This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa File: 323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa (raw, json) Hash identifier: owzUTZ7xFbo0B98QGCNAFj0LnhZpVzZgaKtEf0jjv54= Subject key identifier: BF:67:43:D9:DD:A2:02:8D:5E:E0:6D:5C:F7:CC:57:0B:94:09:3B:BE Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C Certificate serial: 283827C462A9F5F4E3855989A7C2EADD3F59D6F1 Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa Signing time: Tue 06 Jan 2026 20:48:45 +0000 ROA not before: Tue 06 Jan 2026 20:43:45 +0000 ROA not after: Tue 05 Jan 2027 20:48:45 +0000 asID: 27951 IP address blocks: 2800:490:e000::/39 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:38:27:c4:62:a9:f5:f4:e3:85:59:89:a7:c2:ea:dd:3f:59:d6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C Validity Not Before: Jan 6 20:43:45 2026 GMT Not After : Jan 5 20:48:45 2027 GMT Subject: CN=BF6743D9DDA2028D5EE06D5CF7CC570B94093BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:0e:62:72:8e:de:f7:ce:a4:f6:96:a3:6f: 14:f0:fb:84:84:e8:09:1e:d8:52:7d:95:cd:dd:7c: ac:11:1d:0d:9b:ae:ce:ac:f2:14:b9:73:85:fd:c3: 31:bb:8f:de:62:a3:3e:da:45:e2:2f:84:0f:61:15: fa:f4:7b:93:65:90:2b:79:6c:ab:22:8d:d9:52:44: 4c:7b:7d:e3:00:bf:9e:42:b3:f1:8e:7f:74:bb:a5: 88:3b:a5:f3:de:ac:39:d9:5f:57:fc:64:62:df:37: a5:a9:5d:f5:3d:00:5d:b4:67:2f:23:e8:e4:f9:58: e7:bd:2e:fc:41:ec:40:82:db:9f:10:6d:8e:f6:97: e0:e7:7f:34:0d:3a:0d:15:4d:a8:d7:ab:d7:15:36: 20:94:68:65:4d:a1:a4:d2:0c:14:67:dd:ab:73:18: 32:f3:2e:59:78:94:8d:c4:8d:47:1b:e2:f6:f4:9b: 54:d6:1a:34:43:c3:e2:41:4a:6e:54:65:9e:00:79: 8b:08:b8:61:57:25:fa:ac:86:48:21:c3:44:82:5e: 52:7b:2e:d1:fc:1d:22:4a:96:f1:08:97:45:54:3a: da:51:d5:53:aa:2e:66:7a:2a:d1:f7:31:e5:fb:0a: 51:89:aa:ee:5a:0e:40:98:78:6a:3e:10:9d:d5:2d: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:67:43:D9:DD:A2:02:8D:5E:E0:6D:5C:F7:CC:57:0B:94:09:3B:BE X509v3 Authority Key Identifier: keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a3a2f33392d3430203d3e203237393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:490:e000::/39 Signature Algorithm: sha256WithRSAEncryption 13:df:1d:cb:c3:ab:dd:c0:ac:5e:e2:53:19:56:96:a7:95:6a: b1:c6:c7:1d:81:32:3f:00:57:76:d7:86:88:a2:fa:2f:63:cd: 8d:0e:62:53:74:5b:41:4e:44:8f:9f:5c:74:93:71:59:20:d7: 9c:67:6e:62:77:9b:71:b5:1c:ad:c2:c9:a9:54:2b:2c:1d:df: f1:6a:84:38:8e:c3:c7:96:ad:31:eb:b9:48:22:b1:d6:d7:c1: 3a:3a:15:c3:b3:02:7b:51:d9:d5:7d:88:e1:36:10:bc:4c:29: 12:92:23:f7:c9:f0:28:23:a3:f1:64:74:b1:26:51:80:b6:b5: f3:91:8e:00:78:80:71:13:24:72:01:89:56:a1:33:5b:dc:d7: 7a:db:32:df:b1:ae:6b:33:77:9d:c7:4a:07:38:fa:c4:e9:3f: 35:b2:b9:71:90:f7:9a:20:65:f4:d1:36:18:c3:d6:f8:a9:1b: 88:87:97:cf:cc:15:ae:cf:aa:92:d6:fa:07:26:f9:af:64:ec: af:2f:80:fb:31:de:4d:e9:7b:47:d0:ec:9f:b5:19:3e:5e:25: 53:69:23:67:ce:fa:2a:4e:e9:62:29:92:7f:3b:10:82:a1:7f: 73:1c:72:b4:42:ef:73:c8:13:52:a6:64:ee:4e:60:d8:78:0c: a9:8c:4c:d7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKDgnxGKp9fTjhVmJp8Lq3T9Z1vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF QTI3QjU3QzAeFw0yNjAxMDYyMDQzNDVaFw0yNzAxMDUyMDQ4NDVaMDMxMTAvBgNV BAMTKEJGNjc0M0Q5RERBMjAyOEQ1RUUwNkQ1Q0Y3Q0M1NzBCOTQwOTNCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPQ5ico7e986k9pajbxTw+4SE 6Ake2FJ9lc3dfKwRHQ2brs6s8hS5c4X9wzG7j95ioz7aReIvhA9hFfr0e5NlkCt5 bKsijdlSREx7feMAv55Cs/GOf3S7pYg7pfPerDnZX1f8ZGLfN6WpXfU9AF20Zy8j 6OT5WOe9LvxB7ECC258QbY72l+DnfzQNOg0VTajXq9cVNiCUaGVNoaTSDBRn3atz GDLzLll4lI3EjUcb4vb0m1TWGjRDw+JBSm5UZZ4AeYsIuGFXJfqshkghw0SCXlJ7 LtH8HSJKlvEIl0VUOtpR1VOqLmZ6KtH3MeX7ClGJqu5aDkCYeGo+EJ3VLU+TAgMB AAGjggLQMIICzDAdBgNVHQ4EFgQUv2dD2d2iAo1e4G1c98xXC5QJO74wHwYDVR0j BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2 MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1 MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5 MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMyMzgzMDMwM2EzNDM5MzAzYTY1MzAz MDMwM2EzYTJmMzMzOTJkMzQzMDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG ASgABJDgMA0GCSqGSIb3DQEBCwUAA4IBAQAT3x3Lw6vdwKxe4lMZVpanlWqxxscd gTI/AFd214aIovovY82NDmJTdFtBTkSPn1x0k3FZINecZ25id5txtRytwsmpVCss Hd/xaoQ4jsPHlq0x67lIIrHW18E6OhXDswJ7UdnVfYjhNhC8TCkSkiP3yfAoI6Px ZHSxJlGAtrXzkY4AeIBxEyRyAYlWoTNb3Nd62zLfsa5rM3edx0oHOPrE6T81srlx kPeaIGX00TYYw9b4qRuIh5fPzBWuz6qS1voHJvmvZOyvL4D7Md5N6XtH0OyftRk+ XiVTaSNnzvoqTuliKZJ/OxCCoX9zHHK0Qu9zyBNSpmTuTmDYeAypjEzX -----END CERTIFICATE-----Generated at Sun Jan 25 13:18:21 2026 by rpki-client