38:aa:0e:0b:dd:a4:5d:97:57:31:d7:eb:7c:a2: ff:43:87:2a:c0:b6:06:62:63:9f:99:17:72:6f:56:2a:ec:20: 5d:ae:56:0d:d0:f3:b8:4b:15:6d:d8:e3:08:44:64:4f:f2:fd: 02:b3:ab:81:8a:30:6c:08:93:44:c8:52:7b:95:96:40:61:81: 0a:0f:12:f8:18:7f:e2:41:6d:d3:fc:1e:69:52:de:1a:8e:e6: e8:1d:48:22:44:4c:c9:57:82:80:11:2b:8a:14:05:17:ee:76: 40:eb:59:f5:53:ca:90:ec:bc:31:17:8b:ae:b4:1f:b4:15:3a: 66:8a:3a:1e:fa:fa:f6:7d:17:52:d5:e8:f5:7a:6c:fb:07:bf: f7:2e:46:e4:b2:9e:0f:5c:e3:85:5e:45:d5:0c:31:ca:61:fe: 51:f2:07:89:5e:71:dc:16:ca:e1:7d:b1:d0:7b:29:7e:b8:24: 9c:20:a3:82:0f:92:6e:c0:3e:18:90:c8:46:ab:6e:de:38:3a: 29:56:e1:03:f2:44:3e:bc:25:15:52:de:c8:a2:83:99:26:26: d0:32:0c:0b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUMPDCSY49fk7LnRy0ScVs2DRchkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjhaFw0yNzAxMDUxOTEyMjhaMDMxMTAvBgNV BAMTKEQxRjAzRDcxRENEN0Y0MTkyMEYwQTlDQ0Q2RDFBMTdEMDI4MEU4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kCITRyLcC2PSb9Bz81h1arzE 3ZRxczqSwp4k7TwANDFqciLuZX7FUxY6VWPlDUMXvUHrEJTBcUmZPvqVlt2KmOcy xZYdv4ruuQ2NMz1ubUlrE7yzaxy0jJj0vCeZowwkw+eWKBE7rkWhfaXzwJ1gpkgk oN9SM/Jilt9BB6+aJ7y+hdg5qRUGXuNG6WhGyWk8KovDNIwMfzIZ2nCX5+OgCqFZ BI81klAy73OYrh7OG1kBjUXacDf58R84yr8T2Ubugpi4vjCGGl3DYgV1LMAyrbR9 kn8ecpz/ICIhVoSrSBIS8fbN4JPH7YAgZb/7RM4TyK6e3erUy9BsKE+JMgB3AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU0fA9cdzX9Bkg8KnM1tGhfQKA6NcwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzgz MDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYoAyNggDANBgkqhkiG9w0BAQsFAAOCAQEAa/dE9NV5XEYhxX1iaDtBmw+G z5dl1u1MPUemSV9BhsQe5HM/trr7DziqDgvdpF2XVzHX63yi/0OHKsC2BmJjn5kX cm9WKuwgXa5WDdDzuEsVbdjjCERkT/L9ArOrgYowbAiTRMhSe5WWQGGBCg8S+Bh/ 4kFt0/weaVLeGo7m6B1IIkRMyVeCgBErihQFF+52QOtZ9VPKkOy8MReLrrQftBU6 Zoo6Hvr69n0XUtXo9Xps+we/9y5G5LKeD1zjhV5F1QwxymH+UfIHiV5x3BbK4X2x 0HspfrgknCCjgg+SbsA+GJDIRqtu3jg6KVbhA/JEPrwlFVLeyKKDmSYm0DIMCw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:59:28 2026 by rpki-client