This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323734323934.roa File: 323830333a623065303a383032313a3a2f34382d3438203d3e20323734323934.roa (raw, json) Hash identifier: VM+7nbdYwtPvr3Tt/Gd1m+SEQmb84NAB8BRgr+cGmMc= Subject key identifier: D6:0A:BA:E1:54:6D:B1:C3:1A:DA:19:D0:8F:55:8F:CE:A6:EA:95:31 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 1C9C12678F858285A3AB0115891BD0542E529F86 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323734323934.roa Signing time: Tue 20 Jan 2026 20:00:00 +0000 ROA not before: Tue 20 Jan 2026 19:55:00 +0000 ROA not after: Tue 19 Jan 2027 20:00:00 +0000 asID: 274294 IP address blocks: 2803:b0e0:8021::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9c:12:67:8f:85:82:85:a3:ab:01:15:89:1b:d0:54:2e:52:9f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 20 19:55:00 2026 GMT Not After : Jan 19 20:00:00 2027 GMT Subject: CN=D60ABAE1546DB1C31ADA19D08F558FCEA6EA9531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:92:23:2c:5b:47:f1:14:83:0f:92:78:f8: d7:a3:2a:ba:88:28:c8:df:2d:0e:27:b0:60:c2:62: 2f:18:58:05:57:5d:44:0b:c3:97:8a:2b:0e:e7:62: 5f:46:06:10:f3:b4:a0:58:46:d8:95:9d:ba:05:03: 3a:26:04:0f:76:b5:86:2f:a8:b3:68:60:c2:e2:81: 51:a7:91:4b:4d:94:a6:67:b4:c3:5a:22:33:92:02: b7:e2:9b:a1:80:05:bd:c2:d2:17:49:65:a8:cb:9a: 31:5f:a0:34:ef:5e:c2:0f:fb:7d:98:6a:da:3d:03: dc:cc:55:d3:b7:7c:48:cc:3a:13:5f:e9:8d:a3:0f: 47:1b:f3:4a:df:01:b9:7e:87:87:eb:83:47:51:98: 0d:2d:90:7d:4b:52:00:c3:27:8a:3c:ef:4b:8b:8d: 0b:ce:e6:8f:3d:97:67:a9:63:61:c1:50:6a:83:0a: 37:b9:4b:8e:f2:07:7f:25:6a:d6:b6:12:f8:a8:66: be:b7:24:81:60:fe:81:e0:0a:8d:0d:f0:d1:2c:40: 36:c6:ee:9f:b1:97:5d:4b:01:7c:dc:dc:c1:5c:30: 92:3c:70:b3:b3:8b:b9:44:01:7b:c1:4a:74:2d:93: 57:e3:70:77:b7:94:4c:2b:3b:cf:ae:76:f0:b5:58: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:BA:E1:54:6D:B1:C3:1A:DA:19:D0:8F:55:8F:CE:A6:EA:95:31 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323734323934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:8021::/48 Signature Algorithm: sha256WithRSAEncryption 49:83:78:34:2e:e6:60:54:1a:78:0e:05:45:2c:2c:ad:67:a7: 3b:3a:a6:90:6e:e1:cd:67:c8:62:64:70:18:82:28:6d:d1:64: 9c:20:15:55:6a:e3:03:72:68:e1:b6:9a:8d:1c:cb:a9:cc:b2: 4d:f4:c5:ae:f2:23:25:6e:08:77:04:c5:e5:39:6d:ea:92:7e: e3:92:f5:42:5b:f0:e7:85:99:a8:92:69:f3:48:66:67:a0:3c: 93:6e:35:67:98:f4:e1:0d:0a:42:4d:3d:a1:bc:9f:99:4a:db: a5:7f:54:77:90:ed:db:cb:6b:a3:04:90:f1:45:a9:11:b8:a3: 71:8b:18:c2:e2:cc:6b:6d:d7:e9:fd:82:a2:c9:64:bb:3f:1d: 72:c5:05:f9:ad:b1:b7:08:34:5a:4b:f8:a9:90:35:0b:ed:8b: fd:ea:cd:29:c8:70:f5:97:00:9f:89:28:d8:0e:fd:6e:17:50: 4f:75:cf:09:14:2f:e7:b2:5e:c4:85:6a:d9:3e:06:d6:5d:1d: 6d:0c:8c:78:7d:f9:ee:b2:af:e3:da:70:1a:f0:a4:51:76:5b: 2b:90:7f:30:9e:bc:56:16:41:82:77:37:c2:76:a6:ef:f1:99: 54:ee:66:da:6d:a5:3b:17:e4:51:9d:6a:e4:3c:e2:56:a3:f0: 7f:3c:d0:15 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUHJwSZ4+FgoWjqwEViRvQVC5Sn4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMjAxOTU1MDBaFw0yNzAxMTkyMDAwMDBaMDMxMTAvBgNV BAMTKEQ2MEFCQUUxNTQ2REIxQzMxQURBMTlEMDhGNTU4RkNFQTZFQTk1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOVpIjLFtH8RSDD5J4+NejKrqI KMjfLQ4nsGDCYi8YWAVXXUQLw5eKKw7nYl9GBhDztKBYRtiVnboFAzomBA92tYYv qLNoYMLigVGnkUtNlKZntMNaIjOSArfim6GABb3C0hdJZajLmjFfoDTvXsIP+32Y ato9A9zMVdO3fEjMOhNf6Y2jD0cb80rfAbl+h4frg0dRmA0tkH1LUgDDJ4o870uL jQvO5o89l2epY2HBUGqDCje5S47yB38lata2EvioZr63JIFg/oHgCo0N8NEsQDbG 7p+xl11LAXzc3MFcMJI8cLOzi7lEAXvBSnQtk1fjcHe3lEwrO8+udvC1WBHlAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU1gq64VRtscMa2hnQj1WPzqbqlTEwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz MDMyMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzQzMjM5MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DggCEwDQYJKoZIhvcNAQELBQADggEBAEmDeDQu5mBUGngOBUUsLK1n pzs6ppBu4c1nyGJkcBiCKG3RZJwgFVVq4wNyaOG2mo0cy6nMsk30xa7yIyVuCHcE xeU5beqSfuOS9UJb8OeFmaiSafNIZmegPJNuNWeY9OENCkJNPaG8n5lK26V/VHeQ 7dvLa6MEkPFFqRG4o3GLGMLizGtt1+n9gqLJZLs/HXLFBfmtsbcINFpL+KmQNQvt i/3qzSnIcPWXAJ+JKNgO/W4XUE91zwkUL+eyXsSFatk+BtZdHW0MjHh9+e6yr+Pa cBrwpFF2WyuQfzCevFYWQYJ3N8J2pu/xmVTuZtptpTsX5FGdauQ84laj8H880BU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:44 2026 by rpki-client