This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa File: 323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa (raw, json) Hash identifier: lIr+fsZywWQxrS2g6l7Vp9v1HuzbcIscutOF3jHzvV4= Subject key identifier: 8A:CF:A1:4E:B0:E1:16:DF:AD:F2:07:B4:C5:64:0B:A6:B5:D1:A7:B7 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 0789A5DDCEE5DCBDF3590DCE05DFD984DF0CDC55 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa Signing time: Tue 06 Jan 2026 19:10:11 +0000 ROA not before: Tue 06 Jan 2026 19:05:11 +0000 ROA not after: Tue 05 Jan 2027 19:10:11 +0000 asID: 271842 IP address blocks: 2803:b0e0:9980::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:89:a5:dd:ce:e5:dc:bd:f3:59:0d:ce:05:df:d9:84:df:0c:dc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:11 2026 GMT Not After : Jan 5 19:10:11 2027 GMT Subject: CN=8ACFA14EB0E116DFADF207B4C5640BA6B5D1A7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:9a:75:cd:39:84:31:f8:d8:38:5f:6d:07: a3:7a:7a:7b:10:34:3d:9a:06:aa:61:75:6c:e1:f7: 1d:b0:12:1d:0a:03:5c:c9:e1:6a:d1:9b:24:c1:3a: 37:24:ae:e8:66:77:bc:67:1b:b3:9b:27:d1:7f:a1: e9:e6:a6:a2:77:fb:6a:df:13:ce:d3:fb:f8:f4:35: b1:4d:07:92:6e:4f:eb:df:8c:f0:65:d1:eb:7f:ac: 2e:4c:75:28:21:75:14:e0:e8:aa:4a:62:1a:24:c3: dc:5e:bf:88:6d:d6:cc:bb:98:98:98:e8:cb:a4:bf: 33:69:cb:c7:88:e1:63:6d:aa:00:be:e7:02:3f:91: 5e:1b:6c:1a:13:21:c6:2d:9d:83:fb:f5:a8:2f:4f: 4c:ad:fd:64:63:61:0c:b4:9e:94:fd:01:c8:48:88: b0:a9:c5:df:f2:81:dc:73:c3:c2:ce:50:55:90:4b: 70:7f:75:17:57:c9:ab:8e:df:74:37:ee:66:f6:7f: 3f:ed:b7:69:16:e1:0a:c9:97:05:ec:8a:15:a7:83: 6d:35:8b:84:cd:29:ec:ed:ad:d9:55:58:fb:9a:6c: 0c:fd:99:e0:94:7e:96:50:d9:87:dc:0d:4e:fc:6b: bd:d0:af:ef:c3:f4:5c:02:79:c1:da:49:72:71:02: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:A1:4E:B0:E1:16:DF:AD:F2:07:B4:C5:64:0B:A6:B5:D1:A7:B7 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323731383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9980::/48 Signature Algorithm: sha256WithRSAEncryption a8:e7:26:9b:d7:4c:13:f8:5a:da:fd:ca:b7:72:8a:ad:2d:d7: b1:20:95:63:c7:2d:fc:f9:54:08:2b:d7:f7:85:a9:fe:90:48: c6:da:2c:85:e7:69:59:17:86:98:0f:c0:ad:6a:23:2e:b6:07: c5:8e:c8:05:bc:f9:14:a5:ba:1c:4c:85:b6:8c:11:ba:32:c6: 77:4d:c9:72:3d:87:83:b5:38:0b:93:35:de:2d:df:e7:19:f0: 7c:cf:38:47:d7:c5:ab:44:2f:22:02:6b:ab:db:86:b8:52:d4: a5:c4:dd:36:b3:79:19:f6:22:50:15:9a:b7:85:95:98:4a:da: 73:9b:3b:49:1a:e0:74:55:ea:0f:26:4c:1e:b3:f2:9a:b8:72: 99:4d:1f:83:bb:a5:7d:2e:3a:de:ed:ed:09:39:77:8f:33:ac: 0b:84:01:7e:79:67:9d:ea:16:45:8d:60:45:5d:20:3b:92:3f: c9:c1:1d:4b:1d:b4:e9:92:2b:10:28:64:c8:65:12:6f:af:e4: c0:db:27:1a:48:9f:b9:d2:18:f4:e7:f2:4d:6c:24:b2:c2:29: 3c:8c:e3:e7:51:21:ce:a3:4e:5f:00:90:78:cd:ca:11:b4:86: 18:2e:9c:7a:0b:dc:62:94:ce:64:9b:c5:da:71:c7:b9:1b:ab: 36:6f:09:f3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUB4ml3c7l3L3zWQ3OBd/ZhN8M3FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTFaFw0yNzAxMDUxOTEwMTFaMDMxMTAvBgNV BAMTKDhBQ0ZBMTRFQjBFMTE2REZBREYyMDdCNEM1NjQwQkE2QjVEMUE3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfZp1zTmEMfjYOF9tB6N6ensQ ND2aBqphdWzh9x2wEh0KA1zJ4WrRmyTBOjckruhmd7xnG7ObJ9F/oenmpqJ3+2rf E87T+/j0NbFNB5JuT+vfjPBl0et/rC5MdSghdRTg6KpKYhokw9xev4ht1sy7mJiY 6MukvzNpy8eI4WNtqgC+5wI/kV4bbBoTIcYtnYP79agvT0yt/WRjYQy0npT9AchI iLCpxd/ygdxzw8LOUFWQS3B/dRdXyauO33Q37mb2fz/tt2kW4QrJlwXsihWng201 i4TNKeztrdlVWPuabAz9meCUfpZQ2YfcDU78a73Qr+/D9FwCecHaSXJxAh7VAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUis+hTrDhFt+t8ge0xWQLprXRp7cwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM0MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmYAwDQYJKoZIhvcNAQELBQADggEBAKjnJpvXTBP4Wtr9yrdyiq0t 17EglWPHLfz5VAgr1/eFqf6QSMbaLIXnaVkXhpgPwK1qIy62B8WOyAW8+RSluhxM hbaMEboyxndNyXI9h4O1OAuTNd4t3+cZ8HzPOEfXxatELyICa6vbhrhS1KXE3Taz eRn2IlAVmreFlZhK2nObO0ka4HRV6g8mTB6z8pq4cplNH4O7pX0uOt7t7Qk5d48z rAuEAX55Z53qFkWNYEVdIDuSP8nBHUsdtOmSKxAoZMhlEm+v5MDbJxpIn7nSGPTn 8k1sJLLCKTyM4+dRIc6jTl8AkHjNyhG0hhgunHoL3GKUzmSbxdpxx7kbqzZvCfM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:10 2026 by rpki-client