This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: rOJdMMtuX/sdjfheHAIL44Cn4slh4Mi5bghWgC+BN78= Subject key identifier: D5:C4:39:CF:40:26:AD:44:8E:5C:8C:7B:84:87:69:A7:33:D4:EE:28 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 478163D7BF28B86F32A13956903D43E74EF20696 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:24 +0000 ROA not before: Tue 06 Jan 2026 19:07:24 +0000 ROA not after: Tue 05 Jan 2027 19:12:24 +0000 asID: 269782 IP address blocks: 2803:2360:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:81:63:d7:bf:28:b8:6f:32:a1:39:56:90:3d:43:e7:4e:f2:06:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:24 2026 GMT Not After : Jan 5 19:12:24 2027 GMT Subject: CN=D5C439CF4026AD448E5C8C7B848769A733D4EE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:94:41:32:bf:ad:a8:78:3b:c6:11:53:58: 71:dd:b9:42:8b:b4:8a:59:74:cb:bf:de:5a:2c:73: ba:66:ff:90:91:94:93:2c:2b:cb:c1:e8:17:52:b4: e5:14:39:e0:2f:6b:52:b4:9c:fc:ba:03:33:89:4b: 0f:7b:9c:c6:bd:4d:94:a6:89:65:ff:ab:31:51:16: 3f:fe:be:2a:2a:f4:44:7a:93:b1:b0:f9:47:9d:1b: 2c:b6:0d:ac:eb:45:89:34:15:d8:28:50:b1:7d:dc: 0a:11:7e:50:9c:46:0e:8e:93:71:40:8b:c2:f8:0b: fc:e3:f7:57:3d:be:a2:e8:cd:83:fe:06:07:f1:f3: 42:0b:48:11:94:20:c3:6e:54:f6:f9:7f:c7:1d:6d: c9:b8:a6:69:ab:68:cb:45:12:c7:a6:b9:f1:81:9e: 1e:cc:30:5e:8d:52:f2:b8:54:a0:c4:56:3b:8f:e1: 71:2f:84:35:b0:0d:67:33:00:65:ba:5d:35:ba:81: 13:5c:58:7c:65:c8:a2:a2:6d:89:8a:cc:28:e4:f5: 65:24:c7:e5:5e:5e:26:c4:70:89:b9:8f:09:55:84: 8d:ff:ae:01:e9:b8:9b:bf:a1:6c:24:1f:cb:51:81: 1e:e5:41:be:91:63:02:76:c1:cc:c8:b6:5d:2b:f5: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:39:CF:40:26:AD:44:8E:5C:8C:7B:84:87:69:A7:33:D4:EE:28 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:c000::/36 Signature Algorithm: sha256WithRSAEncryption 23:b6:0e:33:d3:6e:22:61:22:a7:83:96:06:8b:17:76:85:87: 27:fa:93:2a:16:09:ae:c9:36:48:e5:9b:d4:f6:9a:25:dd:39: f6:ea:52:ba:aa:aa:95:22:cb:5f:a5:20:b9:35:4e:6c:a7:2d: 59:34:2a:b7:ad:0b:01:51:e1:f0:0b:6e:c3:68:f4:96:b6:eb: 00:62:46:bb:63:cd:aa:65:a6:8c:4a:b7:be:ca:09:f0:ea:de: ab:84:43:1a:b0:6f:fc:47:38:60:f1:63:a1:29:2b:3d:2c:42: 03:ce:9b:07:5f:e7:49:bb:a4:3e:81:fa:2a:c2:2b:f8:dd:41: 05:db:42:db:6d:47:b0:1d:26:f7:3b:cc:89:ce:14:76:a9:13: 08:fe:1a:bc:b9:c0:83:fa:f7:01:47:c6:11:3f:78:0f:a2:0a: 2c:85:99:79:54:d6:ee:fe:2a:3b:e0:15:6f:3d:b1:50:35:a3: ac:48:02:ca:f6:77:17:ff:10:25:87:9f:13:31:bd:64:c5:97: 66:77:14:99:2b:e4:8f:0c:ca:d4:28:05:61:47:7a:24:16:b4: a8:74:d4:66:ba:37:11:d1:d4:42:36:c9:0e:d1:0f:d3:c8:e9: 29:c4:08:9a:59:9a:2b:15:21:5a:b3:24:a4:76:36:6b:96:6a: 28:68:39:90 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUR4Fj178ouG8yoTlWkD1D507yBpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjRaFw0yNzAxMDUxOTEyMjRaMDMxMTAvBgNV BAMTKEQ1QzQzOUNGNDAyNkFENDQ4RTVDOEM3Qjg0ODc2OUE3MzNENEVFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ipRBMr+tqHg7xhFTWHHduUKL tIpZdMu/3losc7pm/5CRlJMsK8vB6BdStOUUOeAva1K0nPy6AzOJSw97nMa9TZSm iWX/qzFRFj/+vioq9ER6k7Gw+UedGyy2DazrRYk0FdgoULF93AoRflCcRg6Ok3FA i8L4C/zj91c9vqLozYP+Bgfx80ILSBGUIMNuVPb5f8cdbcm4pmmraMtFEsemufGB nh7MMF6NUvK4VKDEVjuP4XEvhDWwDWczAGW6XTW6gRNcWHxlyKKibYmKzCjk9WUk x+VeXibEcIm5jwlVhI3/rgHpuJu/oWwkH8tRgR7lQb6RYwJ2wczItl0r9cb7AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU1cQ5z0AmrUSOXIx7hIdppzPU7igwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhNjMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgwDANBgkqhkiG9w0BAQsFAAOCAQEAI7YOM9NuImEip4OWBosXdoWH J/qTKhYJrsk2SOWb1PaaJd059upSuqqqlSLLX6UguTVObKctWTQqt60LAVHh8Atu w2j0lrbrAGJGu2PNqmWmjEq3vsoJ8Oreq4RDGrBv/Ec4YPFjoSkrPSxCA86bB1/n SbukPoH6KsIr+N1BBdtC221HsB0m9zvMic4UdqkTCP4avLnAg/r3AUfGET94D6IK LIWZeVTW7v4qO+AVbz2xUDWjrEgCyvZ3F/8QJYefEzG9ZMWXZncUmSvkjwzK1CgF YUd6JBa0qHTUZro3EdHUQjbJDtEP08jpKcQImlmaKxUhWrMkpHY2a5ZqKGg5kA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:59:10 2026 by rpki-client