This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa File: 323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa (raw, json) Hash identifier: eec3uMLhbgbZxtV8pHp03xaUTjY2RraCKcLIFt6zQ5A= Subject key identifier: B4:BF:A4:7E:EA:01:67:32:A2:E7:1B:CD:98:60:4F:01:72:43:A0:38 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 390D38142A88375CFF43C05E2766A5DF8A76BED8 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa Signing time: Tue 06 Jan 2026 19:10:14 +0000 ROA not before: Tue 06 Jan 2026 19:05:14 +0000 ROA not after: Tue 05 Jan 2027 19:10:14 +0000 asID: 271842 IP address blocks: 2803:b0e0:9982::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0d:38:14:2a:88:37:5c:ff:43:c0:5e:27:66:a5:df:8a:76:be:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:14 2026 GMT Not After : Jan 5 19:10:14 2027 GMT Subject: CN=B4BFA47EEA016732A2E71BCD98604F017243A038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:6b:e5:db:93:ce:94:2e:c4:fa:11:ad:b1: d5:dc:41:5d:da:cb:d8:9f:94:09:91:8a:80:a2:b6: 28:45:ae:69:33:28:27:a5:7a:96:c4:8b:c8:72:8b: e3:79:54:18:f6:39:4c:b9:23:13:e9:b6:5f:1b:2f: 81:ed:66:66:e1:7c:15:12:45:7e:f9:44:e3:08:f6: 58:26:00:e2:ca:50:55:19:ae:79:1c:10:c6:3b:9f: 8d:f3:46:3e:52:90:5f:20:c6:64:f6:6a:ac:3c:82: 35:ce:6b:73:9f:81:f7:2c:2c:31:de:4a:44:e7:4d: ca:9a:11:8b:3f:f5:fb:56:2d:2a:1a:f7:63:cd:e1: b1:54:66:01:dd:3b:73:a8:7f:43:96:fe:a5:6d:3e: eb:27:7e:59:50:f0:ec:c2:c2:87:e6:a8:35:e9:85: 22:2c:cc:6e:58:88:0e:85:a8:2e:8c:75:5c:3f:be: 4f:d3:69:90:59:51:ad:75:74:58:4c:46:97:65:58: 66:ea:cf:26:e3:69:0f:98:6a:d0:2b:cb:16:f4:f9: dd:ed:9a:7d:5e:71:40:05:bc:94:7d:8a:02:a9:0b: e3:9a:ad:f7:0f:04:ea:43:86:d0:57:78:56:2f:f9: cb:74:b1:8b:17:8e:75:cb:c4:29:4c:87:bb:f9:98: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:A4:7E:EA:01:67:32:A2:E7:1B:CD:98:60:4F:01:72:43:A0:38 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9982::/48 Signature Algorithm: sha256WithRSAEncryption af:99:f4:f9:32:2b:aa:f6:d4:ce:de:96:2b:61:88:64:09:bc: cf:c6:a3:5d:97:3f:00:3b:03:7d:62:e2:7c:c7:c2:30:28:fc: 9a:c1:dc:c8:97:1a:ca:a4:d5:19:6a:be:e7:64:c6:a5:c7:8f: a8:9d:0f:42:0e:97:9c:e7:1b:d5:ba:80:28:d9:3b:79:a8:d5: 33:63:20:8f:50:db:eb:cd:23:99:a0:fd:9b:55:c2:7f:65:07: a1:52:68:ff:81:13:cb:1c:7e:3d:ab:c4:28:ba:b0:b0:2c:4e: 54:09:fb:53:8b:fd:ed:bb:69:34:b6:9e:f5:8e:82:9c:c9:7e: 69:27:cd:0b:b4:e0:cf:dc:62:8f:71:86:6a:7c:80:fa:34:69: 6e:d6:3b:58:e8:26:19:7c:9d:73:a1:2a:11:b8:44:65:2a:aa: ef:d3:ae:b6:18:5f:20:ef:02:05:7b:3f:72:76:57:d7:bf:65: fc:56:02:a8:64:ef:84:18:f7:e3:ec:c7:1a:a6:0c:4a:01:eb: 53:a4:bd:3f:e3:5d:10:cf:81:0d:86:b5:77:04:bf:ed:9e:82: 2f:64:8d:c5:29:31:91:b3:eb:3f:42:95:0d:30:5b:25:83:1c: 07:92:d9:b6:63:b4:de:fe:09:9b:fa:d4:63:b9:37:e3:be:e0: 91:1b:b3:f2 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUOQ04FCqIN1z/Q8BeJ2al34p2vtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTRaFw0yNzAxMDUxOTEwMTRaMDMxMTAvBgNV BAMTKEI0QkZBNDdFRUEwMTY3MzJBMkU3MUJDRDk4NjA0RjAxNzI0M0EwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTmvl25POlC7E+hGtsdXcQV3a y9iflAmRioCitihFrmkzKCelepbEi8hyi+N5VBj2OUy5IxPptl8bL4HtZmbhfBUS RX75ROMI9lgmAOLKUFUZrnkcEMY7n43zRj5SkF8gxmT2aqw8gjXOa3OfgfcsLDHe SkTnTcqaEYs/9ftWLSoa92PN4bFUZgHdO3Oof0OW/qVtPusnfllQ8OzCwofmqDXp hSIszG5YiA6FqC6MdVw/vk/TaZBZUa11dFhMRpdlWGbqzybjaQ+YatAryxb0+d3t mn1ecUAFvJR9igKpC+OarfcPBOpDhtBXeFYv+ct0sYsXjnXLxClMh7v5mCN3AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUtL+kfuoBZzKi5xvNmGBPAXJDoDgwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM4MzIzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM3MzEzODM0MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmYIwDQYJKoZIhvcNAQELBQADggEBAK+Z9PkyK6r21M7elithiGQJ vM/Go12XPwA7A31i4nzHwjAo/JrB3MiXGsqk1RlqvudkxqXHj6idD0IOl5znG9W6 gCjZO3mo1TNjII9Q2+vNI5mg/ZtVwn9lB6FSaP+BE8scfj2rxCi6sLAsTlQJ+1OL /e27aTS2nvWOgpzJfmknzQu04M/cYo9xhmp8gPo0aW7WO1joJhl8nXOhKhG4RGUq qu/TrrYYXyDvAgV7P3J2V9e/ZfxWAqhk74QY9+PsxxqmDEoB61OkvT/jXRDPgQ2G tXcEv+2egi9kjcUpMZGz6z9ClQ0wWyWDHAeS2bZjtN7+CZv61GO5N+O+4JEbs/I= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:10 2026 by rpki-client