This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa File: 323830333a616432303a3a2f33322d3332203d3e20323636373033.roa (raw, json) Hash identifier: PGOV3rE+YHo4Q81NT5y4s2dtEyEL5O+OdEZC9ivDqnA= Subject key identifier: BE:F2:EE:06:7F:6B:68:C7:99:70:64:AC:DF:FB:7B:9C:1F:40:EA:C7 Certificate issuer: /CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7 Certificate serial: 489DCAEF66AA32A8ED292882336D22BCB941B44C Authority key identifier: 4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa Signing time: Tue 06 Jan 2026 20:53:56 +0000 ROA not before: Tue 06 Jan 2026 20:48:56 +0000 ROA not after: Tue 05 Jan 2027 20:53:56 +0000 asID: 266703 IP address blocks: 2803:ad20::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 15:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9d:ca:ef:66:aa:32:a8:ed:29:28:82:33:6d:22:bc:b9:41:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7 Validity Not Before: Jan 6 20:48:56 2026 GMT Not After : Jan 5 20:53:56 2027 GMT Subject: CN=BEF2EE067F6B68C7997064ACDFFB7B9C1F40EAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:ce:d9:d2:13:70:8e:d2:17:a7:63:e5:40: 42:91:9b:6c:71:4a:75:25:2b:41:00:3c:b5:4c:86: d3:f9:6a:12:a2:ed:92:c6:83:89:0b:2c:6e:0f:eb: 64:e5:20:9c:d9:ac:75:d6:88:de:57:aa:4c:27:6c: 55:85:6f:f6:d6:ca:5e:2c:42:bb:46:d5:f0:cf:55: 2e:ca:67:c8:8c:cd:17:b3:01:55:45:f0:51:44:8d: c8:fd:4d:c3:88:76:8a:33:da:37:7c:ef:a9:56:5b: ec:fb:ff:46:16:3a:d5:06:f2:58:d2:a3:c4:ef:a9: 8d:9f:a8:b8:ed:51:db:08:7b:6d:ed:60:bb:16:36: c6:c4:1b:65:cb:a0:39:20:ab:c6:92:51:f9:83:ed: 28:35:84:bb:f8:1a:de:68:5c:15:b5:2a:1f:9a:f2: b5:c9:3a:2b:82:8c:81:b2:47:ff:14:e0:ef:83:71: 5f:02:87:33:ba:2f:2b:1b:0b:59:e9:3c:2e:2b:1e: f2:e4:f4:01:a8:e7:1e:0f:c2:c6:dd:e4:81:cf:1c: 00:25:c0:9c:82:98:51:bf:98:52:01:c3:30:81:8e: d4:85:70:12:0a:77:b6:ea:fc:64:2e:64:9f:b2:0b: 01:18:28:8f:a9:45:cb:45:f6:ba:28:01:82:0e:38: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F2:EE:06:7F:6B:68:C7:99:70:64:AC:DF:FB:7B:9C:1F:40:EA:C7 X509v3 Authority Key Identifier: keyid:4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/323830333a616432303a3a2f33322d3332203d3e20323636373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ad20::/32 Signature Algorithm: sha256WithRSAEncryption 39:6e:ce:fa:8a:94:94:da:2c:9b:ba:51:ae:89:d0:b6:3c:29: 46:f9:bb:9d:0a:fa:cd:06:79:9e:cd:7f:8d:c5:f3:92:e7:98: 6e:96:5e:aa:17:c8:72:fd:f7:37:df:12:af:bb:94:38:4f:84: 7f:13:60:f9:4b:db:fd:0b:9b:b7:5c:b3:7a:7a:8f:bb:72:27: 23:bf:6d:74:43:db:8d:3a:be:dc:d5:ef:94:48:66:35:d0:d0: 4b:e8:2a:a5:d3:d0:f8:60:d9:6a:1e:73:4d:d7:6c:08:65:03: 84:0f:4b:d9:26:17:1a:5f:92:64:7f:1a:52:90:2c:71:d3:79: d3:02:3e:ce:f2:6c:c8:d6:f0:df:e6:88:0a:8f:df:ce:97:8a: 6f:51:bc:a3:ef:0c:16:33:7e:df:f8:72:ec:ed:2d:d1:de:81: 74:e6:4a:91:b0:b4:95:c9:62:ed:91:2e:ae:62:1a:54:8e:69: e3:d2:13:45:bf:71:b4:ee:21:26:d4:05:f9:01:42:ea:b0:1a: 98:92:9e:e5:7a:3c:0b:8a:e1:6d:6c:89:cf:a6:68:4c:18:29: ed:08:bd:aa:52:94:cc:37:04:a4:7f:5b:f4:4a:d1:02:91:00: 4c:a4:f1:ea:a8:4d:31:3f:df:19:19:8c:ab:39:8b:31:b0:87: d9:09:d7:e4 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUSJ3K72aqMqjtKSiCM20ivLlBtEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY4OEJFN0JCOURCMzBEOTVFQjU0RTgyRjhEMDA5NTkx NUMyM0ZCNzAeFw0yNjAxMDYyMDQ4NTZaFw0yNzAxMDUyMDUzNTZaMDMxMTAvBgNV BAMTKEJFRjJFRTA2N0Y2QjY4Qzc5OTcwNjRBQ0RGRkI3QjlDMUY0MEVBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56c7Z0hNwjtIXp2PlQEKRm2xx SnUlK0EAPLVMhtP5ahKi7ZLGg4kLLG4P62TlIJzZrHXWiN5XqkwnbFWFb/bWyl4s QrtG1fDPVS7KZ8iMzRezAVVF8FFEjcj9TcOIdooz2jd876lWW+z7/0YWOtUG8ljS o8TvqY2fqLjtUdsIe23tYLsWNsbEG2XLoDkgq8aSUfmD7Sg1hLv4Gt5oXBW1Kh+a 8rXJOiuCjIGyR/8U4O+DcV8ChzO6LysbC1npPC4rHvLk9AGo5x4Pwsbd5IHPHAAl wJyCmFG/mFIBwzCBjtSFcBIKd7bq/GQuZJ+yCwEYKI+pRctF9rooAYIOODLBAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUvvLuBn9raMeZcGSs3/t7nB9A6scwHwYDVR0j BBgwFoAUT4i+e7nbMNletU6C+NAJWRXCP7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RjQ5OEQzREEzODdBRjBDODI1NzEzMjMzRjIyREI1NUI0 MjdDNDFFQkY4RDE2MDZCQjM1M0U4OTc5REYxQTIyLzAvNEY4OEJFN0JCOURCMzBE OTVFQjU0RTgyRjhEMDA5NTkxNUMyM0ZCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Rjg4QkU3QkI5REIzMEQ5NUVC NTRFODJGOEQwMDk1OTE1QzIzRkI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEY0OThEM0RBMzg3QUYwQzgyNTcxMzIzM0YyMkRCNTVCNDI3QzQxRUJG OEQxNjA2QkIzNTNFODk3OURGMUEyMi8wLzMyMzgzMDMzM2E2MTY0MzIzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzAzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrSAw DQYJKoZIhvcNAQELBQADggEBADluzvqKlJTaLJu6Ua6J0LY8KUb5u50K+s0GeZ7N f43F85LnmG6WXqoXyHL99zffEq+7lDhPhH8TYPlL2/0Lm7dcs3p6j7tyJyO/bXRD 2406vtzV75RIZjXQ0EvoKqXT0Phg2Woec03XbAhlA4QPS9kmFxpfkmR/GlKQLHHT edMCPs7ybMjW8N/miAqP386Xim9RvKPvDBYzft/4cuztLdHegXTmSpGwtJXJYu2R Lq5iGlSOaePSE0W/cbTuISbUBfkBQuqwGpiSnuV6PAuK4W1sic+maEwYKe0IvapS lMw3BKR/W/RK0QKRAEyk8eqoTTE/3xkZjKs5izGwh9kJ1+Q= -----END CERTIFICATE-----Generated at Sun Jan 25 10:04:54 2026 by rpki-client