This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa File: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (raw, json) Hash identifier: YRSInHlH4G9DV97Bw7N1KGcbjql/YDvbX1aaGvB0s1Y= Subject key identifier: 22:56:AC:31:2A:0E:DE:D8:BF:D3:CF:55:F1:7E:0D:D2:A8:4A:76:CF Certificate issuer: /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Certificate serial: 282B4B0CBCC9AD28B89D96F5E17ADCC255390151 Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa Signing time: Tue 06 Jan 2026 19:33:13 +0000 ROA not before: Tue 06 Jan 2026 19:28:13 +0000 ROA not after: Tue 05 Jan 2027 19:33:13 +0000 asID: 273013 IP address blocks: 2803:c390::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 04:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2b:4b:0c:bc:c9:ad:28:b8:9d:96:f5:e1:7a:dc:c2:55:39:01:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Validity Not Before: Jan 6 19:28:13 2026 GMT Not After : Jan 5 19:33:13 2027 GMT Subject: CN=2256AC312A0EDED8BFD3CF55F17E0DD2A84A76CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:31:b1:c5:71:ef:09:4f:28:fa:9d:84:d5: 93:83:98:91:2e:67:18:92:1f:a7:63:5d:0c:45:60: b9:c4:b8:02:ad:b4:cd:b7:15:f8:96:60:70:ea:0e: 50:ee:6d:3b:45:81:f2:df:ba:72:6d:cd:dc:6c:97: 7f:64:6e:90:0d:ca:77:c3:a9:9d:5d:44:ea:a1:5a: af:dd:b4:db:d9:08:19:27:52:91:71:f4:76:24:a3: 21:b3:dd:bb:86:b8:66:c9:27:e5:e8:18:ad:63:04: 47:cc:26:81:b1:56:24:d3:af:1e:fe:16:49:28:5f: 2b:38:8d:8d:65:b0:ae:68:a0:c1:9f:91:3e:f4:ea: 1f:e2:50:e2:2b:15:bc:c4:78:9f:0b:a8:ca:3e:39: c6:b3:38:79:3a:4d:bd:f2:42:69:d3:54:00:52:a1: b5:ce:01:ed:2a:2c:b2:07:07:7f:ad:83:b3:bb:6e: d0:37:04:4c:70:b6:01:cd:61:fc:96:60:dc:f4:bc: 19:de:23:33:c4:52:af:2b:a0:27:33:49:cb:0f:13: da:5b:2c:75:a8:8d:8f:de:36:a0:59:ec:1c:96:1e: 8c:55:94:59:72:d7:eb:1a:74:d1:f5:9b:1d:9f:d7: ba:19:26:b1:07:e1:42:2f:c7:ad:2d:7c:2e:f2:3a: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:AC:31:2A:0E:DE:D8:BF:D3:CF:55:F1:7E:0D:D2:A8:4A:76:CF X509v3 Authority Key Identifier: keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c390::/32 Signature Algorithm: sha256WithRSAEncryption 8e:0e:2c:de:44:2d:b1:83:cb:c1:d7:c1:de:67:10:5a:f2:52: ec:1d:d3:ce:46:dd:2e:3f:c3:45:32:36:72:35:8f:a4:26:56: d0:7a:46:39:bc:c0:03:b6:a0:65:7a:f6:c7:e6:54:de:93:dc: 88:54:bb:34:2f:5f:de:b3:a5:d1:c6:0b:c2:1d:38:82:55:70: 2e:0a:0a:fa:42:6c:af:3f:58:37:67:e5:81:d5:d4:fd:5b:ee: 68:5e:a3:7c:da:e0:f2:76:99:be:a7:f1:ce:e4:64:da:4e:ce: 65:00:e1:a8:9c:4b:8b:ea:25:ab:c2:cc:d2:8f:e8:fd:e2:39: 57:2e:b6:8c:39:45:c8:ab:42:fd:ef:8b:da:9b:59:07:b5:8a: 53:c2:71:62:a0:f9:4c:38:a5:e3:cf:6b:10:2f:08:ae:e5:5f: 0c:4c:b5:4d:f2:14:5c:fa:4a:80:af:e0:e6:a6:c8:8b:96:63: 9d:f3:a3:ed:cc:ff:e1:75:c1:ee:fe:c0:83:88:01:11:29:77: 60:b9:0f:66:9c:97:0c:fc:3d:81:de:fb:72:ae:99:70:26:4b: 39:a3:81:ea:a8:05:11:0a:b1:20:7f:c1:fa:4b:4d:7f:19:f3: 8e:61:5c:b0:57:b7:21:7b:02:db:2c:20:40:39:b1:38:58:c1: ea:19:5a:a9 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUKCtLDLzJrSi4nZb14XrcwlU5AVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFEQkYyQzQ5MDhCNUVFNkQzRDM0QUU0REVCODE3MEJF NjJGMjNBOTAeFw0yNjAxMDYxOTI4MTNaFw0yNzAxMDUxOTMzMTNaMDMxMTAvBgNV BAMTKDIyNTZBQzMxMkEwRURFRDhCRkQzQ0Y1NUYxN0UwREQyQTg0QTc2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwjGxxXHvCU8o+p2E1ZODmJEu ZxiSH6djXQxFYLnEuAKttM23FfiWYHDqDlDubTtFgfLfunJtzdxsl39kbpANynfD qZ1dROqhWq/dtNvZCBknUpFx9HYkoyGz3buGuGbJJ+XoGK1jBEfMJoGxViTTrx7+ FkkoXys4jY1lsK5ooMGfkT706h/iUOIrFbzEeJ8LqMo+OcazOHk6Tb3yQmnTVABS obXOAe0qLLIHB3+tg7O7btA3BExwtgHNYfyWYNz0vBneIzPEUq8roCczScsPE9pb LHWojY/eNqBZ7ByWHoxVlFly1+sadNH1mx2f17oZJrEH4UIvx60tfC7yOtvrAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUIlasMSoO3ti/089V8X4N0qhKds8wHwYDVR0j BBgwFoAUMdvyxJCLXubT00rk3rgXC+YvI6kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUIzMzNCM0IzMjA5MTc0NzZBOTkxNEJGRkU5RjNFRkE0 QTI3M0UyQ0Y1NDgzN0UwRjdGMjU0MjY5OUM1OEFCLzAvMzFEQkYyQzQ5MDhCNUVF NkQzRDM0QUU0REVCODE3MEJFNjJGMjNBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMURCRjJDNDkwOEI1RUU2RDNE MzRBRTRERUI4MTcwQkU2MkYyM0E5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFCMzMzQjNCMzIwOTE3NDc2QTk5MTRCRkZFOUYzRUZBNEEyNzNFMkNG NTQ4MzdFMEY3RjI1NDI2OTlDNThBQi8wLzMyMzgzMDMzM2E2MzMzMzkzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzEzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDw5Aw DQYJKoZIhvcNAQELBQADggEBAI4OLN5ELbGDy8HXwd5nEFryUuwd085G3S4/w0Uy NnI1j6QmVtB6Rjm8wAO2oGV69sfmVN6T3IhUuzQvX96zpdHGC8IdOIJVcC4KCvpC bK8/WDdn5YHV1P1b7mheo3za4PJ2mb6n8c7kZNpOzmUA4aicS4vqJavCzNKP6P3i OVcutow5RcirQv3vi9qbWQe1ilPCcWKg+Uw4pePPaxAvCK7lXwxMtU3yFFz6SoCv 4OamyIuWY53zo+3M/+F1we7+wIOIAREpd2C5D2aclwz8PYHe+3KumXAmSzmjgeqo BREKsSB/wfpLTX8Z845hXLBXtyF7AtssIEA5sThYweoZWqk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:29:27 2026 by rpki-client