This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa File: 323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa (raw, json) Hash identifier: 8eiTt1mufUp0mAfhsUinZkzahMnI/ILyNspVORJ3E98= Subject key identifier: 3E:48:E1:02:BB:6D:62:85:9D:92:92:9E:E9:9D:33:95:17:BF:15:5D Certificate issuer: /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Certificate serial: 6D04D4B28136EF575B4C503751A7335E8859C78A Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa Signing time: Tue 06 Jan 2026 20:52:39 +0000 ROA not before: Tue 06 Jan 2026 20:47:39 +0000 ROA not after: Tue 05 Jan 2027 20:52:39 +0000 asID: 265671 IP address blocks: 2803:7ec0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:d4:b2:81:36:ef:57:5b:4c:50:37:51:a7:33:5e:88:59:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Validity Not Before: Jan 6 20:47:39 2026 GMT Not After : Jan 5 20:52:39 2027 GMT Subject: CN=3E48E102BB6D62859D92929EE99D339517BF155D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:be:28:94:30:04:40:5a:f0:36:77:2d:c8: d3:aa:7c:08:f5:89:d5:bc:3e:a5:2a:0e:b9:32:39: 82:b3:98:1b:b4:3e:09:8d:b9:e4:11:ef:1e:cb:bd: 7a:07:ac:18:66:a8:26:38:c9:b0:83:4a:3c:dc:25: f7:9e:8d:64:c5:e8:64:68:2f:e8:4c:aa:66:85:f2: b0:4b:19:44:f9:45:e1:9a:fa:39:47:3c:7f:73:d8: ce:50:44:49:af:4c:1d:b2:eb:08:1c:92:f6:bf:c3: 33:86:22:97:73:57:06:87:d6:c5:e4:ec:9e:49:c0: 1d:08:20:0a:c8:fe:65:a0:b2:65:33:6d:42:ec:ee: 01:a8:ed:2b:c2:94:14:7f:59:1a:d9:0c:67:d7:d6: d7:da:2a:52:4f:0f:14:b8:59:02:a6:24:75:13:c0: 96:14:6b:1a:cf:74:e5:67:db:4e:30:27:87:f7:ec: 5c:51:e5:4e:c9:ba:98:6b:d3:6d:76:69:c5:91:9f: 14:30:b0:b0:43:d4:02:68:95:1e:34:e3:a5:23:8d: 4e:6e:f1:e8:37:6f:ca:ff:e0:c4:7d:6b:06:02:52: ac:b8:c7:d2:35:94:10:76:55:d8:e5:7f:b0:6e:37: 0f:bc:54:b8:e4:ef:11:24:3d:37:25:71:fc:4e:24: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:48:E1:02:BB:6D:62:85:9D:92:92:9E:E9:9D:33:95:17:BF:15:5D X509v3 Authority Key Identifier: keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7ec0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 78:63:fa:cf:b9:64:64:dd:d7:ed:18:91:e1:3a:28:fd:f2:7e: 72:9d:fd:73:84:20:95:5e:cb:6b:4f:b0:b1:66:c5:69:e6:58: c3:f9:12:8a:b5:10:f5:54:37:98:41:0c:f1:3f:2e:df:d0:16: c5:22:17:ec:a1:c3:31:b3:4f:03:bd:b1:19:e0:ef:0f:8d:88: b3:59:d8:1d:0c:ea:3f:ef:88:8d:d4:47:b1:ce:53:ff:02:9b: 94:aa:b4:48:71:1b:62:e5:c1:44:49:aa:1d:74:f0:b7:41:7a: 6b:d8:88:04:5a:57:17:8a:a9:60:4e:de:3f:3c:c7:45:e4:a4: 71:ab:07:98:b2:8c:a2:41:ea:2f:f4:58:09:b5:79:3d:c8:6f: 7a:6a:cb:a3:c9:c3:64:61:7a:8b:80:b2:d8:f7:90:3c:a0:e5: 7b:62:4e:aa:fc:74:cf:bb:c9:6a:78:f1:55:36:e7:2f:30:fe: 53:04:7b:ba:77:e1:e4:9f:d1:82:83:95:aa:ef:1f:77:ea:36: 0c:45:c7:ad:c2:f6:fc:54:f1:76:2d:d5:15:34:cd:55:4f:bf: 29:5c:60:56:fc:d0:67:f1:41:e0:7a:57:27:1e:cf:3f:2a:05: c8:3f:00:1f:3b:4e:4a:aa:4a:15:fa:e1:b8:56:d6:25:36:97: d9:f3:74:66 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUbQTUsoE271dbTFA3UaczXohZx4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBOTFGRkE2QUU4QTA2Rjk2QTdGMjFCMTcwRjJFMTE2 MjAwRjk3NzAeFw0yNjAxMDYyMDQ3MzlaFw0yNzAxMDUyMDUyMzlaMDMxMTAvBgNV BAMTKDNFNDhFMTAyQkI2RDYyODU5RDkyOTI5RUU5OUQzMzk1MTdCRjE1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCb4olDAEQFrwNnctyNOqfAj1 idW8PqUqDrkyOYKzmBu0PgmNueQR7x7LvXoHrBhmqCY4ybCDSjzcJfeejWTF6GRo L+hMqmaF8rBLGUT5ReGa+jlHPH9z2M5QREmvTB2y6wgckva/wzOGIpdzVwaH1sXk 7J5JwB0IIArI/mWgsmUzbULs7gGo7SvClBR/WRrZDGfX1tfaKlJPDxS4WQKmJHUT wJYUaxrPdOVn204wJ4f37FxR5U7Juphr0212acWRnxQwsLBD1AJolR4046UjjU5u 8eg3b8r/4MR9awYCUqy4x9I1lBB2Vdjlf7BuNw+8VLjk7xEkPTclcfxOJBH5AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUPkjhArttYoWdkpKe6Z0zlRe/FV0wHwYDVR0j BBgwFoAUTKkf+mrooG+Wp/IbFw8uEWIA+XcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RUJCRTE1NzlBQkNCRjJFOEFDNDlEQzdBRDNENEQ5MzJF RkZFRjZBMTgyNEI0MTZGMjg5QThBRjg4MDk3MzAxLzAvNENBOTFGRkE2QUU4QTA2 Rjk2QTdGMjFCMTcwRjJFMTE2MjAwRjk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0E5MUZGQTZBRThBMDZGOTZB N0YyMUIxNzBGMkUxMTYyMDBGOTc3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUVCQkUxNTc5QUJDQkYyRThBQzQ5REM3QUQzRDREOTMyRUZGRUY2QTE4 MjRCNDE2RjI4OUE4QUY4ODA5NzMwMS8wLzMyMzgzMDMzM2EzNzY1NjMzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzNjM3MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA37AEDANBgkqhkiG9w0BAQsFAAOCAQEAeGP6z7lkZN3X7RiR4Too/fJ+ cp39c4QglV7La0+wsWbFaeZYw/kSirUQ9VQ3mEEM8T8u39AWxSIX7KHDMbNPA72x GeDvD42Is1nYHQzqP++IjdRHsc5T/wKblKq0SHEbYuXBREmqHXTwt0F6a9iIBFpX F4qpYE7ePzzHReSkcasHmLKMokHqL/RYCbV5PchvemrLo8nDZGF6i4Cy2PeQPKDl e2JOqvx0z7vJanjxVTbnLzD+UwR7unfh5J/RgoOVqu8fd+o2DEXHrcL2/FTxdi3V FTTNVU+/KVxgVvzQZ/FB4HpXJx7PPyoFyD8AHztOSqpKFfrhuFbWJTaX2fN0Zg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:28:22 2026 by rpki-client