This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: oA8ZzzPN+Bti6nwLfRb0Q1qSOV/5GPahc1ESb5rGEVk= Subject key identifier: CC:71:66:6B:FB:24:AA:05:C3:B2:EC:20:B5:81:62:70:47:9A:C7:75 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 4C78B72D980361B17E1C62181C484786B49262B0 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:24 +0000 ROA not before: Tue 06 Jan 2026 19:07:24 +0000 ROA not after: Tue 05 Jan 2027 19:12:24 +0000 asID: 269782 IP address blocks: 2803:2360:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:78:b7:2d:98:03:61:b1:7e:1c:62:18:1c:48:47:86:b4:92:62:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:24 2026 GMT Not After : Jan 5 19:12:24 2027 GMT Subject: CN=CC71666BFB24AA05C3B2EC20B5816270479AC775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:eb:02:29:2d:a0:47:0c:e1:3b:da:83:1d: a9:dd:e8:f9:b9:16:75:fa:0a:cd:99:80:44:01:72: 42:47:2a:62:b2:7a:c4:f7:13:6c:89:fe:32:95:66: d2:bf:85:e4:19:b1:bd:4c:11:89:f6:43:a7:8a:8d: b9:79:37:3a:9c:6b:1b:30:a7:be:6c:19:fc:3c:c4: 3a:dc:db:32:db:d1:2d:cc:5e:ed:bb:8b:1d:c3:86: 54:3a:59:6b:0c:fe:83:93:4f:e2:3d:2a:bf:9e:4f: ef:e6:fe:cc:1e:c8:b0:6a:9a:98:12:0a:0e:ee:c9: 99:18:7c:62:57:6f:5c:78:11:63:fd:eb:73:1b:ef: 2d:99:15:04:e0:46:06:b6:8f:e4:4d:33:6b:9c:83: d1:0d:16:53:d5:6e:1e:35:c0:4d:b0:be:6c:46:4e: 6e:13:87:fd:f7:68:70:21:a3:0d:56:48:5d:9c:f9: 29:66:15:07:ec:da:d3:37:c1:f8:9d:a2:a3:d5:d2: 5a:01:1d:51:73:24:78:86:a5:54:6d:e9:2e:1f:e7: 9b:5d:15:20:7f:0f:27:71:ac:1b:d7:45:60:5d:d8: 68:2d:1a:da:6d:08:0f:69:35:dd:08:e1:7f:db:59: 8c:ab:f0:0a:ad:8a:12:c4:f2:d0:71:6b:d9:47:bf: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:66:6B:FB:24:AA:05:C3:B2:EC:20:B5:81:62:70:47:9A:C7:75 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a653030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:e000::/36 Signature Algorithm: sha256WithRSAEncryption 23:4d:d2:41:75:50:c8:f5:68:f6:e6:24:78:52:1c:50:e6:4c: d1:c2:b5:9a:dc:e0:bf:2e:66:4a:26:df:bb:2c:c8:ff:ab:bb: 78:0e:fe:bc:77:2f:c5:2f:34:4b:56:82:a8:ca:ee:d4:ce:fe: ed:19:10:61:12:62:6f:0b:a3:3f:04:2e:d6:a1:1c:3e:32:5f: 74:03:6a:7b:97:d5:b8:65:48:49:45:74:20:d9:37:40:39:46: 36:23:fb:7f:58:e6:3c:d7:88:b8:ce:bf:6d:7a:b8:2e:11:08: 77:44:98:f6:83:5d:ae:3f:04:0d:43:6b:12:1d:bb:60:e4:33: c8:d9:23:ea:c2:f9:69:df:10:2c:ae:cd:f9:75:8a:0e:8a:fe: c7:be:a8:d4:84:2d:0d:be:5c:2d:61:e4:2c:2e:1f:da:ca:1f: 31:2b:dd:80:44:57:22:46:30:26:b9:e0:49:7c:d2:e2:a6:8d: 8a:35:4a:20:c0:53:e7:63:8a:79:6c:84:b9:3c:a7:66:d4:ff: 41:33:76:fe:95:5f:b8:ec:3d:59:0a:94:00:3e:83:8f:b2:48: fe:cb:bb:6e:bb:86:cf:58:85:20:e4:3b:ec:df:a9:71:47:28: 27:66:5b:b4:16:cc:6e:46:cf:db:65:54:03:9d:71:e8:75:9d: d5:a6:f4:da -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTHi3LZgDYbF+HGIYHEhHhrSSYrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjRaFw0yNzAxMDUxOTEyMjRaMDMxMTAvBgNV BAMTKENDNzE2NjZCRkIyNEFBMDVDM0IyRUMyMEI1ODE2MjcwNDc5QUM3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nOsCKS2gRwzhO9qDHand6Pm5 FnX6Cs2ZgEQBckJHKmKyesT3E2yJ/jKVZtK/heQZsb1MEYn2Q6eKjbl5Nzqcaxsw p75sGfw8xDrc2zLb0S3MXu27ix3DhlQ6WWsM/oOTT+I9Kr+eT+/m/sweyLBqmpgS Cg7uyZkYfGJXb1x4EWP963Mb7y2ZFQTgRga2j+RNM2ucg9ENFlPVbh41wE2wvmxG Tm4Th/33aHAhow1WSF2c+SlmFQfs2tM3wfidoqPV0loBHVFzJHiGpVRt6S4f55td FSB/DydxrBvXRWBd2GgtGtptCA9pNd0I4X/bWYyr8AqtihLE8tBxa9lHv3+RAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUzHFma/skqgXDsuwgtYFicEeax3UwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhNjUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNg4DANBgkqhkiG9w0BAQsFAAOCAQEAI03SQXVQyPVo9uYkeFIcUOZM 0cK1mtzgvy5mSibfuyzI/6u7eA7+vHcvxS80S1aCqMru1M7+7RkQYRJibwujPwQu 1qEcPjJfdANqe5fVuGVISUV0INk3QDlGNiP7f1jmPNeIuM6/bXq4LhEId0SY9oNd rj8EDUNrEh27YOQzyNkj6sL5ad8QLK7N+XWKDor+x76o1IQtDb5cLWHkLC4f2sof MSvdgERXIkYwJrngSXzS4qaNijVKIMBT52OKeWyEuTynZtT/QTN2/pVfuOw9WQqU AD6Dj7JI/su7bruGz1iFIOQ77N+pcUcoJ2ZbtBbMbkbP22VUA51x6HWd1ab02g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:08:08 2026 by rpki-client