This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa File: 323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa (raw, json) Hash identifier: DRhlsdVcEieHoIiPQNt/4sx2wsKaKgRqYSJZHSaM+1s= Subject key identifier: 11:71:16:ED:E2:CD:E4:B7:47:D1:FA:2B:60:8F:6C:5D:D2:B0:32:AB Certificate issuer: /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Certificate serial: 6CF2D79A0555AC005EEE9343AC1CBB1BD3C12E22 Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa Signing time: Tue 06 Jan 2026 20:52:40 +0000 ROA not before: Tue 06 Jan 2026 20:47:40 +0000 ROA not after: Tue 05 Jan 2027 20:52:40 +0000 asID: 265671 IP address blocks: 2803:7ec0:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f2:d7:9a:05:55:ac:00:5e:ee:93:43:ac:1c:bb:1b:d3:c1:2e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977 Validity Not Before: Jan 6 20:47:40 2026 GMT Not After : Jan 5 20:52:40 2027 GMT Subject: CN=117116EDE2CDE4B747D1FA2B608F6C5DD2B032AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:d9:89:3b:c9:dc:18:78:40:a8:05:fa:40: ec:53:67:14:aa:5d:7e:8d:b0:5c:86:85:ac:fb:90: 68:e2:4b:1b:b7:ce:85:2c:8b:c0:ac:89:10:58:1a: 57:b4:31:21:f3:04:2f:24:f3:6e:ae:49:c0:52:88: ed:b0:bc:3b:49:3d:af:fb:af:33:db:d1:d6:8b:33: 6d:d2:9c:f1:ff:60:5d:16:8c:cd:59:3b:dd:05:44: 12:06:e2:31:b0:e9:83:ed:6f:a4:c2:dd:3d:77:11: 9a:76:36:58:dc:c4:9e:5e:dc:26:76:b4:9e:55:5b: 32:c8:8e:fc:65:c4:9f:15:56:4f:50:2c:05:c5:16: 03:4f:f5:68:47:4e:d2:cb:bc:a8:79:de:1f:4b:cb: 04:19:ae:11:2b:79:5e:40:9e:3f:52:31:22:1c:a7: e5:cf:75:97:47:61:03:66:8b:70:dc:4e:91:17:71: e8:c5:c2:15:5d:f9:0d:ae:33:67:fe:64:94:94:44: 03:bf:fa:df:5d:97:e3:80:20:75:ec:d1:f2:c5:dc: 32:7a:c1:84:1e:ce:a2:30:f0:bc:74:da:3d:0e:a8: 62:bf:fd:56:28:fc:2d:de:85:a6:e3:b4:f1:23:1d: 44:05:b2:b6:e6:21:1b:46:fc:c0:60:4a:50:c7:29: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:16:ED:E2:CD:E4:B7:47:D1:FA:2B:60:8F:6C:5D:D2:B0:32:AB X509v3 Authority Key Identifier: keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7ec0:8000::/36 Signature Algorithm: sha256WithRSAEncryption b7:bf:d2:73:6d:4f:25:21:fa:e4:ad:48:82:39:8b:a8:89:ad: 90:4e:38:71:17:a4:e2:2e:d2:92:86:ea:9b:dc:95:89:bf:63: 98:31:0a:28:20:2f:0a:35:c8:53:a7:ed:84:61:3d:3c:98:7b: b2:56:51:d1:4d:63:95:9b:72:02:4e:a5:98:6f:4e:6a:9a:15: 98:73:a0:34:c3:c0:10:c2:eb:e2:4a:60:f2:f9:56:ae:b7:d4: 86:2b:bb:a1:8d:35:60:af:65:5e:cc:e4:5f:8d:08:24:8f:6c: a1:48:77:30:96:e2:fa:67:1f:4e:23:36:ae:3f:a2:1b:58:ba: db:fb:34:5b:56:44:ff:8d:a3:e5:c2:d6:f8:2c:7f:12:4e:98: a9:d7:d1:e7:2f:51:04:e3:9b:23:f8:d1:a9:bb:7f:55:e2:c8: 94:83:9f:96:e1:25:56:5c:9c:50:40:6c:6a:e9:0c:26:10:8a: 19:e3:cb:23:39:c8:a9:20:62:d5:33:45:f6:7e:51:3b:ed:60: ab:09:88:ce:7a:bb:2f:b0:c1:df:bf:f4:59:d5:d6:23:14:bd: 7f:fc:0d:12:b8:05:ba:b2:54:e5:ca:c8:40:24:c0:bf:2a:88: de:cd:69:ec:9f:06:3e:16:ae:3b:01:05:84:00:e6:fe:ef:8f: ec:1e:aa:cc -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUbPLXmgVVrABe7pNDrBy7G9PBLiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBOTFGRkE2QUU4QTA2Rjk2QTdGMjFCMTcwRjJFMTE2 MjAwRjk3NzAeFw0yNjAxMDYyMDQ3NDBaFw0yNzAxMDUyMDUyNDBaMDMxMTAvBgNV BAMTKDExNzExNkVERTJDREU0Qjc0N0QxRkEyQjYwOEY2QzVERDJCMDMyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCottmJO8ncGHhAqAX6QOxTZxSq XX6NsFyGhaz7kGjiSxu3zoUsi8CsiRBYGle0MSHzBC8k826uScBSiO2wvDtJPa/7 rzPb0daLM23SnPH/YF0WjM1ZO90FRBIG4jGw6YPtb6TC3T13EZp2NljcxJ5e3CZ2 tJ5VWzLIjvxlxJ8VVk9QLAXFFgNP9WhHTtLLvKh53h9LywQZrhEreV5Anj9SMSIc p+XPdZdHYQNmi3DcTpEXcejFwhVd+Q2uM2f+ZJSURAO/+t9dl+OAIHXs0fLF3DJ6 wYQezqIw8Lx02j0OqGK//VYo/C3ehabjtPEjHUQFsrbmIRtG/MBgSlDHKZCrAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUEXEW7eLN5LdH0forYI9sXdKwMqswHwYDVR0j BBgwFoAUTKkf+mrooG+Wp/IbFw8uEWIA+XcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RUJCRTE1NzlBQkNCRjJFOEFDNDlEQzdBRDNENEQ5MzJF RkZFRjZBMTgyNEI0MTZGMjg5QThBRjg4MDk3MzAxLzAvNENBOTFGRkE2QUU4QTA2 Rjk2QTdGMjFCMTcwRjJFMTE2MjAwRjk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0E5MUZGQTZBRThBMDZGOTZB N0YyMUIxNzBGMkUxMTYyMDBGOTc3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUVCQkUxNTc5QUJDQkYyRThBQzQ5REM3QUQzRDREOTMyRUZGRUY2QTE4 MjRCNDE2RjI4OUE4QUY4ODA5NzMwMS8wLzMyMzgzMDMzM2EzNzY1NjMzMDNhMzgz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzNjM3MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA37AgDANBgkqhkiG9w0BAQsFAAOCAQEAt7/Sc21PJSH65K1IgjmLqImt kE44cRek4i7Skobqm9yVib9jmDEKKCAvCjXIU6fthGE9PJh7slZR0U1jlZtyAk6l mG9OapoVmHOgNMPAEMLr4kpg8vlWrrfUhiu7oY01YK9lXszkX40IJI9soUh3MJbi +mcfTiM2rj+iG1i62/s0W1ZE/42j5cLW+Cx/Ek6YqdfR5y9RBOObI/jRqbt/VeLI lIOfluElVlycUEBsaukMJhCKGePLIznIqSBi1TNF9n5RO+1gqwmIznq7L7DB37/0 WdXWIxS9f/wNErgFurJU5crIQCTAvyqI3s1p7J8GPhauOwEFhADm/u+P7B6qzA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:28:31 2026 by rpki-client