This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a323a3a2f34382d3438203d3e20323733303431.roa File: 323830313a3161353a323a3a2f34382d3438203d3e20323733303431.roa (raw, json) Hash identifier: A3oKq2wIj205uvI7ruyEGdLHtk4AcjTso91TNTdtKys= Subject key identifier: 86:7D:54:E5:DF:7B:A2:8D:07:9D:DA:EF:BB:7F:D2:B1:45:8F:3A:3E Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E Certificate serial: 6A5AF67F2FB8D50111A4851B47A139567043CCE6 Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a323a3a2f34382d3438203d3e20323733303431.roa Signing time: Tue 06 Jan 2026 19:47:41 +0000 ROA not before: Tue 06 Jan 2026 19:42:41 +0000 ROA not after: Tue 05 Jan 2027 19:47:41 +0000 asID: 273041 IP address blocks: 2801:1a5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5a:f6:7f:2f:b8:d5:01:11:a4:85:1b:47:a1:39:56:70:43:cc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E Validity Not Before: Jan 6 19:42:41 2026 GMT Not After : Jan 5 19:47:41 2027 GMT Subject: CN=867D54E5DF7BA28D079DDAEFBB7FD2B1458F3A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:d4:7f:2b:15:30:7c:77:7a:53:85:43:ce: f3:22:95:39:c8:46:9f:ec:2e:67:cd:00:3d:64:28: f0:f5:a4:53:3f:fb:c1:d6:4c:dc:4e:3d:7b:7f:cc: e7:20:fe:16:77:1d:51:42:21:47:22:f8:38:50:bb: 6c:90:df:a9:46:5b:a0:93:ab:d0:62:07:85:54:19: d9:a0:56:92:bb:39:f7:df:04:25:a1:41:ce:fb:f6: 91:0e:0b:5c:cb:8c:ad:44:a8:b6:21:a1:83:5f:8a: c4:bf:93:4d:01:b8:6d:40:77:d1:a9:a3:4a:81:bd: 11:46:76:83:d7:ac:bc:7b:3e:8f:06:8f:2b:53:90: b0:d3:a3:4a:dd:35:a4:ca:ea:a9:16:c9:31:b5:ea: 6a:92:0f:3d:1f:f8:15:d4:69:7c:32:21:fd:d3:81: 9f:d0:38:a8:05:16:af:9f:35:cb:d6:a9:a0:d7:14: 8c:f1:84:37:25:5a:6d:7f:9a:56:43:b3:1a:60:1f: ef:a2:ee:9d:8a:f8:ee:0f:d0:c6:7f:9c:bb:29:24: 3c:55:dc:12:ab:64:a6:cc:7e:aa:85:82:a8:6d:42: eb:bb:b6:91:a9:86:4e:cb:a9:6a:60:66:a3:14:4e: 77:95:29:5d:04:65:d3:34:0e:53:b7:da:38:4a:5c: 10:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:54:E5:DF:7B:A2:8D:07:9D:DA:EF:BB:7F:D2:B1:45:8F:3A:3E X509v3 Authority Key Identifier: keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a323a3a2f34382d3438203d3e20323733303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a5:2::/48 Signature Algorithm: sha256WithRSAEncryption 95:31:5f:09:61:e6:0c:69:9a:4b:24:b4:2d:83:94:ac:93:2a: 48:ec:db:5d:15:88:69:db:8a:84:db:38:53:9c:5c:47:4a:35: c0:56:bd:02:bc:24:a5:f5:f1:5f:9e:33:88:a4:eb:92:ad:3f: fd:6b:cc:11:7a:ec:de:e1:ec:ec:5c:48:1b:43:b5:fc:69:2e: 99:18:7d:ff:a8:11:66:b5:30:32:80:ed:5a:ee:06:70:60:db: f3:cf:3e:79:c3:b6:2a:ce:99:bb:3e:c1:cd:1b:44:3a:58:57: 7b:f4:84:22:e6:3f:57:4e:1b:26:1f:66:e4:ec:9b:94:5f:79: 77:d5:d4:c6:99:a4:f5:23:d9:1c:84:6a:ba:9a:ec:f5:25:35: a4:0d:47:43:c9:60:51:3e:73:46:57:1f:e7:7c:36:30:65:e0: ed:a2:2b:c6:d5:44:44:d3:59:c8:13:c3:63:16:d6:40:94:be: 0b:34:a9:e8:62:3c:0a:13:e2:ca:95:40:73:eb:fe:3a:c5:34: 86:60:b1:11:bd:d2:03:d2:d1:77:00:e6:97:74:03:79:78:1c: 19:6f:eb:47:3a:91:3e:a8:ab:cf:02:72:98:6c:6d:cb:45:23: 66:55:b0:65:57:5b:fd:93:8e:2c:47:d4:f9:08:c4:f2:5a:a0: 28:a2:94:38 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUalr2fy+41QERpIUbR6E5VnBDzOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5 RDUzMEQxRTAeFw0yNjAxMDYxOTQyNDFaFw0yNzAxMDUxOTQ3NDFaMDMxMTAvBgNV BAMTKDg2N0Q1NEU1REY3QkEyOEQwNzlEREFFRkJCN0ZEMkIxNDU4RjNBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fdR/KxUwfHd6U4VDzvMilTnI Rp/sLmfNAD1kKPD1pFM/+8HWTNxOPXt/zOcg/hZ3HVFCIUci+DhQu2yQ36lGW6CT q9BiB4VUGdmgVpK7OfffBCWhQc779pEOC1zLjK1EqLYhoYNfisS/k00BuG1Ad9Gp o0qBvRFGdoPXrLx7Po8GjytTkLDTo0rdNaTK6qkWyTG16mqSDz0f+BXUaXwyIf3T gZ/QOKgFFq+fNcvWqaDXFIzxhDclWm1/mlZDsxpgH++i7p2K+O4P0MZ/nLspJDxV 3BKrZKbMfqqFgqhtQuu7tpGphk7LqWpgZqMUTneVKV0EZdM0DlO32jhKXBCnAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUhn1U5d97oo0Hndrvu3/SsUWPOj4wHwYDVR0j BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0 QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0 Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTMyM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB pQACMA0GCSqGSIb3DQEBCwUAA4IBAQCVMV8JYeYMaZpLJLQtg5SskypI7NtdFYhp 24qE2zhTnFxHSjXAVr0CvCSl9fFfnjOIpOuSrT/9a8wReuze4ezsXEgbQ7X8aS6Z GH3/qBFmtTAygO1a7gZwYNvzzz55w7Yqzpm7PsHNG0Q6WFd79IQi5j9XThsmH2bk 7JuUX3l31dTGmaT1I9kchGq6muz1JTWkDUdDyWBRPnNGVx/nfDYwZeDtoivG1URE 01nIE8NjFtZAlL4LNKnoYjwKE+LKlUBz6/46xTSGYLERvdID0tF3AOaXdAN5eBwZ b+tHOpE+qKvPAnKYbG3LRSNmVbBlV1v9k44sR9T5CMTyWqAoopQ4 -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:03 2026 by rpki-client