This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34302d3430203d3e20323637383233.roa File: 323830333a313836303a323130303a3a2f34302d3430203d3e20323637383233.roa (raw, json) Hash identifier: oeFBCdjMd9zdnLJz1TFRpNeTIEfdk4xhwWkc0wYXpAo= Subject key identifier: 1A:02:11:B9:56:F8:4B:43:D4:3E:47:47:86:52:CE:65:0D:40:80:38 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 7627C36B002AEE90976901C9AAA45F9CD47AA1F9 Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34302d3430203d3e20323637383233.roa Signing time: Wed 14 Jan 2026 20:00:00 +0000 ROA not before: Wed 14 Jan 2026 19:55:00 +0000 ROA not after: Wed 13 Jan 2027 20:00:00 +0000 asID: 267823 IP address blocks: 2803:1860:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 14:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:27:c3:6b:00:2a:ee:90:97:69:01:c9:aa:a4:5f:9c:d4:7a:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Jan 14 19:55:00 2026 GMT Not After : Jan 13 20:00:00 2027 GMT Subject: CN=1A0211B956F84B43D43E47478652CE650D408038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:99:27:5c:ee:87:39:65:14:6b:e7:ab:84: 49:f9:32:4f:b9:e8:d2:17:d6:0f:33:29:5b:ce:31: 04:a6:eb:b9:0d:27:66:f9:29:b4:06:4b:e1:5d:7f: 60:74:7a:40:ec:3f:af:a6:c1:e6:24:2f:f9:a2:f8: a9:d0:ce:f2:00:71:72:63:a3:81:7c:80:1f:da:8f: b0:14:63:5c:e5:1c:ae:46:12:1b:2e:8f:47:69:7f: a8:37:85:9c:44:aa:11:3a:34:3f:46:e3:8e:38:3d: d1:93:02:a5:84:f1:95:96:ac:21:ea:36:6f:7e:91: b7:1d:b4:8f:06:d2:b1:b4:13:f8:ee:17:3f:50:1f: 26:61:55:c2:8d:dd:05:39:4f:e8:67:ef:ad:15:69: 53:bf:d8:fa:c9:ce:8f:2d:c4:af:15:f6:38:e5:df: c6:35:4c:8b:92:b4:08:89:3b:13:f8:b6:bc:05:5c: 17:c4:66:dc:92:a2:1f:fe:a2:86:59:56:76:bb:e0: 92:5c:41:95:37:dd:62:72:7f:72:20:01:8f:35:f7: 47:0f:2e:1d:0b:24:95:1b:78:4a:cd:de:7d:44:4e: 8b:79:00:5f:6e:27:eb:4a:fe:bd:04:32:c4:b7:61: 7d:e5:54:5c:27:54:25:e8:bd:57:18:90:87:9d:b2: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:02:11:B9:56:F8:4B:43:D4:3E:47:47:86:52:CE:65:0D:40:80:38 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34302d3430203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2100::/40 Signature Algorithm: sha256WithRSAEncryption 1c:94:cc:8b:bf:8c:04:ee:bb:50:26:57:04:dd:9a:3b:39:cc: 7f:75:20:7a:42:f0:f0:d1:0f:87:1b:a2:67:4c:16:c8:4e:0d: 86:67:26:d7:e2:fe:7e:e6:3b:a4:ec:67:20:53:d8:77:36:96: b8:d9:8e:90:58:22:48:07:58:61:e2:b8:5b:5b:02:e2:7c:a9: 24:a9:64:fe:12:c7:eb:8a:40:6a:69:2d:50:85:53:4e:37:8b: dd:45:b4:12:69:a6:8c:bf:c0:79:4a:4c:42:84:cc:7f:ca:97: 87:b9:e5:6c:a5:24:c3:7b:3c:bd:5f:22:b9:8d:c9:cd:04:20: 65:88:b3:67:ff:6e:39:1f:c7:42:49:a9:17:90:19:f6:79:c0: 07:47:f4:e1:cc:0b:f4:f8:3a:ad:c8:81:26:0e:89:ba:e7:66: 94:9b:18:c4:93:95:2d:de:88:83:70:50:72:55:9b:9e:b9:7c: ff:62:6e:4f:a8:e6:28:3e:7e:fa:26:91:fc:20:47:a6:ac:a4: 5f:64:68:cc:75:d1:2e:0f:6b:db:c3:f0:d8:4b:23:10:13:f8: 62:d8:27:52:25:38:ce:fd:82:7d:89:43:5c:55:32:12:bd:a2: 90:c1:e1:94:12:90:85:7e:d3:9f:af:32:ef:ef:95:5c:d1:60: b1:1e:2a:e1 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUdifDawAq7pCXaQHJqqRfnNR6ofkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNjAxMTQxOTU1MDBaFw0yNzAxMTMyMDAwMDBaMDMxMTAvBgNV BAMTKDFBMDIxMUI5NTZGODRCNDNENDNFNDc0Nzg2NTJDRTY1MEQ0MDgwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIg5knXO6HOWUUa+erhEn5Mk+5 6NIX1g8zKVvOMQSm67kNJ2b5KbQGS+Fdf2B0ekDsP6+mweYkL/mi+KnQzvIAcXJj o4F8gB/aj7AUY1zlHK5GEhsuj0dpf6g3hZxEqhE6ND9G4444PdGTAqWE8ZWWrCHq Nm9+kbcdtI8G0rG0E/juFz9QHyZhVcKN3QU5T+hn760VaVO/2PrJzo8txK8V9jjl 38Y1TIuStAiJOxP4trwFXBfEZtySoh/+ooZZVna74JJcQZU33WJyf3IgAY8190cP Lh0LJJUbeErN3n1ETot5AF9uJ+tK/r0EMsS3YX3lVFwnVCXovVcYkIedssZhAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUGgIRuVb4S0PUPkdHhlLOZQ1AgDgwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxhgITANBgkqhkiG9w0BAQsFAAOCAQEAHJTMi7+MBO67UCZXBN2aOznM f3UgekLw8NEPhxuiZ0wWyE4Nhmcm1+L+fuY7pOxnIFPYdzaWuNmOkFgiSAdYYeK4 W1sC4nypJKlk/hLH64pAamktUIVTTjeL3UW0EmmmjL/AeUpMQoTMf8qXh7nlbKUk w3s8vV8iuY3JzQQgZYizZ/9uOR/HQkmpF5AZ9nnAB0f04cwL9Pg6rciBJg6Juudm lJsYxJOVLd6Ig3BQclWbnrl8/2JuT6jmKD5++iaR/CBHpqykX2RozHXRLg9r28Pw 2EsjEBP4YtgnUiU4zv2CfYlDXFUyEr2ikMHhlBKQhX7Tn68y7++VXNFgsR4q4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:48 2026 by rpki-client