This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34302d3430203d3e20323637383233.roa File: 323830333a313836303a323030303a3a2f34302d3430203d3e20323637383233.roa (raw, json) Hash identifier: m5NK1UrLug9P1LkcXbzYgLYDVjTT3yBs9+TxC8LoFv4= Subject key identifier: 39:DB:7E:A2:F7:59:5F:06:04:2E:86:40:77:68:93:DE:9D:3A:AE:FA Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 13A9732A423883302641750929054F5709341314 Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34302d3430203d3e20323637383233.roa Signing time: Wed 14 Jan 2026 20:00:00 +0000 ROA not before: Wed 14 Jan 2026 19:55:00 +0000 ROA not after: Wed 13 Jan 2027 20:00:00 +0000 asID: 267823 IP address blocks: 2803:1860:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 14:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a9:73:2a:42:38:83:30:26:41:75:09:29:05:4f:57:09:34:13:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Jan 14 19:55:00 2026 GMT Not After : Jan 13 20:00:00 2027 GMT Subject: CN=39DB7EA2F7595F06042E8640776893DE9D3AAEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:2f:18:e7:82:d8:56:67:5c:52:5d:bc:c6: 51:3e:16:1e:01:5f:c6:10:da:c4:6d:d5:88:ce:4f: 9a:c3:70:04:19:07:7e:0e:46:cd:40:95:21:c2:f0: d9:4f:f1:9e:bd:77:ce:70:6d:38:c7:2f:8e:fa:86: 58:7e:2e:82:8d:6e:9b:20:85:b4:e9:76:ad:32:19: 5a:ff:e5:bc:fb:35:2f:29:13:4c:e0:38:65:fa:e8: 1a:90:2e:72:40:45:30:d1:30:79:da:cc:c0:62:b2: ce:82:9d:90:a0:89:f0:2c:1c:a9:22:48:87:07:dc: 68:a7:59:14:67:b4:e2:62:32:2e:8e:14:66:9b:5e: 52:90:c5:d0:2d:55:9d:83:51:bd:3d:b9:b6:84:05: 30:34:8b:e1:bd:7f:62:ae:05:d7:eb:54:17:ff:9b: a6:a1:36:bf:32:84:7d:fa:30:5b:10:8d:ab:0e:8e: 64:28:42:27:87:5a:52:a7:9d:61:c1:1b:be:24:d5: be:91:25:19:9a:33:e0:27:00:eb:48:40:f2:7f:f3: a4:b3:1c:cb:f0:d7:93:65:81:27:88:b4:20:0b:99: dc:44:58:4a:bc:dd:51:4d:94:9c:f3:b3:d0:a9:85: da:30:6e:a3:d6:81:65:78:6e:57:53:fa:98:00:76: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:7E:A2:F7:59:5F:06:04:2E:86:40:77:68:93:DE:9D:3A:AE:FA X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34302d3430203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:88:21:f4:a2:80:bf:e4:8a:15:2f:03:e6:d3:7b:2c:af:f4: b6:29:17:22:0a:18:a1:2d:aa:e7:4d:64:82:ba:f2:84:1d:0e: 05:69:98:c7:a5:86:f8:21:a2:1b:1f:8d:d0:59:26:3d:c5:3c: 2a:76:31:1b:b2:c0:03:82:15:62:2c:0c:06:ad:4d:77:e7:3c: 89:94:40:6d:1d:ef:1a:58:b7:7c:0a:7c:98:f7:36:6a:cc:15: df:8b:9a:66:2e:64:52:61:99:ba:f6:e9:62:0d:c0:d1:9b:ea: 81:d1:85:55:af:cd:21:5e:3b:d2:18:f6:83:06:4a:d8:20:fc: ea:a7:af:5d:48:65:af:e4:19:3a:7b:03:48:99:a0:d4:1e:64: ab:34:bc:b3:5a:f3:48:88:6c:71:82:3f:df:8c:8a:3f:53:b6: a1:bd:a2:d1:fb:65:fd:06:e7:2b:e5:80:cb:18:a0:19:6b:24: e8:9f:a9:be:ba:40:a1:df:46:34:75:a5:ac:39:c9:be:f7:1a: 16:53:49:12:83:0f:8c:de:c3:7f:eb:f8:b9:ff:19:ac:2c:0f: 23:28:21:46:da:b5:e8:9e:1f:6b:63:5a:c0:ee:d8:d9:db:01: 15:f2:47:d9:32:81:2e:9c:f5:27:12:c6:6f:ae:cb:dc:67:91: bf:90:9c:bd -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUE6lzKkI4gzAmQXUJKQVPVwk0ExQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNjAxMTQxOTU1MDBaFw0yNzAxMTMyMDAwMDBaMDMxMTAvBgNV BAMTKDM5REI3RUEyRjc1OTVGMDYwNDJFODY0MDc3Njg5M0RFOUQzQUFFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEy8Y54LYVmdcUl28xlE+Fh4B X8YQ2sRt1YjOT5rDcAQZB34ORs1AlSHC8NlP8Z69d85wbTjHL476hlh+LoKNbpsg hbTpdq0yGVr/5bz7NS8pE0zgOGX66BqQLnJARTDRMHnazMBiss6CnZCgifAsHKki SIcH3GinWRRntOJiMi6OFGabXlKQxdAtVZ2DUb09ubaEBTA0i+G9f2KuBdfrVBf/ m6ahNr8yhH36MFsQjasOjmQoQieHWlKnnWHBG74k1b6RJRmaM+AnAOtIQPJ/86Sz HMvw15NlgSeItCALmdxEWEq83VFNlJzzs9CphdowbqPWgWV4bldT+pgAdjxvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUOdt+ovdZXwYELoZAd2iT3p06rvowHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxhgIDANBgkqhkiG9w0BAQsFAAOCAQEADYgh9KKAv+SKFS8D5tN7LK/0 tikXIgoYoS2q501kgrryhB0OBWmYx6WG+CGiGx+N0FkmPcU8KnYxG7LAA4IVYiwM Bq1Nd+c8iZRAbR3vGli3fAp8mPc2aswV34uaZi5kUmGZuvbpYg3A0ZvqgdGFVa/N IV470hj2gwZK2CD86qevXUhlr+QZOnsDSJmg1B5kqzS8s1rzSIhscYI/34yKP1O2 ob2i0ftl/QbnK+WAyxigGWsk6J+pvrpAod9GNHWlrDnJvvcaFlNJEoMPjN7Df+v4 uf8ZrCwPIyghRtq16J4fa2NawO7Y2dsBFfJH2TKBLpz1JxLGb67L3GeRv5CcvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:49 2026 by rpki-client