This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa File: 323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa (raw, json) Hash identifier: 140xx1Sbm+5quYqzcqbChHM5ezEA9VDR/8uxeA6w5bE= Subject key identifier: E7:30:D7:F2:9B:60:CA:07:F8:30:2A:2E:01:FD:AC:7A:65:57:18:1C Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Certificate serial: 623466701BD8EF594BC0DCD7A7F1C712C1B96D9C Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa Signing time: Tue 06 Jan 2026 19:10:14 +0000 ROA not before: Tue 06 Jan 2026 19:05:14 +0000 ROA not after: Tue 05 Jan 2027 19:10:14 +0000 asID: 272978 IP address blocks: 2803:b0e0:99c8::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:34:66:70:1b:d8:ef:59:4b:c0:dc:d7:a7:f1:c7:12:c1:b9:6d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195 Validity Not Before: Jan 6 19:05:14 2026 GMT Not After : Jan 5 19:10:14 2027 GMT Subject: CN=E730D7F29B60CA07F8302A2E01FDAC7A6557181C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:da:2e:75:3a:d8:e7:17:2f:d7:27:5e:1b: 8c:a7:9e:64:26:3c:0b:e2:c3:f8:cd:e4:2d:f3:26: bb:88:1c:ee:12:c5:59:30:d2:77:45:31:31:e2:ae: 59:27:5b:88:f6:55:a0:de:5f:27:6f:03:79:12:f9: 7c:80:6d:f7:a0:ec:a1:ee:ed:f9:6c:b1:6d:66:df: 83:ea:e6:51:12:a1:0d:4c:99:05:d1:e4:ba:ee:51: a4:a2:34:c6:86:5b:a8:fa:a3:0f:53:d1:97:55:d4: c8:0b:ea:91:73:9d:0d:f0:d0:d5:fd:98:bf:20:42: ad:ac:fd:79:96:74:de:d4:e9:64:fb:33:42:3c:05: 87:9d:84:b8:a9:de:f1:7b:04:2e:89:ce:55:5b:8d: db:49:e4:1e:f1:87:44:ca:20:f6:b7:f5:4e:e8:8a: 7c:f3:27:25:2b:33:c0:59:c9:89:75:96:8c:a3:7c: f2:a2:80:a8:59:c4:06:5f:02:64:70:05:5c:5e:29: 23:8b:cf:5b:14:33:bc:0f:98:c9:79:ab:ea:87:88: 3d:b5:2a:7e:98:f8:3d:55:8e:0e:87:10:c7:c2:33: d8:82:ea:ff:a3:b5:dd:11:bd:91:10:6f:10:00:05: 03:b7:5b:3e:bb:7f:1b:1e:f7:7b:f3:75:0e:9b:a2: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:30:D7:F2:9B:60:CA:07:F8:30:2A:2E:01:FD:AC:7A:65:57:18:1C X509v3 Authority Key Identifier: keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b0e0:99c8::/48 Signature Algorithm: sha256WithRSAEncryption 8f:15:61:f9:1a:fe:54:2a:36:58:fb:6f:8d:e3:a3:b7:d0:44: 0d:12:4b:da:e2:b5:56:27:8a:46:75:be:d4:d9:bd:3b:1f:30: e2:4a:01:d6:4b:a9:48:b4:f6:c5:a0:5d:3a:6b:ed:b7:6e:e8: c5:07:2c:cb:b2:19:56:ad:b7:0f:f0:a4:7e:48:53:72:b7:b6: 41:be:6e:12:7d:4c:81:b1:ff:5c:c5:ed:7c:11:3d:93:cc:cd: 69:ce:e0:41:86:0b:22:55:45:c0:b4:5d:dc:51:af:60:e9:e2: 1b:64:29:b0:b1:db:23:a3:ba:52:34:98:c4:c2:f9:0f:6f:d2: c8:c2:a6:48:4f:b8:3f:7d:b4:d3:6a:48:16:e0:16:fd:dc:17: 5c:8a:f0:e4:5b:e3:ec:69:5e:ac:e6:36:c1:a8:09:50:fb:32: 8a:77:67:3e:5e:bb:51:c7:5c:52:21:af:62:42:7a:fb:bb:5c: 13:b8:9f:c6:21:18:76:a0:88:f5:9e:3c:6e:2b:7a:8e:c1:21: 50:73:93:4c:05:72:2d:cb:dd:b1:98:42:5a:a5:32:68:14:16: 5c:10:0e:02:b3:ac:7c:91:73:00:db:13:21:57:2d:ef:e0:f1: 09:d6:e5:4b:ad:95:a5:d4:d1:09:e3:59:ae:91:b2:bd:3e:c6: 29:63:3f:ab -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYjRmcBvY71lLwNzXp/HHEsG5bZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE MjFGQzE5NTAeFw0yNjAxMDYxOTA1MTRaFw0yNzAxMDUxOTEwMTRaMDMxMTAvBgNV BAMTKEU3MzBEN0YyOUI2MENBMDdGODMwMkEyRTAxRkRBQzdBNjU1NzE4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE49oudTrY5xcv1ydeG4ynnmQm PAviw/jN5C3zJruIHO4SxVkw0ndFMTHirlknW4j2VaDeXydvA3kS+XyAbfeg7KHu 7flssW1m34Pq5lESoQ1MmQXR5LruUaSiNMaGW6j6ow9T0ZdV1MgL6pFznQ3w0NX9 mL8gQq2s/XmWdN7U6WT7M0I8BYedhLip3vF7BC6JzlVbjdtJ5B7xh0TKIPa39U7o inzzJyUrM8BZyYl1loyjfPKigKhZxAZfAmRwBVxeKSOLz1sUM7wPmMl5q+qHiD21 Kn6Y+D1Vjg6HEMfCM9iC6v+jtd0RvZEQbxAABQO3Wz67fxse93vzdQ6borVNAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU5zDX8ptgygf4MCouAf2semVXGBwwHwYDVR0j BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0 NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz OTYzMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA7DgmcgwDQYJKoZIhvcNAQELBQADggEBAI8VYfka/lQqNlj7b43jo7fQ RA0SS9ritVYnikZ1vtTZvTsfMOJKAdZLqUi09sWgXTpr7bdu6MUHLMuyGVattw/w pH5IU3K3tkG+bhJ9TIGx/1zF7XwRPZPMzWnO4EGGCyJVRcC0XdxRr2Dp4htkKbCx 2yOjulI0mMTC+Q9v0sjCpkhPuD99tNNqSBbgFv3cF1yK8ORb4+xpXqzmNsGoCVD7 Mop3Zz5eu1HHXFIhr2JCevu7XBO4n8YhGHagiPWePG4reo7BIVBzk0wFci3L3bGY QlqlMmgUFlwQDgKzrHyRcwDbEyFXLe/g8QnW5UutlaXU0QnjWa6Rsr0+xiljP6s= -----END CERTIFICATE-----Generated at Sun Jan 25 10:05:15 2026 by rpki-client