This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/323830333a663539303a3a2f33322d3438203d3e20323732393836.roa File: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (raw, json) Hash identifier: qiV3mbSCleZeiH8P5cTiossyGGceGqDaRLKvcaFSDVc= Subject key identifier: 41:01:DA:69:B9:D7:4F:7C:E1:DB:16:6B:DC:72:6D:DF:50:91:49:BF Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Certificate serial: 20FFE8F3A425A5C1AB693D7F8C32031CD3090BEF Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/323830333a663539303a3a2f33322d3438203d3e20323732393836.roa Signing time: Tue 06 Jan 2026 19:07:31 +0000 ROA not before: Tue 06 Jan 2026 19:02:31 +0000 ROA not after: Tue 05 Jan 2027 19:07:31 +0000 asID: 272986 IP address blocks: 2803:f590::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 04:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ff:e8:f3:a4:25:a5:c1:ab:69:3d:7f:8c:32:03:1c:d3:09:0b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Validity Not Before: Jan 6 19:02:31 2026 GMT Not After : Jan 5 19:07:31 2027 GMT Subject: CN=4101DA69B9D74F7CE1DB166BDC726DDF509149BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:b7:c2:50:43:fe:bb:74:29:c1:8a:3e:97: 94:6a:af:bb:a9:05:20:d0:fd:17:9a:48:e0:28:1f: 85:dd:56:55:92:5b:9d:ed:0e:ec:f0:95:fe:62:42: 55:32:c3:c0:28:2a:3d:83:5e:12:49:55:70:d6:99: b2:fb:15:60:e3:cc:5d:92:57:4b:14:bf:f2:63:4b: d9:dc:aa:d5:b8:de:d5:96:56:5a:84:41:2f:fa:2d: f6:09:e6:28:bd:2a:e9:78:52:1c:6b:e3:e1:3c:df: e6:8e:16:26:03:bc:64:0c:29:eb:15:f6:dd:b5:3f: e4:03:ad:74:1e:3d:b3:af:ef:cf:84:28:4c:45:fa: 01:bc:e4:fb:53:89:71:ad:d4:ca:44:36:c4:21:7b: a9:c8:55:e1:8e:89:8a:f0:73:4d:5d:07:6a:64:84: 4c:77:a4:c4:ba:05:a7:dd:c1:cc:ef:00:2a:bb:93: 1c:09:4a:a3:2c:57:c4:cc:5d:7e:b9:6f:01:0c:aa: f3:0c:0f:67:a2:b2:47:f0:8d:b2:ee:fb:a6:2d:82: 64:81:99:d2:d6:2c:9f:fb:d9:c0:07:7b:cb:c0:ad: 08:ff:f0:68:2e:ba:73:09:01:b6:6f:54:88:fc:46: 5a:50:d3:47:7c:44:00:1c:54:3a:52:1f:68:9f:13: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:DA:69:B9:D7:4F:7C:E1:DB:16:6B:DC:72:6D:DF:50:91:49:BF X509v3 Authority Key Identifier: keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/323830333a663539303a3a2f33322d3438203d3e20323732393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f590::/32 Signature Algorithm: sha256WithRSAEncryption 67:4a:56:f9:1f:af:d0:48:c0:61:54:8e:59:9f:de:7c:0c:61: 85:06:eb:fe:15:34:00:af:dd:14:0f:0a:95:cc:bb:35:67:8d: 2e:34:dd:ac:2f:4d:2b:e3:16:3c:d9:6f:0a:ac:9f:a0:5b:55: ad:36:a5:c4:2a:fb:16:f0:d0:52:9a:cb:c5:ce:ce:c9:27:9e: 8b:af:54:d7:36:aa:a7:4d:48:ca:dc:e5:e9:b6:93:1a:f1:d9: ae:14:0a:db:16:77:30:03:70:c3:10:bc:b9:d0:f7:47:18:15: e8:fb:15:20:64:86:70:52:f2:27:9f:7d:9f:04:9b:64:37:ef: 1e:03:6e:59:39:c2:5f:cb:ec:ab:57:de:e1:f3:5e:a7:a3:bc: 88:7b:4e:57:82:d7:ce:06:91:f5:ba:df:ab:48:3c:43:62:63: 9a:52:12:a8:38:11:fd:06:01:c0:52:aa:8b:a0:90:a9:1c:38: 1a:39:c6:86:c7:ce:e2:c6:9e:58:78:03:46:d2:ab:86:fd:0e: 94:1e:e4:96:be:08:30:95:cd:27:cd:77:6c:64:8a:de:98:d2: 25:25:35:84:6f:1e:2f:5d:92:1a:2b:4c:78:c9:08:04:c4:7f: 78:af:10:b1:81:f9:fe:71:98:9f:c6:66:39:c1:14:f6:d8:6a: 06:e5:e2:d3 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUIP/o86QlpcGraT1/jDIDHNMJC+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB OUUzN0NDNzAeFw0yNjAxMDYxOTAyMzFaFw0yNzAxMDUxOTA3MzFaMDMxMTAvBgNV BAMTKDQxMDFEQTY5QjlENzRGN0NFMURCMTY2QkRDNzI2RERGNTA5MTQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZR7fCUEP+u3QpwYo+l5Rqr7up BSDQ/ReaSOAoH4XdVlWSW53tDuzwlf5iQlUyw8AoKj2DXhJJVXDWmbL7FWDjzF2S V0sUv/JjS9ncqtW43tWWVlqEQS/6LfYJ5ii9Kul4Uhxr4+E83+aOFiYDvGQMKesV 9t21P+QDrXQePbOv78+EKExF+gG85PtTiXGt1MpENsQhe6nIVeGOiYrwc01dB2pk hEx3pMS6BafdwczvACq7kxwJSqMsV8TMXX65bwEMqvMMD2eiskfwjbLu+6YtgmSB mdLWLJ/72cAHe8vArQj/8GguunMJAbZvVIj8RlpQ00d8RAAcVDpSH2ifEzXrAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUQQHaabnXT3zh2xZr3HJt31CRSb8wHwYDVR0j BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2 RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5 QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wLzMyMzgzMDMzM2E2NjM1MzkzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM5MzgzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9ZAw DQYJKoZIhvcNAQELBQADggEBAGdKVvkfr9BIwGFUjlmf3nwMYYUG6/4VNACv3RQP CpXMuzVnjS403awvTSvjFjzZbwqsn6BbVa02pcQq+xbw0FKay8XOzsknnouvVNc2 qqdNSMrc5em2kxrx2a4UCtsWdzADcMMQvLnQ90cYFej7FSBkhnBS8ieffZ8Em2Q3 7x4Dblk5wl/L7KtX3uHzXqejvIh7TleC184GkfW636tIPENiY5pSEqg4Ef0GAcBS qougkKkcOBo5xobHzuLGnlh4A0bSq4b9DpQe5Ja+CDCVzSfNd2xkit6Y0iUlNYRv Hi9dkhorTHjJCATEf3ivELGB+f5xmJ/GZjnBFPbYagbl4tM= -----END CERTIFICATE-----Generated at Sun Jan 25 13:16:37 2026 by rpki-client