This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: nIWJm95Gr8T0Awy++bMHxetYHkVZ31lsVY6j8cEW2no= Subject key identifier: 82:D7:A8:57:02:70:AD:77:40:7F:9C:E8:48:41:26:B6:AB:09:14:48 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 49F02044BBE666E53A4B0C6E2394758B47D49512 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:22 +0000 ROA not before: Tue 06 Jan 2026 19:07:22 +0000 ROA not after: Tue 05 Jan 2027 19:12:22 +0000 asID: 269782 IP address blocks: 2803:2360:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f0:20:44:bb:e6:66:e5:3a:4b:0c:6e:23:94:75:8b:47:d4:95:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:22 2026 GMT Not After : Jan 5 19:12:22 2027 GMT Subject: CN=82D7A8570270AD77407F9CE8484126B6AB091448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:cf:01:2e:87:10:62:a4:65:ed:7e:70:a4: 16:6b:3d:d4:4e:4b:89:ec:e1:49:48:a4:95:41:8f: 89:62:f2:99:1a:95:be:c2:88:6c:e9:ec:84:25:09: b4:7c:b0:8c:aa:b3:5e:e7:85:e1:ba:83:5e:ff:a0: ad:5e:cb:11:ac:e6:ed:56:23:58:95:d6:04:5b:7b: e2:fc:ba:06:e2:cf:38:05:a5:8b:12:13:36:8a:98: 97:47:fe:9c:d6:bf:47:90:eb:4e:cb:79:0c:28:bd: d5:58:a1:68:55:16:53:22:3d:1a:48:fc:ae:2b:9d: 47:bd:70:96:36:1f:2b:4e:53:8b:f2:d8:e2:d3:45: 9f:9b:23:1b:9e:68:3d:6a:7d:28:36:49:20:ac:2b: f4:00:d3:b3:7d:82:dc:68:31:3d:c5:16:99:0f:9f: 39:68:69:2c:bd:ec:81:22:84:4b:01:7e:7f:e8:e2: 5d:74:ef:f1:9f:0a:cc:da:e4:ad:fb:6f:1b:18:7b: c6:ba:68:96:ec:d4:e5:1d:ab:2c:b6:3a:dc:4a:3a: 86:f8:38:40:7e:21:52:6f:13:15:a2:35:df:a4:94: 00:86:87:8f:d9:57:34:85:13:59:7f:1b:9b:3c:88: 7b:24:6c:70:78:47:cf:b6:ae:bb:fc:4a:fd:de:82: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:A8:57:02:70:AD:77:40:7F:9C:E8:48:41:26:B6:AB:09:14:48 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:a000::/36 Signature Algorithm: sha256WithRSAEncryption 34:45:28:fb:e7:e9:01:10:65:4c:5e:dc:9d:af:54:48:23:9c: d8:a2:ea:b0:58:d6:46:e0:91:1d:1b:10:c5:8d:b2:45:3e:f5: 46:db:65:e3:a0:e5:a2:e4:55:0a:3c:28:25:69:89:f4:c6:fd: c6:02:d0:2b:fa:8f:d7:05:43:bc:82:01:50:e1:82:66:94:b6: 31:fb:00:8b:ba:8d:0d:12:a6:0d:8c:eb:76:20:6c:5c:fe:9f: 77:6d:3c:8b:23:83:07:84:65:e4:74:38:ce:03:4e:dc:b8:b2: f2:ea:2e:ee:88:15:f3:92:be:a8:69:73:eb:b2:73:d4:44:e1: 5a:c5:59:48:49:76:67:24:1f:37:78:a4:46:3e:ff:c2:74:c3: b6:49:08:f9:07:4a:34:f3:45:d0:3f:4f:b4:97:4e:5c:2b:fd: d1:29:88:01:ea:2f:d3:48:64:a3:8a:88:7f:cc:74:30:82:2f: ff:9b:00:d8:44:3e:b7:79:9a:12:19:81:e2:9b:cc:40:a8:0f: 4a:05:ae:50:0a:18:73:7f:02:4a:a2:2c:7c:d7:92:db:6c:29: e5:f5:f3:d7:80:50:cc:75:5f:2d:0f:97:9d:e1:3b:93:6c:bd: ac:b5:81:26:c4:ee:84:f6:c4:c3:b8:35:9a:26:74:6d:e4:1e: d7:08:f6:26 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSfAgRLvmZuU6SwxuI5R1i0fUlRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjJaFw0yNzAxMDUxOTEyMjJaMDMxMTAvBgNV BAMTKDgyRDdBODU3MDI3MEFENzc0MDdGOUNFODQ4NDEyNkI2QUIwOTE0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+M8BLocQYqRl7X5wpBZrPdRO S4ns4UlIpJVBj4li8pkalb7CiGzp7IQlCbR8sIyqs17nheG6g17/oK1eyxGs5u1W I1iV1gRbe+L8ugbizzgFpYsSEzaKmJdH/pzWv0eQ607LeQwovdVYoWhVFlMiPRpI /K4rnUe9cJY2HytOU4vy2OLTRZ+bIxueaD1qfSg2SSCsK/QA07N9gtxoMT3FFpkP nzloaSy97IEihEsBfn/o4l107/GfCsza5K37bxsYe8a6aJbs1OUdqyy2OtxKOob4 OEB+IVJvExWiNd+klACGh4/ZVzSFE1l/G5s8iHskbHB4R8+2rrv8Sv3eghMvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUgteoVwJwrXdAf5zoSEEmtqsJFEgwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhNjEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgoDANBgkqhkiG9w0BAQsFAAOCAQEANEUo++fpARBlTF7cna9USCOc 2KLqsFjWRuCRHRsQxY2yRT71Rttl46DlouRVCjwoJWmJ9Mb9xgLQK/qP1wVDvIIB UOGCZpS2MfsAi7qNDRKmDYzrdiBsXP6fd208iyODB4Rl5HQ4zgNO3Liy8uou7ogV 85K+qGlz67Jz1EThWsVZSEl2ZyQfN3ikRj7/wnTDtkkI+QdKNPNF0D9PtJdOXCv9 0SmIAeov00hko4qIf8x0MIIv/5sA2EQ+t3maEhmB4pvMQKgPSgWuUAoYc38CSqIs fNeS22wp5fXz14BQzHVfLQ+XneE7k2y9rLWBJsTuhPbEw7g1miZ0beQe1wj2Jg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:59:01 2026 by rpki-client