This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa File: 323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa (raw, json) Hash identifier: mv4B0TTGLxVez3xtXfp5+SNt92jYsE4kb2W6td4+VjI= Subject key identifier: 43:DD:DE:EA:E6:53:4B:2E:11:8D:D8:DA:70:5E:5A:C6:23:A4:5D:C1 Certificate issuer: /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85 Certificate serial: 6F5BC20E8E08E6E7581DFD4BCF4F1F7AA2318E9A Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa Signing time: Tue 06 Jan 2026 19:08:17 +0000 ROA not before: Tue 06 Jan 2026 19:03:17 +0000 ROA not after: Tue 05 Jan 2027 19:08:17 +0000 asID: 262220 IP address blocks: 2803:6700:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5b:c2:0e:8e:08:e6:e7:58:1d:fd:4b:cf:4f:1f:7a:a2:31:8e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85 Validity Not Before: Jan 6 19:03:17 2026 GMT Not After : Jan 5 19:08:17 2027 GMT Subject: CN=43DDDEEAE6534B2E118DD8DA705E5AC623A45DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:53:10:fb:02:2c:b4:34:cf:7c:60:5b:b4: 3c:5b:19:e8:b5:a9:33:74:fa:93:52:c2:8d:3e:d6: 8f:90:e0:92:42:25:5b:cc:c5:15:55:f7:ae:1d:80: 0c:3e:c8:d2:55:70:a8:1a:1f:67:54:8c:a0:48:0f: 8d:88:3f:e8:3f:84:82:f3:9b:5e:f9:f4:fa:06:c6: 33:e0:ef:be:3a:7c:b3:9e:7f:7d:67:3a:e8:2b:1d: d0:15:de:46:bf:5c:8a:67:91:82:3e:55:1a:f2:5a: 69:09:81:00:d3:bd:fa:3b:43:14:12:bc:25:27:2b: 87:02:59:6c:c7:aa:8d:0f:fa:3a:46:d5:99:54:4f: fb:be:a2:f8:1f:f2:55:7b:73:60:e6:ef:5b:a4:b9: 52:d4:90:05:73:3e:21:56:d3:6c:64:a4:4a:15:89: c0:a7:75:fa:6b:bf:9a:e6:dd:7b:92:fc:85:14:a0: 5c:44:62:56:96:41:8c:1c:25:a4:b3:86:3c:32:e8: ce:c6:35:59:ea:3f:9e:4f:96:53:60:6b:be:f3:e3: 57:d1:88:05:80:4a:0f:c5:e3:8d:a0:c2:a8:f8:6e: 04:0f:2b:4a:27:6d:91:f9:2f:e7:55:8d:de:62:e9: bf:5a:2d:fb:8f:75:2c:f2:3e:a5:4e:d3:dd:9d:cb: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DD:DE:EA:E6:53:4B:2E:11:8D:D8:DA:70:5E:5A:C6:23:A4:5D:C1 X509v3 Authority Key Identifier: keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6700:3000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:66:af:17:51:de:5f:e4:e1:b5:96:76:33:92:be:e3:d1:7f: 3f:69:86:db:39:61:7a:f2:7f:ab:55:89:2b:99:20:04:f4:d3: e4:78:c1:50:d6:33:d1:ec:ee:a7:3b:8e:3b:2a:94:81:85:c5: 3a:4f:0f:22:d7:bf:95:12:05:a5:89:35:2b:5d:27:d7:cb:a6: 30:a7:f2:09:2b:a4:8a:fa:26:05:a5:39:58:f9:23:24:5c:d2: f1:89:30:51:9c:dd:35:53:54:85:e5:cc:e1:4a:82:2e:db:89: f6:ba:f6:ad:5d:38:2a:d8:34:42:88:bc:31:9a:47:8b:be:a1: 88:24:e9:fe:df:ec:65:66:d9:5f:1f:97:41:2b:72:c1:fc:b3: 25:87:60:11:93:41:b9:32:10:0e:a4:30:ce:1d:01:15:37:f1: 2b:55:c5:d8:5b:61:46:ca:db:30:5a:6c:6e:b5:f9:1b:78:dd: de:d2:b3:86:16:a0:cb:05:c0:f7:b6:dc:d7:34:6f:45:86:d5: f1:14:d8:44:c1:71:6b:b7:9c:4f:64:dc:60:af:03:18:6d:00: 3f:11:9a:44:4e:b6:5b:c1:82:ac:bb:d2:be:7f:e2:67:d6:0e: 66:37:a2:48:a0:5f:81:de:00:21:86:98:59:b7:8f:3a:5a:3c: f8:b2:df:83 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUb1vCDo4I5udYHf1Lz08feqIxjpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODNDQTExMzNCRjkwRDJFQjJDQzUyQ0UxRTA4MDQ4 MDNCMEM4NTAeFw0yNjAxMDYxOTAzMTdaFw0yNzAxMDUxOTA4MTdaMDMxMTAvBgNV BAMTKDQzRERERUVBRTY1MzRCMkUxMThERDhEQTcwNUU1QUM2MjNBNDVEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxVMQ+wIstDTPfGBbtDxbGei1 qTN0+pNSwo0+1o+Q4JJCJVvMxRVV964dgAw+yNJVcKgaH2dUjKBID42IP+g/hILz m1759PoGxjPg7746fLOef31nOugrHdAV3ka/XIpnkYI+VRryWmkJgQDTvfo7QxQS vCUnK4cCWWzHqo0P+jpG1ZlUT/u+ovgf8lV7c2Dm71ukuVLUkAVzPiFW02xkpEoV icCndfprv5rm3XuS/IUUoFxEYlaWQYwcJaSzhjwy6M7GNVnqP55PllNga77z41fR iAWASg/F442gwqj4bgQPK0onbZH5L+dVjd5i6b9aLfuPdSzyPqVO092dy7r/AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUQ93e6uZTSy4RjdjacF5axiOkXcEwHwYDVR0j BBgwFoAUJCg8oRM7+Q0ussxSzh4IBIA7DIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNUMxQ0Y0ODc1NDU1OUZEODk2QTEwRUM4MDJCNzk3QTJB ODYzRkVBQTg1RkMxNzlGNDEwQjU5QTMzMDQ0Q0VDLzAvMjQyODNDQTExMzNCRjkw RDJFQjJDQzUyQ0UxRTA4MDQ4MDNCMEM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDI4M0NBMTEzM0JGOTBEMkVC MkNDNTJDRTFFMDgwNDgwM0IwQzg1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjVDMUNGNDg3NTQ1NTlGRDg5NkExMEVDODAyQjc5N0EyQTg2M0ZFQUE4 NUZDMTc5RjQxMEI1OUEzMzA0NENFQy8wLzMyMzgzMDMzM2EzNjM3MzAzMDNhMzMz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzIzMjMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA2cAMDANBgkqhkiG9w0BAQsFAAOCAQEAC2avF1HeX+ThtZZ2M5K+49F/ P2mG2zlhevJ/q1WJK5kgBPTT5HjBUNYz0ezupzuOOyqUgYXFOk8PIte/lRIFpYk1 K10n18umMKfyCSukivomBaU5WPkjJFzS8YkwUZzdNVNUheXM4UqCLtuJ9rr2rV04 Ktg0Qoi8MZpHi76hiCTp/t/sZWbZXx+XQStywfyzJYdgEZNBuTIQDqQwzh0BFTfx K1XF2FthRsrbMFpsbrX5G3jd3tKzhhagywXA97bc1zRvRYbV8RTYRMFxa7ecT2Tc YK8DGG0APxGaRE62W8GCrLvSvn/iZ9YOZjeiSKBfgd4AIYaYWbePOlo8+LLfgw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:59:48 2026 by rpki-client