This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa File: 323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa (raw, json) Hash identifier: knro30n8Q0noToGWSr2sOEENV82HQFJAZK/TnUYFTlc= Subject key identifier: 16:CF:00:9E:E4:FF:83:F4:8A:E2:EE:D4:47:7B:8A:BC:5C:D6:ED:DB Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 4ED3BFF386EC5FD7B77FC43F3C2381481CACC858 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa Signing time: Tue 06 Jan 2026 22:59:07 +0000 ROA not before: Tue 06 Jan 2026 22:54:07 +0000 ROA not after: Tue 05 Jan 2027 22:59:07 +0000 asID: 271803 IP address blocks: 2803:b0e0:801b::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d3:bf:f3:86:ec:5f:d7:b7:7f:c4:3f:3c:23:81:48:1c:ac:c8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 22:54:07 2026 GMT Not After : Jan 5 22:59:07 2027 GMT Subject: CN=16CF009EE4FF83F48AE2EED4477B8ABC5CD6EDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:7d:b1:17:e0:07:49:3f:16:3d:ec:20:ec: d3:a2:cc:b2:c8:fa:26:a2:ce:3f:ca:c9:7f:6e:df: 20:ac:e7:45:19:c3:43:5e:59:34:d0:bb:e5:6f:93: 16:63:6e:d1:63:2e:0b:79:b4:8d:0a:60:fa:00:ec: 2d:56:53:2e:22:59:fc:21:63:df:63:f0:0e:22:46: 41:d4:61:6b:36:28:41:42:94:53:64:24:1f:09:9d: 67:68:c3:8d:ec:a7:e0:f3:0d:25:2a:ef:a8:56:52: 67:4e:0c:cf:3d:99:9d:54:a5:46:55:ee:a5:d6:bb: b1:68:5a:51:93:44:4d:77:e2:89:a8:5b:39:f3:d3: 84:2e:20:50:e2:69:f7:3e:d8:ee:da:f0:76:82:1d: df:66:16:56:f5:0a:5d:fa:3a:cc:5e:a1:05:fd:0f: 17:54:a0:78:5d:55:cf:b1:cc:fc:83:90:ee:50:70: 1d:98:a3:86:e9:2b:8f:d1:6a:6f:a2:bf:60:c5:45: 53:4e:9a:d3:46:ff:f6:68:ff:ad:76:44:30:e5:18: eb:ce:3e:59:b7:e1:e9:e2:b6:d4:3c:56:48:29:21: a7:50:48:9b:cf:97:38:25:13:7e:cf:8c:30:c7:27: 25:71:a3:cc:6d:ba:44:e9:8f:3e:87:ac:ff:4f:53: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:00:9E:E4:FF:83:F4:8A:E2:EE:D4:47:7B:8A:BC:5C:D6:ED:DB X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:801b::/48 Signature Algorithm: sha256WithRSAEncryption 26:6f:54:a7:a0:20:80:44:30:52:f9:87:e9:64:a3:8a:8d:10: b9:e9:de:99:22:b2:43:1a:e4:92:63:0b:a5:2c:0a:e0:2f:f8: b6:63:fa:c6:f5:d0:90:1c:fe:24:05:c4:e6:ea:cc:c9:a0:41: 05:c8:94:d7:e9:35:86:6d:81:d7:05:17:14:50:c8:25:8a:69: 7d:ff:d2:41:c8:c1:59:ae:dc:cd:04:cb:5e:bb:2e:e8:3d:e5: 66:a0:35:fa:e6:56:7f:34:3a:bf:bd:9c:63:16:55:5a:bc:f3: 1a:3d:d9:af:f1:99:65:82:fd:7d:fe:db:a5:3c:1b:21:3c:fe: 2f:da:2f:c3:5b:18:07:f3:34:ec:45:0d:96:0e:14:70:5f:33: bd:bf:b2:13:49:67:2e:88:bb:27:e8:e3:a3:8b:c6:cc:80:c0: 16:6b:eb:92:1e:9a:59:63:33:37:09:bf:08:f5:7d:2d:0f:01: fd:ac:c0:3d:d7:ad:e5:d0:45:48:d1:53:90:8b:8f:50:88:94: 03:0d:6c:4d:4e:e6:2e:18:32:db:6d:d3:2e:1d:63:ee:5d:eb: 25:56:0b:37:75:4a:cc:39:c5:2a:5c:ff:ea:5b:f7:3b:b2:03: 4b:93:2a:73:9b:95:f4:45:e8:cc:fd:5c:b9:32:63:3a:8c:0d: 21:e7:e6:89 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUTtO/84bsX9e3f8Q/PCOBSBysyFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYyMjU0MDdaFw0yNzAxMDUyMjU5MDdaMDMxMTAvBgNV BAMTKDE2Q0YwMDlFRTRGRjgzRjQ4QUUyRUVENDQ3N0I4QUJDNUNENkVEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSqH2xF+AHST8WPewg7NOizLLI +iaizj/KyX9u3yCs50UZw0NeWTTQu+VvkxZjbtFjLgt5tI0KYPoA7C1WUy4iWfwh Y99j8A4iRkHUYWs2KEFClFNkJB8JnWdow43sp+DzDSUq76hWUmdODM89mZ1UpUZV 7qXWu7FoWlGTRE134omoWznz04QuIFDiafc+2O7a8HaCHd9mFlb1Cl36OsxeoQX9 DxdUoHhdVc+xzPyDkO5QcB2Yo4bpK4/Ram+iv2DFRVNOmtNG//Zo/612RDDlGOvO Plm34enittQ8VkgpIadQSJvPlzglE37PjDDHJyVxo8xtukTpjz6HrP9PU8yNAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUFs8AnuT/g/SK4u7UR3uKvFzW7dswHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz MDMxNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODMwMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DggBswDQYJKoZIhvcNAQELBQADggEBACZvVKegIIBEMFL5h+lko4qN ELnp3pkiskMa5JJjC6UsCuAv+LZj+sb10JAc/iQFxObqzMmgQQXIlNfpNYZtgdcF FxRQyCWKaX3/0kHIwVmu3M0Ey167Lug95WagNfrmVn80Or+9nGMWVVq88xo92a/x mWWC/X3+26U8GyE8/i/aL8NbGAfzNOxFDZYOFHBfM72/shNJZy6Iuyfo46OLxsyA wBZr65IemlljMzcJvwj1fS0PAf2swD3XreXQRUjRU5CLj1CIlAMNbE1O5i4YMttt 0y4dY+5d6yVWCzd1Ssw5xSpc/+pb9zuyA0uTKnOblfRF6Mz9XLkyYzqMDSHn5ok= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:18 2026 by rpki-client