This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: AUsqufFJ6QmCiVlEfvyjwrGzd+kKyyqUiMxZO1XVdhI= Subject key identifier: D3:9D:85:06:5A:CF:B3:28:FA:41:0F:FF:82:E1:37:7C:3A:72:7D:AF Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 44EAC8453A82F9075FE53BC2D4BFF5564E717315 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:26 +0000 ROA not before: Tue 06 Jan 2026 19:07:26 +0000 ROA not after: Tue 05 Jan 2027 19:12:26 +0000 asID: 269782 IP address blocks: 2803:2360:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ea:c8:45:3a:82:f9:07:5f:e5:3b:c2:d4:bf:f5:56:4e:71:73:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:26 2026 GMT Not After : Jan 5 19:12:26 2027 GMT Subject: CN=D39D85065ACFB328FA410FFF82E1377C3A727DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:72:7a:a7:93:c5:f6:d9:d4:d9:66:41:92: a1:0a:4b:1e:f3:49:d3:3c:b5:89:9c:77:6f:63:de: 35:95:6f:8c:69:01:41:f3:de:03:a1:49:fe:e1:69: b8:5c:76:3b:c8:22:b7:12:f8:d1:5f:a0:3b:80:2d: fc:9b:bb:13:d8:2d:56:7b:4a:a8:b3:79:3b:5c:54: 84:59:57:0d:fb:ae:cb:94:70:8d:eb:47:a1:2e:5b: bb:a9:90:3a:3f:2d:ca:92:99:1f:c8:e9:02:3e:7a: cf:ff:98:f9:44:ba:0a:d1:b2:95:fe:c0:aa:2b:eb: d9:56:06:88:34:bd:6e:13:dc:a2:02:21:d9:74:13: a4:8b:eb:c0:5f:e3:69:5f:6b:de:ec:b3:d8:a7:9f: fe:32:ef:1f:e3:ed:d0:3f:de:45:ba:05:aa:6f:00: 29:df:26:4c:b0:13:de:ad:df:d9:80:1e:94:2d:4c: ec:5b:f5:1b:62:e2:12:bc:bf:6d:7f:bd:45:e2:c9: 38:d9:e4:fa:23:df:f6:b4:84:5a:93:17:4a:14:62: fa:7f:bc:ca:43:5f:20:7b:2c:d1:e5:69:01:82:6f: 47:8d:4b:b0:b7:9b:4a:93:d9:b9:11:0e:e2:cf:71: 44:e5:a8:e1:03:ec:89:09:aa:c7:d2:4f:4c:dc:eb: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9D:85:06:5A:CF:B3:28:FA:41:0F:FF:82:E1:37:7C:3A:72:7D:AF X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:f000::/36 Signature Algorithm: sha256WithRSAEncryption 32:b6:3e:d1:5a:ee:51:2a:2b:c1:62:f8:68:27:ae:11:82:5a: 76:41:0b:ab:05:78:34:4d:82:9c:a4:5f:0e:ea:37:f7:2d:b2: b3:0d:82:e0:06:6e:2e:0f:2a:59:a8:f0:6c:42:08:7f:03:71: aa:56:7d:bc:e7:c6:00:e1:48:05:fc:b3:e8:75:ba:63:73:31: a6:a4:bd:e8:8d:ed:2e:b4:65:21:43:81:c1:94:f9:d9:1b:e4: f7:c4:3c:d9:d4:8c:49:4b:60:71:d4:1f:f1:b1:ad:fd:aa:68: 6a:b8:37:3e:35:08:94:c3:a5:f4:63:d1:c5:c9:fd:37:8d:55: 80:f4:9c:fc:ec:ae:fb:97:54:3a:49:9c:5f:7c:e0:58:3d:79: 98:ae:d4:21:25:f2:99:d3:24:62:72:23:31:2f:72:29:31:9b: d5:0c:d8:d5:d9:1e:70:81:9b:d7:1e:f3:81:7f:e6:3f:70:ee: 36:7e:5e:84:47:88:e6:1c:e5:1f:a7:c4:61:d9:2e:7d:9d:3c: 2a:5a:51:e7:93:f8:9e:92:2e:dd:08:ac:2d:d7:66:e6:f3:9c: 19:fa:4e:5a:6e:3a:d1:db:d6:12:86:e8:44:0a:2b:1c:ad:e5: fe:26:13:e8:02:76:8c:d8:29:e6:8b:b7:19:cc:26:96:3e:90: ef:ed:5b:57 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUROrIRTqC+Qdf5TvC1L/1Vk5xcxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjZaFw0yNzAxMDUxOTEyMjZaMDMxMTAvBgNV BAMTKEQzOUQ4NTA2NUFDRkIzMjhGQTQxMEZGRjgyRTEzNzdDM0E3MjdEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5q3J6p5PF9tnU2WZBkqEKSx7z SdM8tYmcd29j3jWVb4xpAUHz3gOhSf7habhcdjvIIrcS+NFfoDuALfybuxPYLVZ7 SqizeTtcVIRZVw37rsuUcI3rR6EuW7upkDo/LcqSmR/I6QI+es//mPlEugrRspX+ wKor69lWBog0vW4T3KICIdl0E6SL68Bf42lfa97ss9inn/4y7x/j7dA/3kW6Bapv ACnfJkywE96t39mAHpQtTOxb9Rti4hK8v21/vUXiyTjZ5Poj3/a0hFqTF0oUYvp/ vMpDXyB7LNHlaQGCb0eNS7C3m0qT2bkRDuLPcUTlqOED7IkJqsfST0zc66+pAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU052FBlrPsyj6QQ//guE3fDpyfa8wHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNg8DANBgkqhkiG9w0BAQsFAAOCAQEAMrY+0VruUSorwWL4aCeuEYJa dkELqwV4NE2CnKRfDuo39y2ysw2C4AZuLg8qWajwbEIIfwNxqlZ9vOfGAOFIBfyz 6HW6Y3MxpqS96I3tLrRlIUOBwZT52Rvk98Q82dSMSUtgcdQf8bGt/apoarg3PjUI lMOl9GPRxcn9N41VgPSc/Oyu+5dUOkmcX3zgWD15mK7UISXymdMkYnIjMS9yKTGb 1QzY1dkecIGb1x7zgX/mP3DuNn5ehEeI5hzlH6fEYdkufZ08KlpR55P4npIu3Qis Lddm5vOcGfpOWm460dvWEoboRAorHK3l/iYT6AJ2jNgp5ou3Gcwmlj6Q7+1bVw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:59:22 2026 by rpki-client