This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa File: 323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa (raw, json) Hash identifier: GDiUPVE+KsytT9EIcoaW1Q33TtPQ4vXVwURMZiPElsA= Subject key identifier: F7:EC:29:4D:E0:9C:57:67:C8:2F:24:EB:F3:8A:B2:C1:5E:A0:07:9A Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 6A3E5F279DBAB8A9D9289095E96FBF87B2D1873A Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa Signing time: Tue 06 Jan 2026 19:10:15 +0000 ROA not before: Tue 06 Jan 2026 19:05:15 +0000 ROA not after: Tue 05 Jan 2027 19:10:15 +0000 asID: 269862 IP address blocks: 2803:b0e0:9984::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3e:5f:27:9d:ba:b8:a9:d9:28:90:95:e9:6f:bf:87:b2:d1:87:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:15 2026 GMT Not After : Jan 5 19:10:15 2027 GMT Subject: CN=F7EC294DE09C5767C82F24EBF38AB2C15EA0079A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:bb:a8:34:32:67:69:4d:be:a4:70:e9:ae: a7:0e:06:ce:ff:5c:56:b4:51:a1:6f:0a:fd:8d:00: a4:68:5e:65:09:bf:d0:26:b7:96:f5:e7:f3:be:b5: b0:9b:2f:a4:f7:72:12:d1:fc:12:58:6f:90:2a:bf: 0a:21:f3:34:f0:d7:44:b9:5e:11:5c:85:b2:c0:27: 92:69:5a:7d:5f:ca:5d:f9:88:25:77:c3:1c:db:db: 7a:25:c2:3c:b4:fe:8a:70:c6:03:97:bc:72:e3:e5: a0:6e:70:46:a1:0d:f3:a7:5d:a6:58:b8:60:50:33: 21:a9:f5:1d:5f:20:c8:81:e7:fc:f9:3c:bc:9f:92: e0:49:53:e0:a2:14:cd:1f:8d:db:87:64:03:95:8b: d0:30:53:7f:65:a7:0a:9c:61:09:1e:cd:b4:f9:ea: 43:dd:8c:c2:09:c5:9f:e7:8b:0b:a1:1f:a4:04:ae: 2b:bc:50:43:55:e8:cc:ef:b4:b0:17:6c:f6:b2:a1: c2:35:08:16:4a:0a:ab:a4:2f:39:39:d0:d2:41:c2: ec:a6:ef:21:f5:7d:40:2a:a5:09:cc:80:56:73:f9: 25:67:f6:7c:0c:b5:b3:07:de:ca:fe:ca:3e:43:4b: 50:fb:26:95:04:f4:38:8e:d5:38:82:3e:7a:87:72: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EC:29:4D:E0:9C:57:67:C8:2F:24:EB:F3:8A:B2:C1:5E:A0:07:9A X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9984::/48 Signature Algorithm: sha256WithRSAEncryption 57:fa:fc:c0:c0:f5:c1:a2:5f:3b:d0:5e:58:84:0f:10:c7:5d: a1:4e:17:e9:80:fb:97:7d:10:d1:3f:26:05:82:62:96:1a:97: 0f:65:ca:af:fb:95:40:63:27:9e:fe:f1:58:ad:38:17:17:bc: 8a:68:95:9d:e4:e8:63:71:d0:ac:86:99:fb:3f:11:0d:01:51: 37:29:e4:68:3e:5d:25:fd:3d:2c:a1:de:78:6b:08:9a:3f:8a: 70:e7:b9:53:b0:b8:5d:f0:51:43:7d:40:fc:17:b1:c9:0d:8b: 85:19:13:4f:e2:e9:6c:d1:af:2f:11:64:ed:e9:38:89:b8:3f: e6:52:03:c4:37:a1:bc:10:e8:b6:7a:9c:62:b3:6f:ff:7c:b4: 35:ea:19:e5:48:79:9c:67:63:f1:4b:15:4e:be:07:f2:b8:50: a6:d1:c9:de:e7:13:92:30:16:98:58:e8:1c:0b:28:34:e3:51: 67:df:04:2c:0b:d7:09:3b:e6:b2:8f:63:79:fc:2e:ed:0e:98: cb:b1:c5:69:96:b6:dd:e2:ca:2c:80:ad:fb:0d:0b:a7:f5:11: 09:c2:08:b1:29:0c:36:1d:1f:67:4f:2b:d8:e0:e4:5c:73:f3: a8:3d:43:50:58:6e:bc:c3:1b:78:db:42:53:a6:16:4c:d4:f4: 87:2a:7d:97 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUaj5fJ526uKnZKJCV6W+/h7LRhzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTVaFw0yNzAxMDUxOTEwMTVaMDMxMTAvBgNV BAMTKEY3RUMyOTRERTA5QzU3NjdDODJGMjRFQkYzOEFCMkMxNUVBMDA3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlbuoNDJnaU2+pHDprqcOBs7/ XFa0UaFvCv2NAKRoXmUJv9Amt5b15/O+tbCbL6T3chLR/BJYb5Aqvwoh8zTw10S5 XhFchbLAJ5JpWn1fyl35iCV3wxzb23olwjy0/opwxgOXvHLj5aBucEahDfOnXaZY uGBQMyGp9R1fIMiB5/z5PLyfkuBJU+CiFM0fjduHZAOVi9AwU39lpwqcYQkezbT5 6kPdjMIJxZ/niwuhH6QEriu8UENV6MzvtLAXbPayocI1CBZKCqukLzk50NJBwuym 7yH1fUAqpQnMgFZz+SVn9nwMtbMH3sr+yj5DS1D7JpUE9DiO1TiCPnqHcowrAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU9+wpTeCcV2fILyTr84qywV6gB5owHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM4MzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzkzODM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmYQwDQYJKoZIhvcNAQELBQADggEBAFf6/MDA9cGiXzvQXliEDxDH XaFOF+mA+5d9ENE/JgWCYpYalw9lyq/7lUBjJ57+8VitOBcXvIpolZ3k6GNx0KyG mfs/EQ0BUTcp5Gg+XSX9PSyh3nhrCJo/inDnuVOwuF3wUUN9QPwXsckNi4UZE0/i 6WzRry8RZO3pOIm4P+ZSA8Q3obwQ6LZ6nGKzb/98tDXqGeVIeZxnY/FLFU6+B/K4 UKbRyd7nE5IwFphY6BwLKDTjUWffBCwL1wk75rKPY3n8Lu0OmMuxxWmWtt3iyiyA rfsNC6f1EQnCCLEpDDYdH2dPK9jg5Fxz86g9Q1BYbrzDG3jbQlOmFkzU9IcqfZc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:10 2026 by rpki-client