This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937333a3a2f34382d3438203d3e20323733393530.roa File: 323830333a623065303a393937333a3a2f34382d3438203d3e20323733393530.roa (raw, json) Hash identifier: oo045AS5HKmSh4zGhPcFZWXSGUmFolelc5NOwnlYc/I= Subject key identifier: 88:1E:0D:96:03:EB:34:53:65:E4:7D:25:AD:79:05:BA:1D:3B:67:48 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 62B380B29ABFB2E9C35ACE0451FB39ED05AD1C99 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937333a3a2f34382d3438203d3e20323733393530.roa Signing time: Mon 12 Jan 2026 21:00:02 +0000 ROA not before: Mon 12 Jan 2026 20:55:02 +0000 ROA not after: Mon 11 Jan 2027 21:00:02 +0000 asID: 273950 IP address blocks: 2803:b0e0:9973::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:80:b2:9a:bf:b2:e9:c3:5a:ce:04:51:fb:39:ed:05:ad:1c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 12 20:55:02 2026 GMT Not After : Jan 11 21:00:02 2027 GMT Subject: CN=881E0D9603EB345365E47D25AD7905BA1D3B6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:a0:78:3a:8b:b2:bf:2c:48:59:0f:01:66: 4c:ca:c9:c8:cb:0f:9a:a5:7e:4b:dc:ed:e4:fa:3f: 08:20:2b:e4:74:08:ba:ec:88:3c:d6:0c:b9:d7:7c: 83:51:6f:62:4e:79:07:d1:89:bd:0d:6a:79:81:3a: 96:2e:55:5b:92:d2:fe:de:6c:6e:4c:8b:21:b0:39: c5:86:52:63:60:48:35:67:2a:2b:4f:df:7e:fa:6c: 32:94:68:12:d4:58:fa:62:f9:78:14:27:9e:3d:f3: a5:c2:9a:3a:0a:89:be:ae:b0:0d:52:f9:98:60:34: 30:4a:86:26:9c:ea:7a:85:c0:a7:e0:42:1d:ed:30: b2:e8:12:6d:f2:4b:c3:65:79:49:a7:25:f4:0c:40: d9:3a:ca:44:02:78:f9:44:2d:26:50:5b:11:03:83: 26:dd:cf:2d:88:7f:62:ec:06:35:e1:82:cf:7a:5d: 21:80:72:7f:94:5f:07:ba:7f:ec:32:07:4b:c2:ef: 8e:03:b7:e6:59:7e:11:7a:f3:33:6b:62:6b:54:d6: db:4c:cf:4e:6f:e4:c8:db:65:cb:ef:ab:66:30:50: fe:2f:77:8a:fd:af:93:b1:f8:e7:4e:6e:38:56:5a: 51:25:b3:cb:ee:32:ea:86:ed:a7:f8:af:11:6c:be: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:0D:96:03:EB:34:53:65:E4:7D:25:AD:79:05:BA:1D:3B:67:48 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937333a3a2f34382d3438203d3e20323733393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9973::/48 Signature Algorithm: sha256WithRSAEncryption 55:59:6e:ec:78:99:bc:11:50:b4:52:4b:80:cd:50:03:fd:0b: 17:93:86:2f:f8:d8:44:df:18:7c:14:66:bb:c1:75:14:ed:74: 3b:fe:38:97:85:65:96:15:62:89:3f:2a:56:ef:d6:f4:fd:42: 21:c7:cf:32:40:18:b4:9d:9b:e6:0a:5c:f4:4f:90:b9:7d:16: 76:95:5f:75:2c:58:45:0c:2c:a3:dc:00:db:44:e1:fa:b1:a7: 63:c0:02:d9:8f:05:7f:04:9a:80:c7:23:c3:1e:20:9a:3e:96: 05:40:74:77:18:c6:3f:65:4a:f5:b5:5f:48:9c:bd:4f:50:6e: 62:b7:2a:5f:35:e1:98:59:df:4f:38:38:33:07:9c:72:db:04: 8b:3a:df:d2:4a:60:bb:a6:54:14:af:b4:3d:b4:33:fd:16:11: 14:e0:70:a4:d7:dd:05:c8:72:59:ae:3d:6b:65:d7:9e:1d:68: 2e:c8:8d:94:f0:14:dc:ad:83:03:e6:d0:f4:a6:25:5d:84:b1: 3d:af:51:ca:d3:4f:19:21:18:f7:20:6f:26:71:91:66:61:45: f1:a9:e8:aa:b2:88:17:34:42:82:4f:11:ce:53:30:8a:03:dc: a9:1d:61:3e:8e:cc:f7:16:f1:ac:9f:76:3d:38:32:01:34:4b: 85:57:e9:d0 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYrOAspq/sunDWs4EUfs57QWtHJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMTIyMDU1MDJaFw0yNzAxMTEyMTAwMDJaMDMxMTAvBgNV BAMTKDg4MUUwRDk2MDNFQjM0NTM2NUU0N0QyNUFENzkwNUJBMUQzQjY3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NaB4OouyvyxIWQ8BZkzKycjL D5qlfkvc7eT6PwggK+R0CLrsiDzWDLnXfINRb2JOeQfRib0NanmBOpYuVVuS0v7e bG5MiyGwOcWGUmNgSDVnKitP3376bDKUaBLUWPpi+XgUJ54986XCmjoKib6usA1S +ZhgNDBKhiac6nqFwKfgQh3tMLLoEm3yS8NleUmnJfQMQNk6ykQCePlELSZQWxED gybdzy2If2LsBjXhgs96XSGAcn+UXwe6f+wyB0vC744Dt+ZZfhF68zNrYmtU1ttM z05v5MjbZcvvq2YwUP4vd4r9r5Ox+OdObjhWWlEls8vuMuqG7af4rxFsvtjDAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUiB4NlgPrNFNl5H0lrXkFuh07Z0gwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM3MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzOTM1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmXMwDQYJKoZIhvcNAQELBQADggEBAFVZbux4mbwRULRSS4DNUAP9 CxeThi/42ETfGHwUZrvBdRTtdDv+OJeFZZYVYok/Klbv1vT9QiHHzzJAGLSdm+YK XPRPkLl9FnaVX3UsWEUMLKPcANtE4fqxp2PAAtmPBX8EmoDHI8MeIJo+lgVAdHcY xj9lSvW1X0icvU9QbmK3Kl814ZhZ3084ODMHnHLbBIs639JKYLumVBSvtD20M/0W ERTgcKTX3QXIclmuPWtl154daC7IjZTwFNytgwPm0PSmJV2EsT2vUcrTTxkhGPcg byZxkWZhRfGp6KqyiBc0QoJPEc5TMIoD3KkdYT6OzPcW8ayfdj04MgE0S4VX6dA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:22 2026 by rpki-client