This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa File: 323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa (raw, json) Hash identifier: MCEGRCTOw2956ISIujRlFYUbJXsHChqWic9ZYgJ/+dg= Subject key identifier: DA:91:F4:0A:63:DD:57:CA:84:39:E4:1E:C0:B5:DB:AF:98:F4:C4:B6 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 57F1F3CD3B258BA0F76ECDAD7063F1B6AA3321FD Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa Signing time: Tue 06 Jan 2026 19:10:10 +0000 ROA not before: Tue 06 Jan 2026 19:05:10 +0000 ROA not after: Tue 05 Jan 2027 19:10:10 +0000 asID: 271842 IP address blocks: 2803:b0e0:9975::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f1:f3:cd:3b:25:8b:a0:f7:6e:cd:ad:70:63:f1:b6:aa:33:21:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:10 2026 GMT Not After : Jan 5 19:10:10 2027 GMT Subject: CN=DA91F40A63DD57CA8439E41EC0B5DBAF98F4C4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:6b:49:e7:a1:8a:26:86:50:80:62:af:ed: c9:d2:1b:fb:c7:7e:e0:8d:b8:fc:a0:22:df:d1:5d: c3:a8:41:bf:80:17:fa:bf:b3:da:24:a0:f0:fe:a3: 75:21:be:a2:cc:7e:43:e1:6d:79:ad:8e:9d:50:ee: 94:f6:a0:c8:16:4c:2d:fe:be:19:60:84:4e:70:10: a3:ae:c8:20:99:9d:6c:2a:eb:82:29:9f:3d:e1:4f: e7:44:ae:b9:89:a1:78:94:df:ca:2c:6c:15:8b:a0: 7b:3a:e9:72:52:13:f7:36:3d:08:ea:20:0a:08:50: 5f:dc:74:37:b3:6f:95:a1:52:ec:98:6c:14:86:a5: 72:e6:73:bf:ad:1b:ab:3e:59:f3:86:a3:9b:fa:96: 7b:d4:42:36:1a:f3:8c:e5:76:5e:70:62:b7:06:0a: f6:4f:aa:fe:da:d1:5b:b8:e6:97:26:8a:17:fd:3f: 76:1d:e2:da:4a:c9:61:6b:54:b5:87:ca:fb:df:5a: c3:9a:72:f9:ae:50:b6:bb:4f:2a:6e:94:08:5e:a5: 2c:70:96:10:ff:dc:a3:70:ff:36:d1:4a:33:44:ee: 4b:f8:39:75:dc:be:a3:5b:dd:c9:bb:f5:dc:c7:4d: 5f:79:42:66:da:2f:dd:b1:12:a1:2a:be:fd:d1:a9: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:F4:0A:63:DD:57:CA:84:39:E4:1E:C0:B5:DB:AF:98:F4:C4:B6 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9975::/48 Signature Algorithm: sha256WithRSAEncryption 9b:aa:c2:cc:3d:f9:86:b1:34:8e:31:30:3d:13:b9:7e:42:7a: 88:79:dc:08:12:67:36:c2:2d:7b:80:fb:65:c9:14:49:19:4d: fa:16:e4:4c:2e:40:42:97:49:33:ae:8d:80:2d:42:67:4e:4d: a7:f7:30:c9:09:d9:02:51:e8:b9:68:0d:72:bd:68:3a:8c:b5: 82:87:49:0e:82:60:1a:2b:6b:a5:ae:f7:12:71:aa:16:37:ce: d1:70:d2:08:40:7a:e6:ff:40:55:27:aa:4e:0e:61:73:00:c0: ab:ea:2a:26:58:b0:d4:a6:dc:de:0a:97:05:1a:2c:0a:a2:9d: 89:9f:72:d2:1e:02:04:a4:ec:8a:28:01:59:71:a0:84:47:41: d8:94:5d:27:8f:b6:1a:1c:be:c0:25:a1:29:cd:b8:07:88:ce: 89:eb:04:f9:47:b7:ca:52:ef:ee:82:36:83:38:69:9e:d3:82: 62:52:dd:6b:78:3c:97:cc:cf:81:30:d3:68:c2:90:d7:90:66: ad:6d:e5:f0:df:93:98:b2:2a:1f:79:fd:d7:8a:85:24:68:8c: a2:4d:77:5e:a0:59:16:96:16:1a:9b:8e:db:2f:f6:33:a6:85: d9:bc:c2:92:00:ea:fd:85:7f:2c:66:6a:94:91:77:f3:67:31: b7:cc:40:6a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUV/HzzTsli6D3bs2tcGPxtqozIf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTBaFw0yNzAxMDUxOTEwMTBaMDMxMTAvBgNV BAMTKERBOTFGNDBBNjNERDU3Q0E4NDM5RTQxRUMwQjVEQkFGOThGNEM0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nWtJ56GKJoZQgGKv7cnSG/vH fuCNuPygIt/RXcOoQb+AF/q/s9okoPD+o3UhvqLMfkPhbXmtjp1Q7pT2oMgWTC3+ vhlghE5wEKOuyCCZnWwq64Ipnz3hT+dErrmJoXiU38osbBWLoHs66XJSE/c2PQjq IAoIUF/cdDezb5WhUuyYbBSGpXLmc7+tG6s+WfOGo5v6lnvUQjYa84zldl5wYrcG CvZPqv7a0Vu45pcmihf9P3Yd4tpKyWFrVLWHyvvfWsOacvmuULa7TypulAhepSxw lhD/3KNw/zbRSjNE7kv4OXXcvqNb3cm79dzHTV95QmbaL92xEqEqvv3RqRBlAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU2pH0CmPdV8qEOeQewLXbr5j0xLYwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM3MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM0MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmXUwDQYJKoZIhvcNAQELBQADggEBAJuqwsw9+YaxNI4xMD0TuX5C eoh53AgSZzbCLXuA+2XJFEkZTfoW5EwuQEKXSTOujYAtQmdOTaf3MMkJ2QJR6Llo DXK9aDqMtYKHSQ6CYBora6Wu9xJxqhY3ztFw0ghAeub/QFUnqk4OYXMAwKvqKiZY sNSm3N4KlwUaLAqinYmfctIeAgSk7IooAVlxoIRHQdiUXSePthocvsAloSnNuAeI zonrBPlHt8pS7+6CNoM4aZ7TgmJS3Wt4PJfMz4Ew02jCkNeQZq1t5fDfk5iyKh95 /deKhSRojKJNd16gWRaWFhqbjtsv9jOmhdm8wpIA6v2FfyxmapSRd/NnMbfMQGo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:18 2026 by rpki-client