This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa File: 323830333a326663303a3a2f33322d3332203d3e20323633313730.roa (raw, json) Hash identifier: yCSMh/SDyG1OQVlZ6sycDhHUuuCTiWwkTpKVgwbpckE= Subject key identifier: 3F:39:86:99:C2:E4:E2:04:1B:DB:62:F1:05:79:33:ED:4A:45:52:25 Certificate issuer: /CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD Certificate serial: 230AE3C17F999A7B34A0D8E07CDD241337565EAF Authority key identifier: AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa Signing time: Tue 06 Jan 2026 19:46:10 +0000 ROA not before: Tue 06 Jan 2026 19:41:10 +0000 ROA not after: Tue 05 Jan 2027 19:46:10 +0000 asID: 263170 IP address blocks: 2803:2fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0a:e3:c1:7f:99:9a:7b:34:a0:d8:e0:7c:dd:24:13:37:56:5e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD Validity Not Before: Jan 6 19:41:10 2026 GMT Not After : Jan 5 19:46:10 2027 GMT Subject: CN=3F398699C2E4E2041BDB62F1057933ED4A455225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:d6:42:e4:97:7c:91:55:da:16:5b:f0:fb: 74:81:1d:5b:4c:6f:c3:fb:c6:5f:25:9f:00:c1:a1: b9:cc:7a:83:d8:e0:c3:d8:59:1b:62:2f:f0:87:9a: fb:a6:9f:e0:f0:f1:43:03:58:9d:e5:89:15:e0:3b: 2e:b9:be:74:0e:a1:4a:b6:5b:fb:c1:6d:a1:f5:ca: eb:56:54:ef:78:d9:0f:f6:be:ea:9a:95:5e:b1:2e: 94:72:d7:48:fb:c4:1c:87:77:c5:08:67:4e:ae:78: cd:2f:9b:df:7b:6b:3b:f6:c0:3d:1a:fa:55:18:e5: 4a:67:90:8a:ec:eb:f5:e3:ab:6d:9e:56:25:fb:b5: 8c:28:cd:e5:4a:73:0b:03:35:2c:be:e3:08:5c:7c: 4f:48:70:dc:68:18:b2:90:0b:66:a2:ef:05:97:28: 7e:2c:b4:f6:31:6c:f3:6c:ec:0b:75:d6:5b:c2:5e: fa:c2:a2:7c:5e:e1:83:4b:76:ad:58:9e:ba:dc:33: 88:44:d4:f0:77:4e:27:e1:58:c8:45:3f:0f:6c:68: 09:5e:f5:51:c4:10:a6:b3:8f:46:e0:ff:2f:17:88: f2:3e:89:11:a3:eb:b9:cb:10:48:95:16:63:d9:0b: 09:25:03:da:16:5c:95:f2:75:7e:31:ed:50:3a:aa: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:86:99:C2:E4:E2:04:1B:DB:62:F1:05:79:33:ED:4A:45:52:25 X509v3 Authority Key Identifier: keyid:AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 97:e5:65:4d:18:02:fe:af:9e:36:5a:89:ea:4e:fc:8a:28:82: e6:ae:20:3e:e1:c1:10:37:6f:bc:1e:20:b6:f9:3e:81:93:ba: d7:b1:0c:d9:57:fa:c3:d0:a9:88:08:0f:9d:62:48:fa:f2:1b: bf:26:be:7a:8c:20:7f:0a:31:b2:2c:20:9d:4a:18:e5:c1:e5: 29:fb:90:b3:92:7a:ce:53:36:2d:be:ac:9b:c1:3a:05:43:ca: aa:32:4d:13:7e:ab:5a:f3:fb:c4:77:ea:81:ad:b8:47:a0:37: 74:cd:12:f7:d4:35:dd:be:ef:4b:51:47:ad:4a:d2:6e:3a:5b: 4f:20:21:83:ab:60:e5:95:9f:79:a0:29:30:75:fa:d9:38:86: e2:f0:b3:ad:c1:9f:b2:9d:af:fc:d9:66:94:55:81:3c:21:5b: 07:46:82:5b:51:4e:e7:1c:02:ba:ae:41:c1:c1:f6:7a:b9:cb: 8c:49:91:68:bf:1d:a9:0f:de:14:58:51:9e:4a:ad:e2:49:ae: eb:56:32:2b:d7:b0:5a:da:7c:f0:fb:62:20:21:ac:7b:6b:5e: 9e:1f:b6:9d:24:08:1f:e5:c8:6d:20:b3:c2:93:18:25:b4:09: 53:06:f4:15:e3:5e:08:d7:9f:ef:0c:b3:e6:ad:a0:e1:a8:d1: 6d:9f:0d:4c -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUIwrjwX+Zmns0oNjgfN0kEzdWXq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyQzI3RUQ3NDlEMTRFNjkxMzdEQjExRjc3OEM3RjNG NDA1MDFERDAeFw0yNjAxMDYxOTQxMTBaFw0yNzAxMDUxOTQ2MTBaMDMxMTAvBgNV BAMTKDNGMzk4Njk5QzJFNEUyMDQxQkRCNjJGMTA1NzkzM0VENEE0NTUyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWidZC5Jd8kVXaFlvw+3SBHVtM b8P7xl8lnwDBobnMeoPY4MPYWRtiL/CHmvumn+Dw8UMDWJ3liRXgOy65vnQOoUq2 W/vBbaH1yutWVO942Q/2vuqalV6xLpRy10j7xByHd8UIZ06ueM0vm997azv2wD0a +lUY5UpnkIrs6/Xjq22eViX7tYwozeVKcwsDNSy+4whcfE9IcNxoGLKQC2ai7wWX KH4stPYxbPNs7At11lvCXvrConxe4YNLdq1YnrrcM4hE1PB3TifhWMhFPw9saAle 9VHEEKazj0bg/y8XiPI+iRGj67nLEEiVFmPZCwklA9oWXJXydX4x7VA6qoCvAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUPzmGmcLk4gQb22LxBXkz7UpFUiUwHwYDVR0j BBgwFoAUrywn7XSdFOaRN9sR93jH8/QFAd0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDA5QjI0QUVGQzZDRUNFODQyQzVEN0I0NDI2QTVCQzYz MzE2NTM0ODgwRjlCN0IwRUQzODFFQjlFMUIzMDE5LzAvQUYyQzI3RUQ3NDlEMTRF NjkxMzdEQjExRjc3OEM3RjNGNDA1MDFERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjJDMjdFRDc0OUQxNEU2OTEz N0RCMTFGNzc4QzdGM0Y0MDUwMURELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QwOUIyNEFFRkM2Q0VDRTg0MkM1RDdCNDQyNkE1QkM2MzMxNjUzNDg4 MEY5QjdCMEVEMzgxRUI5RTFCMzAxOS8wLzMyMzgzMDMzM2EzMjY2NjMzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMxMzczMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDL8Aw DQYJKoZIhvcNAQELBQADggEBAJflZU0YAv6vnjZaiepO/IooguauID7hwRA3b7we ILb5PoGTutexDNlX+sPQqYgID51iSPryG78mvnqMIH8KMbIsIJ1KGOXB5Sn7kLOS es5TNi2+rJvBOgVDyqoyTRN+q1rz+8R36oGtuEegN3TNEvfUNd2+70tRR61K0m46 W08gIYOrYOWVn3mgKTB1+tk4huLws63Bn7Kdr/zZZpRVgTwhWwdGgltRTuccArqu QcHB9nq5y4xJkWi/HakP3hRYUZ5KreJJrutWMivXsFrafPD7YiAhrHtrXp4ftp0k CB/lyG0gs8KTGCW0CVMG9BXjXgjXn+8Ms+atoOGo0W2fDUw= -----END CERTIFICATE-----Generated at Sun Jan 25 10:03:27 2026 by rpki-client