This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa File: 323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa (raw, json) Hash identifier: 5EBjg1JSWxWOhFZ3Pql/JYwuyRQTFt2YxUvpTGt/1NY= Subject key identifier: EA:9F:EE:ED:7A:84:6B:C4:4B:52:24:3F:37:37:21:04:F2:6F:F7:64 Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 5DE7F320282126DD2A326792870B2F0BD6207163 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa Signing time: Tue 06 Jan 2026 19:10:10 +0000 ROA not before: Tue 06 Jan 2026 19:05:10 +0000 ROA not after: Tue 05 Jan 2027 19:10:10 +0000 asID: 269862 IP address blocks: 2803:b0e0:9989::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e7:f3:20:28:21:26:dd:2a:32:67:92:87:0b:2f:0b:d6:20:71:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:10 2026 GMT Not After : Jan 5 19:10:10 2027 GMT Subject: CN=EA9FEEED7A846BC44B52243F37372104F26FF764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:1a:26:03:21:57:d8:cf:ff:c0:2e:20:54: f9:cf:fd:6d:75:8e:7f:d8:60:c9:b9:26:83:52:48: b3:2b:17:24:2c:0b:14:15:eb:a9:dc:94:1a:fb:cd: 6c:e3:9d:84:6e:34:71:83:8a:3b:18:1e:31:d4:c4: a4:ee:50:34:db:09:45:6d:70:78:ae:1b:15:fa:10: a5:db:50:b1:bf:7a:e1:b0:9e:93:54:32:94:68:c4: a0:2c:4d:99:89:7b:dc:ec:77:c7:7c:e0:31:da:d0: 8a:8b:2b:a4:4c:50:00:2c:af:40:e2:18:3c:b7:22: 69:c4:47:53:54:71:f8:9f:80:c6:b3:e4:8d:af:1f: 95:61:d3:e5:52:09:00:a5:e6:c7:c4:93:8b:a3:2a: ca:58:3c:2b:e6:cf:76:95:79:3f:1a:a2:bb:be:da: 3a:c7:77:36:b9:56:4d:a7:39:2e:8b:37:39:35:09: 35:db:ea:f8:f3:c8:92:20:50:83:64:84:b2:7d:1b: 97:5b:29:bf:ad:f4:d2:02:9d:30:06:41:2b:47:70: 0c:62:3d:11:ef:75:97:f6:f9:59:81:57:ac:1c:bb: 28:eb:40:8f:91:62:ea:01:91:23:20:8a:7e:22:21: d7:f4:d5:5a:3b:1b:9d:dc:76:4a:2a:03:5c:b0:d3: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9F:EE:ED:7A:84:6B:C4:4B:52:24:3F:37:37:21:04:F2:6F:F7:64 X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9989::/48 Signature Algorithm: sha256WithRSAEncryption 98:f7:2b:6e:06:0a:69:d7:00:59:10:10:ea:54:c2:36:2a:eb: 9d:f0:86:59:48:0e:ff:ab:e0:12:30:06:1b:ff:32:bc:93:0a: f4:b6:71:08:1f:8e:e4:47:50:43:02:45:ad:d1:32:7f:e9:06: 93:48:42:08:d5:97:7f:38:fe:88:0b:65:44:f7:bb:47:b5:f1: 52:e9:c4:ee:5d:00:b4:09:a2:3b:02:24:2c:bc:9c:19:89:9b: 33:59:a8:3a:ad:5a:c2:12:54:8a:5f:43:e8:2d:33:80:32:a9: 32:c7:8f:73:a8:ff:15:99:d5:c8:64:c9:7d:12:d9:27:7b:84: f1:82:12:08:e3:0c:0a:7d:66:43:11:b9:f3:1a:d9:27:8f:f2: 0e:26:17:bf:8e:f2:de:61:aa:11:de:2a:a6:a8:f4:13:5b:9a: 66:aa:45:93:f6:5c:95:59:18:d6:be:53:e3:12:11:29:ae:29: d5:6d:4f:23:98:e2:67:a4:f1:ed:5c:36:71:4c:fc:6d:78:b1: 6f:96:9c:18:c8:20:a8:07:39:f6:bb:99:49:03:53:b0:8e:7b: 18:17:1c:20:01:19:db:b5:b5:56:c0:47:53:f5:65:2d:80:27: df:f3:83:d7:5c:d7:c8:44:23:ab:e5:2e:65:53:f0:24:56:b0: 56:9f:31:84 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUXefzICghJt0qMmeShwsvC9YgcWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTBaFw0yNzAxMDUxOTEwMTBaMDMxMTAvBgNV BAMTKEVBOUZFRUVEN0E4NDZCQzQ0QjUyMjQzRjM3MzcyMTA0RjI2RkY3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3RomAyFX2M//wC4gVPnP/W11 jn/YYMm5JoNSSLMrFyQsCxQV66nclBr7zWzjnYRuNHGDijsYHjHUxKTuUDTbCUVt cHiuGxX6EKXbULG/euGwnpNUMpRoxKAsTZmJe9zsd8d84DHa0IqLK6RMUAAsr0Di GDy3ImnER1NUcfifgMaz5I2vH5Vh0+VSCQCl5sfEk4ujKspYPCvmz3aVeT8aoru+ 2jrHdza5Vk2nOS6LNzk1CTXb6vjzyJIgUINkhLJ9G5dbKb+t9NICnTAGQStHcAxi PRHvdZf2+VmBV6wcuyjrQI+RYuoBkSMgin4iIdf01Vo7G53cdkoqA1yw06epAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU6p/u7XqEa8RLUiQ/NzchBPJv92QwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM4MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzkzODM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmYkwDQYJKoZIhvcNAQELBQADggEBAJj3K24GCmnXAFkQEOpUwjYq 653whllIDv+r4BIwBhv/MryTCvS2cQgfjuRHUEMCRa3RMn/pBpNIQgjVl384/ogL ZUT3u0e18VLpxO5dALQJojsCJCy8nBmJmzNZqDqtWsISVIpfQ+gtM4AyqTLHj3Oo /xWZ1chkyX0S2Sd7hPGCEgjjDAp9ZkMRufMa2SeP8g4mF7+O8t5hqhHeKqao9BNb mmaqRZP2XJVZGNa+U+MSESmuKdVtTyOY4mek8e1cNnFM/G14sW+WnBjIIKgHOfa7 mUkDU7COexgXHCABGdu1tVbAR1P1ZS2AJ9/zg9dc18hEI6vlLmVT8CRWsFafMYQ= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:11 2026 by rpki-client