This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa File: 323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa (raw, json) Hash identifier: TFe1jdtKEimhjLDrZS2R2V8BymMDgplQ67WSq14Dafw= Subject key identifier: 93:09:45:34:23:94:B3:DA:CE:66:FC:B2:2A:3B:D2:7D:72:E1:A8:E5 Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D Certificate serial: 3302BA850FEA89853F80DA9C3F0640666589AD78 Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa Signing time: Wed 31 Dec 2025 15:56:52 +0000 ROA not before: Wed 31 Dec 2025 15:51:52 +0000 ROA not after: Wed 30 Dec 2026 15:56:52 +0000 asID: 270088 IP address blocks: 2803:bbe0:1b00::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 20:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:ba:85:0f:ea:89:85:3f:80:da:9c:3f:06:40:66:65:89:ad:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D Validity Not Before: Dec 31 15:51:52 2025 GMT Not After : Dec 30 15:56:52 2026 GMT Subject: CN=930945342394B3DACE66FCB22A3BD27D72E1A8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:69:cb:06:d2:88:d9:58:26:c9:1f:23:88: ee:b8:cb:84:8e:0c:ce:a3:74:a5:b7:34:2e:44:fb: c5:b5:ee:cd:ea:28:77:ae:30:69:12:5e:b4:a2:c6: f1:9e:a3:b4:86:55:00:07:60:9b:61:6b:9d:ac:72: a2:7c:84:44:21:9e:d3:11:cb:a5:d2:32:de:ca:20: f0:d1:f8:1a:d7:72:24:13:d7:39:dc:ff:e7:74:f8: 25:9c:9e:5a:97:b7:76:6b:ea:fc:22:8f:7a:5e:39: 0e:d2:13:73:10:f6:9f:5c:a4:c5:56:ee:f8:8f:43: 76:3f:14:98:2d:2f:af:d3:68:82:fc:76:74:e0:5f: 36:0f:2a:65:6c:9f:e2:af:21:a4:da:21:5a:2c:84: 56:f3:5a:90:2e:af:20:8d:5e:46:7a:7b:f0:4c:b0: af:b3:96:24:48:13:f1:04:b3:5c:af:a0:a3:be:d2: 8d:5f:80:85:89:9e:37:de:f5:91:ea:ae:38:be:e6: d0:40:33:b6:e4:40:a4:ee:87:45:e8:d0:bf:60:95: fb:9e:9d:c2:1f:12:3a:bd:10:9d:81:c3:d2:36:02: 86:8a:d8:1f:60:7c:09:69:e1:0d:ab:98:a3:53:98: f6:29:78:66:3d:21:82:4b:12:c2:ad:67:ee:a6:d7: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:09:45:34:23:94:B3:DA:CE:66:FC:B2:2A:3B:D2:7D:72:E1:A8:E5 X509v3 Authority Key Identifier: keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bbe0:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 27:97:44:ac:75:63:7f:85:94:a1:09:17:0d:aa:68:4a:1a:30: a2:aa:d9:fb:02:86:a0:1e:2b:3c:e4:39:a8:53:35:ac:ac:7d: 2d:cc:78:fc:de:ae:bb:29:22:ec:6a:7c:21:b4:91:c2:24:56: c8:97:c4:eb:a4:99:aa:a4:da:af:40:2f:a4:54:cb:32:fd:4b: f0:1a:ac:9a:48:fd:bb:a8:86:80:c4:b8:73:a1:35:08:19:ac: 6c:33:85:45:04:27:84:50:96:a7:49:0e:55:dc:59:46:50:1e: 2d:bc:42:a7:94:65:c6:fa:7b:ca:21:37:f9:06:6f:0a:ab:30: 04:14:9f:99:c7:fc:1f:24:9e:1c:9d:84:19:a4:62:0d:b9:2e: 50:50:6e:fd:c5:33:37:0f:da:00:04:91:b9:43:9d:c9:59:11: fc:92:d1:50:8c:c8:8c:1a:79:52:b3:74:39:a2:22:50:d2:5b: 7b:2d:a2:b6:93:4a:22:fd:fd:1c:b2:4e:13:e1:fd:de:cf:05: 96:33:e4:a8:28:4d:a4:55:26:18:64:47:8c:dd:43:b3:2d:60: 84:19:45:cf:6c:fc:bc:d6:9f:f4:2b:ca:29:f6:55:7c:56:e8: 6e:7b:b9:3b:08:92:c9:0a:f7:d4:03:54:42:0b:26:38:cf:b6: 73:3d:f1:55 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUMwK6hQ/qiYU/gNqcPwZAZmWJrXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBQTJFNEQzQzdDREY5NjI2RDMzMUFDRDM4RDE3MTlG M0Q0QTcyRDAeFw0yNTEyMzExNTUxNTJaFw0yNjEyMzAxNTU2NTJaMDMxMTAvBgNV BAMTKDkzMDk0NTM0MjM5NEIzREFDRTY2RkNCMjJBM0JEMjdENzJFMUE4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRd2nLBtKI2VgmyR8jiO64y4SO DM6jdKW3NC5E+8W17s3qKHeuMGkSXrSixvGeo7SGVQAHYJtha52scqJ8hEQhntMR y6XSMt7KIPDR+BrXciQT1znc/+d0+CWcnlqXt3Zr6vwij3peOQ7SE3MQ9p9cpMVW 7viPQ3Y/FJgtL6/TaIL8dnTgXzYPKmVsn+KvIaTaIVoshFbzWpAuryCNXkZ6e/BM sK+zliRIE/EEs1yvoKO+0o1fgIWJnjfe9ZHqrji+5tBAM7bkQKTuh0Xo0L9glfue ncIfEjq9EJ2Bw9I2AoaK2B9gfAlp4Q2rmKNTmPYpeGY9IYJLEsKtZ+6m1wFPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUkwlFNCOUs9rOZvyyKjvSfXLhqOUwHwYDVR0j BBgwFoAUCKouTTx835Ym0zGs040XGfPUpy0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RDRCQjI0MjFDMjREMTlGMzEyM0IwQzY4MUIwMUFEODJB OTI5NDE1ODJDOURBQkI5NDkzRTA5N0YzRjJGODkzLzAvMDhBQTJFNEQzQzdDREY5 NjI2RDMzMUFDRDM4RDE3MTlGM0Q0QTcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFBMkU0RDNDN0NERjk2MjZE MzMxQUNEMzhEMTcxOUYzRDRBNzJELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEQ0QkIyNDIxQzI0RDE5RjMxMjNCMEM2ODFCMDFBRDgyQTkyOTQxNTgy QzlEQUJCOTQ5M0UwOTdGM0YyRjg5My8wLzMyMzgzMDMzM2E2MjYyNjUzMDNhMzE2 MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzAzMDM4Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA7vgGzANBgkqhkiG9w0BAQsFAAOCAQEAJ5dErHVjf4WUoQkXDapoShow oqrZ+wKGoB4rPOQ5qFM1rKx9Lcx4/N6uuyki7Gp8IbSRwiRWyJfE66SZqqTar0Av pFTLMv1L8Bqsmkj9u6iGgMS4c6E1CBmsbDOFRQQnhFCWp0kOVdxZRlAeLbxCp5Rl xvp7yiE3+QZvCqswBBSfmcf8HySeHJ2EGaRiDbkuUFBu/cUzNw/aAASRuUOdyVkR /JLRUIzIjBp5UrN0OaIiUNJbey2itpNKIv39HLJOE+H93s8FljPkqChNpFUmGGRH jN1Dsy1ghBlFz2z8vNaf9CvKKfZVfFbobnu5OwiSyQr31ANUQgsmOM+2cz3xVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:18:22 2026 by rpki-client