This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa File: 323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa (raw, json) Hash identifier: blDT0Ytz+iuOrYTcbKmcO+j0LX+pu2FZK4fIdy4RXEI= Subject key identifier: 5D:D5:32:ED:A5:AB:19:55:DF:D0:8F:AB:48:15:B9:F0:04:AE:4C:D5 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 3B6660E08B8F645A0ECE470A2EA1904F2A08F3F8 Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa Signing time: Fri 02 Jan 2026 14:57:04 +0000 ROA not before: Fri 02 Jan 2026 14:52:04 +0000 ROA not after: Fri 01 Jan 2027 14:57:04 +0000 asID: 272806 IP address blocks: 2803:cd60:8700::/44 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 01:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:60:e0:8b:8f:64:5a:0e:ce:47:0a:2e:a1:90:4f:2a:08:f3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Jan 2 14:52:04 2026 GMT Not After : Jan 1 14:57:04 2027 GMT Subject: CN=5DD532EDA5AB1955DFD08FAB4815B9F004AE4CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:82:96:92:b6:55:2f:78:ce:65:61:df:05: 08:c4:93:e4:23:a9:1c:8f:cc:64:df:73:0e:4c:cf: 70:ef:14:3f:bb:44:6e:07:85:0b:61:9d:f5:9f:ab: 9a:0c:f9:d7:17:1e:14:03:e2:d5:d8:f4:f2:4e:1e: 8c:01:bf:d8:39:c9:56:9a:25:ae:1c:33:17:5e:1d: 19:4f:86:e3:c1:58:cc:86:b8:34:d4:2d:33:f7:7e: eb:93:10:8f:d1:73:59:c5:f5:54:96:d1:e8:e5:60: 56:5f:e8:4d:ec:57:9f:69:df:c0:02:1e:ec:c7:19: 9b:cf:09:3c:13:77:95:16:3d:77:ac:f8:f6:c9:52: 67:04:10:73:70:1e:44:46:b9:e2:fd:e5:03:ed:f2: d9:13:c4:7e:47:c4:bf:96:89:96:a5:b0:18:a1:26: 08:d9:55:08:9d:6b:5a:9c:34:b0:f3:a6:e7:70:74: fc:d1:2e:08:02:2a:ad:4a:b6:74:b7:f7:0d:4f:3d: 7a:73:fd:5d:e8:8e:be:3b:fc:5e:70:07:48:73:ae: 28:61:bd:a7:dd:d3:21:13:0d:d1:4a:e5:a8:dd:c9: 63:1b:9e:6a:2f:1b:be:38:d0:51:2f:3f:e9:a1:75: e1:df:25:98:35:d2:f3:a1:cb:7c:cb:97:b8:b6:0f: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:32:ED:A5:AB:19:55:DF:D0:8F:AB:48:15:B9:F0:04:AE:4C:D5 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:8700::/44 Signature Algorithm: sha256WithRSAEncryption 06:ab:2a:90:88:e8:33:df:43:79:27:fa:d9:d7:81:50:3c:43: 04:47:ce:57:1b:67:ef:18:4e:f8:f0:4f:3b:3e:9e:46:06:09: 81:13:95:29:80:cd:16:79:95:82:1d:70:d1:d7:a7:47:68:e7: 67:95:25:3b:07:78:83:66:3a:fa:e9:af:a3:f7:c3:bd:bb:76: fa:07:fd:b6:cc:14:c8:9d:4d:50:70:67:99:f3:06:95:db:14: 33:94:ca:b6:0d:b7:1e:31:ca:9c:f2:86:a4:47:c5:4b:38:ce: 39:eb:e7:29:ee:5c:38:68:f1:8c:11:bf:8d:3c:11:8f:c8:73: 11:77:a9:4c:31:bf:f0:77:0a:b3:9a:3c:17:7a:79:40:ac:53: 04:4f:f4:b3:f9:2b:71:7a:aa:c0:12:e4:56:af:2c:66:df:f0: c8:4c:3d:40:0d:fa:3c:26:ce:47:bc:f6:d4:8d:43:43:44:04: 69:70:80:78:88:54:43:27:33:af:69:80:9b:ec:cc:9a:22:02: 39:df:4d:00:64:eb:1d:c4:27:df:24:1e:60:d0:74:d0:a2:88: 66:e4:6a:68:49:a1:47:a5:f3:72:fa:bc:5b:09:de:1d:aa:f9: ca:bc:f1:b6:7e:40:7f:61:6d:17:f9:d5:c7:68:47:ea:eb:e4: 30:d9:a5:06 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUO2Zg4IuPZFoOzkcKLqGQTyoI8/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNjAxMDIxNDUyMDRaFw0yNzAxMDExNDU3MDRaMDMxMTAvBgNV BAMTKDVERDUzMkVEQTVBQjE5NTVERkQwOEZBQjQ4MTVCOUYwMDRBRTRDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFs4KWkrZVL3jOZWHfBQjEk+Qj qRyPzGTfcw5Mz3DvFD+7RG4HhQthnfWfq5oM+dcXHhQD4tXY9PJOHowBv9g5yVaa Ja4cMxdeHRlPhuPBWMyGuDTULTP3fuuTEI/Rc1nF9VSW0ejlYFZf6E3sV59p38AC HuzHGZvPCTwTd5UWPXes+PbJUmcEEHNwHkRGueL95QPt8tkTxH5HxL+WiZalsBih JgjZVQida1qcNLDzpudwdPzRLggCKq1KtnS39w1PPXpz/V3ojr47/F5wB0hzrihh vafd0yETDdFK5ajdyWMbnmovG7440FEvP+mhdeHfJZg10vOhy3zLl7i2D2cnAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUXdUy7aWrGVXf0I+rSBW58ASuTNUwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzgz NzMwMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzODMwMzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQoA81ghwAwDQYJKoZIhvcNAQELBQADggEBAAarKpCI6DPfQ3kn+tnXgVA8 QwRHzlcbZ+8YTvjwTzs+nkYGCYETlSmAzRZ5lYIdcNHXp0do52eVJTsHeINmOvrp r6P3w727dvoH/bbMFMidTVBwZ5nzBpXbFDOUyrYNtx4xypzyhqRHxUs4zjnr5ynu XDho8YwRv408EY/IcxF3qUwxv/B3CrOaPBd6eUCsUwRP9LP5K3F6qsAS5FavLGbf 8MhMPUAN+jwmzke89tSNQ0NEBGlwgHiIVEMnM69pgJvszJoiAjnfTQBk6x3EJ98k HmDQdNCiiGbkamhJoUel83L6vFsJ3h2q+cq88bZ+QH9hbRf51cdoR+rr5DDZpQY= -----END CERTIFICATE-----Generated at Sun Jan 25 08:29:43 2026 by rpki-client