This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa File: 323830313a3165303a3a2f34352d3435203d3e203237383735.roa (raw, json) Hash identifier: HDtgl6E53wOfdxN0C2xWU6eiL75oTyiONikZSlPcZUI= Subject key identifier: A5:CA:C4:E9:CC:EC:CC:DB:21:FC:43:BA:4B:9D:BA:B5:96:D9:B8:83 Certificate issuer: /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC Certificate serial: 0C67F4A42CA2BDC1C08C736514FF9AEBE519ECB5 Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa Signing time: Tue 06 Jan 2026 19:03:15 +0000 ROA not before: Tue 06 Jan 2026 18:58:15 +0000 ROA not after: Tue 05 Jan 2027 19:03:15 +0000 asID: 27875 IP address blocks: 2801:1e0::/45 maxlen: 45 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 15:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:67:f4:a4:2c:a2:bd:c1:c0:8c:73:65:14:ff:9a:eb:e5:19:ec:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC Validity Not Before: Jan 6 18:58:15 2026 GMT Not After : Jan 5 19:03:15 2027 GMT Subject: CN=A5CAC4E9CCECCCDB21FC43BA4B9DBAB596D9B883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:64:8d:60:8e:4a:3c:ab:72:86:70:dd:52: bc:e6:3f:73:4f:f3:c2:10:ce:a5:14:8e:aa:81:01: 95:cb:42:99:c5:72:fd:9e:4d:37:7c:4e:4b:d3:fa: 24:67:e1:27:37:b8:59:1e:e6:68:b9:ab:d7:6d:f8: ca:7a:2a:00:4c:90:24:2f:c4:8c:33:18:82:94:ef: 3c:79:a9:05:b4:3d:93:f8:ab:ae:75:d1:e0:7d:d6: e2:d0:ae:3b:21:fd:d3:5c:27:8b:c7:70:76:da:d2: 63:60:db:33:ce:dc:ae:7b:64:14:d2:fb:d1:1b:f5: bd:54:be:2a:4e:04:ef:ab:e6:4b:52:50:73:22:77: 14:a4:fc:db:63:ec:4c:30:da:30:ad:3a:fa:e2:bb: 10:51:66:79:04:96:93:3b:41:25:0a:7a:a3:44:61: de:de:2c:eb:df:41:7d:bc:dc:15:b4:56:c3:cb:da: ff:42:d3:d7:c7:92:af:19:63:70:b1:33:b1:8a:10: 40:47:aa:2a:f6:e5:f8:b1:10:31:59:38:57:07:5f: f0:eb:c4:8b:da:b2:25:b3:3c:d6:bd:67:89:0a:af: 5d:ee:48:54:c3:a9:a7:45:21:69:ed:c0:c9:91:d0: 84:9a:10:36:b6:96:ee:8f:94:5f:3a:a3:de:16:9c: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:C4:E9:CC:EC:CC:DB:21:FC:43:BA:4B:9D:BA:B5:96:D9:B8:83 X509v3 Authority Key Identifier: keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e0::/45 Signature Algorithm: sha256WithRSAEncryption 14:1f:10:c4:d0:85:b3:d3:14:94:32:2f:5b:8f:2a:08:21:c1: 62:d0:5a:3d:14:b9:6c:64:57:ee:b8:24:92:66:f8:79:4c:47: 49:0c:85:b5:38:fc:89:48:c2:1b:4c:49:71:2d:2d:0a:cb:73: 51:d0:69:48:e1:f1:5c:b4:fd:81:c7:00:a2:83:d2:d0:cb:a7: 76:7b:8a:3e:2c:13:32:1d:d0:18:62:9a:af:a6:d4:fc:08:b9: 04:9b:19:2d:19:78:55:59:97:f2:1e:7d:bd:01:fd:ea:22:05: 8a:8c:3b:0c:aa:2d:e1:f7:52:6a:3c:91:90:1f:ab:d7:62:7f: 38:8e:ab:48:77:9e:c2:85:1c:20:35:9d:bf:15:7f:54:35:ae: bd:25:b4:3c:89:ff:ad:c4:dc:88:0b:91:0d:f4:fa:f9:a9:6d: 32:85:bf:19:89:30:53:f1:87:e7:33:e3:f7:bf:26:b6:68:07: 82:99:26:c5:1f:3f:43:b2:ce:7a:5c:72:c9:e8:fb:4c:1f:f3: e1:d8:31:82:90:61:7e:00:a4:93:c9:90:ab:07:ab:6a:79:40: b5:17:3d:2d:2a:68:e7:a9:5a:66:df:4b:36:26:11:94:ac:6f: 93:15:f2:a0:e1:63:b4:23:b8:43:75:0b:ef:c5:95:ac:e6:98: 8d:f7:f9:07 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUDGf0pCyivcHAjHNlFP+a6+UZ7LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA1M0Y3RDQyRkM5RkQwMzU1NkE5RjNEMkFGOUUzRDIy MjFCQURGQzAeFw0yNjAxMDYxODU4MTVaFw0yNzAxMDUxOTAzMTVaMDMxMTAvBgNV BAMTKEE1Q0FDNEU5Q0NFQ0NDREIyMUZDNDNCQTRCOURCQUI1OTZEOUI4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CGSNYI5KPKtyhnDdUrzmP3NP 88IQzqUUjqqBAZXLQpnFcv2eTTd8TkvT+iRn4Sc3uFke5mi5q9dt+Mp6KgBMkCQv xIwzGIKU7zx5qQW0PZP4q6510eB91uLQrjsh/dNcJ4vHcHba0mNg2zPO3K57ZBTS +9Eb9b1UvipOBO+r5ktSUHMidxSk/Ntj7Eww2jCtOvriuxBRZnkElpM7QSUKeqNE Yd7eLOvfQX283BW0VsPL2v9C09fHkq8ZY3CxM7GKEEBHqir25fixEDFZOFcHX/Dr xIvasiWzPNa9Z4kKr13uSFTDqadFIWntwMmR0ISaEDa2lu6PlF86o94WnBqnAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUpcrE6czszNsh/EO6S526tZbZuIMwHwYDVR0j BBgwFoAU0FP31C/J/QNVap89Kvnj0iIbrfwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MUY5ODlGOEM1RkY5RTlFMTI2QzVGOTBGRUY5Rjk1QTEz RjJGN0U4MTBGNjhEMEU0NDE2NjRCRTNGQTlDMDI0LzAvRDA1M0Y3RDQyRkM5RkQw MzU1NkE5RjNEMkFGOUUzRDIyMjFCQURGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDUzRjdENDJGQzlGRDAzNTU2 QTlGM0QyQUY5RTNEMjIyMUJBREZDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzFGOTg5RjhDNUZGOUU5RTEyNkM1RjkwRkVGOUY5NUExM0YyRjdFODEw RjY4RDBFNDQxNjY0QkUzRkE5QzAyNC8wLzMyMzgzMDMxM2EzMTY1MzAzYTNhMmYz NDM1MmQzNDM1MjAzZDNlMjAzMjM3MzgzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKAEB4AAAMA0G CSqGSIb3DQEBCwUAA4IBAQAUHxDE0IWz0xSUMi9bjyoIIcFi0Fo9FLlsZFfuuCSS Zvh5TEdJDIW1OPyJSMIbTElxLS0Ky3NR0GlI4fFctP2BxwCig9LQy6d2e4o+LBMy HdAYYpqvptT8CLkEmxktGXhVWZfyHn29Af3qIgWKjDsMqi3h91JqPJGQH6vXYn84 jqtId57ChRwgNZ2/FX9UNa69JbQ8if+txNyIC5EN9Pr5qW0yhb8ZiTBT8YfnM+P3 vya2aAeCmSbFHz9Dss56XHLJ6PtMH/Ph2DGCkGF+AKSTyZCrB6tqeUC1Fz0tKmjn qVpm30s2JhGUrG+TFfKg4WO0I7hDdQvvxZWs5piN9/kH -----END CERTIFICATE-----Generated at Sun Jan 25 08:25:16 2026 by rpki-client