This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/323830333a383238303a3a2f33322d3332203d3e20323634383434.roa File: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (raw, json) Hash identifier: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA= Subject key identifier: EF:C7:9F:7D:DA:04:69:0B:BE:14:91:8E:B1:37:72:92:21:15:4E:3F Certificate issuer: /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC Certificate serial: 3AD094F1CCBA584AEF04623C3886BF4089976A30 Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/323830333a383238303a3a2f33322d3332203d3e20323634383434.roa Signing time: Tue 06 Jan 2026 20:59:01 +0000 ROA not before: Tue 06 Jan 2026 20:54:01 +0000 ROA not after: Tue 05 Jan 2027 20:59:01 +0000 asID: 264844 IP address blocks: 2803:8280::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 09:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:94:f1:cc:ba:58:4a:ef:04:62:3c:38:86:bf:40:89:97:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC Validity Not Before: Jan 6 20:54:01 2026 GMT Not After : Jan 5 20:59:01 2027 GMT Subject: CN=EFC79F7DDA04690BBE14918EB137729221154E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:81:01:99:ca:a2:13:5f:7f:7d:53:40:77: 49:94:32:71:1b:21:de:c3:b5:8a:20:fa:60:c1:bb: fa:5a:92:94:6d:2e:cb:ff:98:4c:a9:0c:1b:37:83: fd:14:46:04:99:e7:6e:46:9d:31:06:93:c3:44:7d: a2:f1:70:8d:dc:31:65:9d:22:03:e6:2c:17:54:66: f0:f0:b4:19:69:e7:09:22:85:bb:9a:ef:4c:ab:9f: 91:f9:1f:d9:15:cd:f3:c0:86:06:fd:1c:12:d0:49: 9b:6c:0e:d6:70:4d:22:f8:6f:2f:1f:fc:45:ab:61: 54:f2:85:f0:b0:58:9e:b1:ef:63:f5:8e:4e:52:35: 7c:fe:eb:f3:68:45:8f:1b:d6:cc:39:76:70:c5:63: 75:b3:fe:d7:7e:f9:e1:8c:6e:56:eb:fa:8d:cc:75: e4:46:a8:a2:41:aa:ba:76:b2:8a:16:8e:3a:58:53: 18:5d:cf:36:8e:c6:e4:fa:4e:10:8b:ed:e5:4f:cd: 44:93:3b:c3:85:56:47:05:b8:17:b0:f7:92:b2:49: 27:df:42:87:6a:43:47:af:ae:ce:a4:7d:80:ee:e8: fa:34:7f:e0:fe:dd:7f:a1:99:e9:70:54:85:99:77: 79:32:3a:29:d8:1f:a2:f2:e6:33:6c:ee:b0:90:22: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:9F:7D:DA:04:69:0B:BE:14:91:8E:B1:37:72:92:21:15:4E:3F X509v3 Authority Key Identifier: keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/323830333a383238303a3a2f33322d3332203d3e20323634383434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8280::/32 Signature Algorithm: sha256WithRSAEncryption 1c:70:64:dd:b5:cb:64:4e:c9:ab:e7:9e:4e:50:40:a5:6c:d8: 19:af:05:af:14:d3:44:d1:55:d4:2a:b6:86:aa:56:c5:8e:cd: b1:8c:96:8d:f5:4e:b7:7d:6b:14:ae:9c:e4:e8:ac:06:ca:60: dc:b7:37:c5:54:52:27:56:a0:bd:84:5c:7a:6c:bd:5b:cf:ad: d3:e2:a1:39:d9:69:88:ca:c1:3f:6f:22:02:b8:52:82:de:51: 5f:2e:a7:ef:e6:56:32:61:5c:50:48:92:67:4c:3f:5c:c6:45: 16:43:97:8c:a0:04:b4:f6:83:c9:1c:3c:f3:2b:57:0b:ae:77: 1c:7b:ed:aa:89:f6:42:05:62:42:47:05:94:03:80:78:04:0e: 34:a3:b7:47:b2:2a:8d:c3:e9:e5:fe:52:7c:18:eb:bc:79:ed: 77:36:f0:21:b7:7e:1a:3f:1a:b2:9b:a0:0d:40:16:57:a3:b0: 0c:23:5e:b9:a5:41:17:1e:1b:6d:a1:6c:ea:7a:e0:7d:0c:a4: 56:f6:a7:b2:35:21:83:e5:5d:4f:1c:50:6a:71:c3:5d:a3:3b: 5a:15:39:b0:bf:ed:2f:83:82:f8:ec:4a:dc:02:67:8c:ec:5b: ab:e4:89:20:bd:1a:80:d9:83:0b:c6:68:ad:57:33:7c:e5:12: 3a:ff:4e:a9 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUOtCU8cy6WErvBGI8OIa/QImXajAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz NjRBNERFQzAeFw0yNjAxMDYyMDU0MDFaFw0yNzAxMDUyMDU5MDFaMDMxMTAvBgNV BAMTKEVGQzc5RjdEREEwNDY5MEJCRTE0OTE4RUIxMzc3MjkyMjExNTRFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CoEBmcqiE19/fVNAd0mUMnEb Id7DtYog+mDBu/pakpRtLsv/mEypDBs3g/0URgSZ525GnTEGk8NEfaLxcI3cMWWd IgPmLBdUZvDwtBlp5wkihbua70yrn5H5H9kVzfPAhgb9HBLQSZtsDtZwTSL4by8f /EWrYVTyhfCwWJ6x72P1jk5SNXz+6/NoRY8b1sw5dnDFY3Wz/td++eGMblbr+o3M deRGqKJBqrp2sooWjjpYUxhdzzaOxuT6ThCL7eVPzUSTO8OFVkcFuBew95KySSff QodqQ0evrs6kfYDu6Po0f+D+3X+hmelwVIWZd3kyOinYH6Ly5jNs7rCQIjszAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU78effdoEaQu+FJGOsTdykiEVTj8wHwYDVR0j BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5 MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2 QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wLzMyMzgzMDMzM2EzODMyMzgzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzQzNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgoAw DQYJKoZIhvcNAQELBQADggEBABxwZN21y2ROyavnnk5QQKVs2BmvBa8U00TRVdQq toaqVsWOzbGMlo31Trd9axSunOTorAbKYNy3N8VUUidWoL2EXHpsvVvPrdPioTnZ aYjKwT9vIgK4UoLeUV8up+/mVjJhXFBIkmdMP1zGRRZDl4ygBLT2g8kcPPMrVwuu dxx77aqJ9kIFYkJHBZQDgHgEDjSjt0eyKo3D6eX+UnwY67x57Xc28CG3fho/GrKb oA1AFlejsAwjXrmlQRceG22hbOp64H0MpFb2p7I1IYPlXU8cUGpxw12jO1oVObC/ 7S+DgvjsStwCZ4zsW6vkiSC9GoDZgwvGaK1XM3zlEjr/Tqk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:55:37 2026 by rpki-client