This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa File: 323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa (raw, json) Hash identifier: 54PcHx7lFq8R7JIexKkSe1kPPkIG9TqYFM30RukttIA= Subject key identifier: 32:B9:48:6B:58:36:54:81:E0:FA:FF:77:EC:DA:96:B4:F4:F9:02:AD Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 1A7C38848212C9A9DEA21021C1DF2F5B28A73B53 Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa Signing time: Tue 06 Jan 2026 19:10:14 +0000 ROA not before: Tue 06 Jan 2026 19:05:14 +0000 ROA not after: Tue 05 Jan 2027 19:10:14 +0000 asID: 399382 IP address blocks: 2803:b0e0:9991::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7c:38:84:82:12:c9:a9:de:a2:10:21:c1:df:2f:5b:28:a7:3b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:14 2026 GMT Not After : Jan 5 19:10:14 2027 GMT Subject: CN=32B9486B58365481E0FAFF77ECDA96B4F4F902AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:94:09:ef:c0:34:19:52:68:4e:65:e5:94: 64:4f:7a:f8:c4:dd:cc:52:e8:38:19:94:49:12:1f: 3e:69:a3:cb:80:75:bf:8b:d7:c5:33:d6:aa:90:e8: 92:77:7b:f9:16:24:e0:9e:84:79:b8:f9:07:bf:0e: bd:8c:91:81:d7:74:ce:86:9b:ae:40:d8:49:74:58: fa:33:7f:04:48:0f:b0:c0:4e:f2:2c:a8:85:8b:7e: 91:54:8f:66:f0:c9:9d:34:78:8d:3d:97:ab:a6:05: 6e:6b:9f:8f:cd:1b:0e:5a:eb:72:df:01:e4:ba:3b: d2:59:be:ab:44:92:02:b2:35:35:d4:a0:c3:d0:ee: 8e:9c:e0:a0:a5:84:68:b1:99:fd:6b:20:78:38:fd: 37:98:eb:3b:e7:f5:3e:d1:0f:92:80:cf:6e:e8:48: 70:6f:18:31:e4:b4:35:cf:74:c6:27:12:99:23:52: 18:9a:47:3a:7c:d7:cb:70:04:a4:97:a1:c6:5f:e6: 3c:19:04:67:cb:92:01:20:fb:cd:1d:d0:fb:b6:d3: e1:00:ae:af:29:88:98:b6:7f:f1:1c:ef:58:2f:84: 6b:2e:80:d3:df:4d:29:8a:4f:d6:60:12:6e:93:d0: e8:92:d5:c2:97:8d:37:ee:85:ea:16:81:0b:82:e5: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:48:6B:58:36:54:81:E0:FA:FF:77:EC:DA:96:B4:F4:F9:02:AD X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:9991::/48 Signature Algorithm: sha256WithRSAEncryption 74:4f:05:8f:16:4a:be:92:c3:f1:53:a7:68:8c:2f:4f:e9:ae: e7:cc:38:ad:40:60:99:ef:cc:27:b4:e5:1a:70:99:e5:66:c3: 1e:12:9b:cf:59:ff:1d:87:5e:0a:da:74:ed:f0:4f:99:2d:a1: 21:9c:64:26:13:05:b1:f1:28:25:e1:61:7e:87:42:b0:b5:2a: 4f:e6:a8:e3:1d:cd:a7:ed:12:1e:51:8e:8c:f2:43:99:66:0c: c8:d6:a6:7d:19:42:b2:53:fc:84:73:a8:ab:2c:5a:dc:5d:d8: 53:af:10:e0:d1:ae:7e:d9:ec:1a:71:42:18:b2:25:a2:8e:52: c5:34:dc:87:9d:9f:9e:bf:78:84:b1:d8:e4:18:5d:77:e8:26: ee:de:84:7f:50:fa:44:bf:e5:20:f4:90:9b:0b:61:75:90:c9: eb:c8:06:11:bf:aa:d2:5f:dd:37:88:8c:50:b0:db:f5:6c:bd: 53:f0:8c:a1:e1:26:89:64:08:ed:95:f5:db:b2:e4:3b:e1:12: b8:63:93:b5:57:26:a5:b1:5f:83:5c:f2:38:c9:7e:bd:6e:99: 1c:d5:3e:e4:cf:45:e7:fc:c5:79:97:62:77:05:f3:be:05:b9: 3b:b7:06:5a:05:a6:77:39:6c:df:bd:26:a1:7f:51:00:0c:4e: 2b:9f:e8:6b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUGnw4hIISyaneohAhwd8vWyinO1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTRaFw0yNzAxMDUxOTEwMTRaMDMxMTAvBgNV BAMTKDMyQjk0ODZCNTgzNjU0ODFFMEZBRkY3N0VDREE5NkI0RjRGOTAyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBZQJ78A0GVJoTmXllGRPevjE 3cxS6DgZlEkSHz5po8uAdb+L18Uz1qqQ6JJ3e/kWJOCehHm4+Qe/Dr2MkYHXdM6G m65A2El0WPozfwRID7DATvIsqIWLfpFUj2bwyZ00eI09l6umBW5rn4/NGw5a63Lf AeS6O9JZvqtEkgKyNTXUoMPQ7o6c4KClhGixmf1rIHg4/TeY6zvn9T7RD5KAz27o SHBvGDHktDXPdMYnEpkjUhiaRzp818twBKSXocZf5jwZBGfLkgEg+80d0Pu20+EA rq8piJi2f/Ec71gvhGsugNPfTSmKT9ZgEm6T0OiS1cKXjTfuheoWgQuC5WKxAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUMrlIa1g2VIHg+v937NqWtPT5Aq0wHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTM5MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzkzMzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmZEwDQYJKoZIhvcNAQELBQADggEBAHRPBY8WSr6Sw/FTp2iML0/p rufMOK1AYJnvzCe05RpwmeVmwx4Sm89Z/x2HXgradO3wT5ktoSGcZCYTBbHxKCXh YX6HQrC1Kk/mqOMdzaftEh5RjozyQ5lmDMjWpn0ZQrJT/IRzqKssWtxd2FOvEODR rn7Z7BpxQhiyJaKOUsU03Iedn56/eISx2OQYXXfoJu7ehH9Q+kS/5SD0kJsLYXWQ yevIBhG/qtJf3TeIjFCw2/VsvVPwjKHhJolkCO2V9duy5DvhErhjk7VXJqWxX4Nc 8jjJfr1umRzVPuTPRef8xXmXYncF874FuTu3BloFpnc5bN+9JqF/UQAMTiuf6Gs= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:18 2026 by rpki-client