This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa File: 323830333a646463303a3a2f33322d3332203d3e203237383535.roa (raw, json) Hash identifier: +OgODeOfQjHYJRoJj4wDYc+OJLqVsih+ewIxmF03BhY= Subject key identifier: DD:E3:D2:E5:DC:BC:F5:C3:48:18:C8:9E:14:88:66:7E:0A:2A:89:AD Certificate issuer: /CN=2D9B47B31B2096B35C9794693DF659896A6B49CE Certificate serial: 171762E6C64958CD9808C435FF9FBA6C3D34DE5F Authority key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa Signing time: Tue 06 Jan 2026 19:08:19 +0000 ROA not before: Tue 06 Jan 2026 19:03:19 +0000 ROA not after: Tue 05 Jan 2027 19:08:19 +0000 asID: 27855 IP address blocks: 2803:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 04:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:17:62:e6:c6:49:58:cd:98:08:c4:35:ff:9f:ba:6c:3d:34:de:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE Validity Not Before: Jan 6 19:03:19 2026 GMT Not After : Jan 5 19:08:19 2027 GMT Subject: CN=DDE3D2E5DCBCF5C34818C89E1488667E0A2A89AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:60:91:dc:dc:7a:8c:7e:f4:27:ce:34:10: 28:04:97:a4:2f:9e:05:97:c0:30:83:cc:03:1a:f8: c4:98:8a:b6:d6:b8:d6:15:a8:d7:e4:c7:18:40:d4: cd:5d:cc:45:dd:1a:7f:fa:f9:eb:f7:c4:88:7b:07: 13:dc:c7:d0:93:31:b1:6a:36:96:d7:a9:7b:0f:83: f5:62:df:93:ce:84:3c:88:12:22:24:8c:bc:75:e7: 9b:15:6b:e1:9c:ab:70:5f:e1:e9:71:93:97:48:3d: de:89:93:99:02:70:8a:25:4d:a7:37:5f:c0:20:34: 36:5a:d7:b7:01:ca:b0:24:ce:b3:e4:c2:60:74:15: ec:56:43:8a:cc:6d:a3:19:52:d8:21:21:e5:ac:5c: c8:ec:01:1d:55:ba:ab:35:8f:50:d5:22:29:fa:a1: 80:6c:54:92:90:d5:14:2c:8f:38:46:e2:10:47:fc: e1:19:c6:25:6b:79:0e:8e:b9:2c:ca:4a:fd:4a:81: df:a2:af:f9:c7:ea:ce:49:b8:9c:07:d1:91:d4:ae: 2e:79:7d:b1:a9:2e:cd:a6:7d:07:33:45:89:29:10: 4f:7d:05:a7:fc:9d:b8:4f:58:5a:96:0e:cb:9e:c2: b2:16:cb:d0:de:5f:9a:eb:2c:c0:ac:c2:2d:07:f0: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:D2:E5:DC:BC:F5:C3:48:18:C8:9E:14:88:66:7E:0A:2A:89:AD X509v3 Authority Key Identifier: keyid:2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:20:9b:02:5f:90:25:3c:29:f2:4e:01:4b:96:a3:00:d3:a5: 92:c7:a1:29:5f:36:09:fa:61:11:17:2c:d9:c0:2e:45:02:4d: 2f:8e:5c:e9:f9:b5:e3:1c:a8:69:9a:71:99:27:ba:22:3a:ff: 5f:5c:cb:42:6a:e0:3b:cd:e4:a3:9d:1e:c8:95:21:d5:68:6b: 07:e5:95:91:d0:38:64:97:ed:f2:d5:a3:9c:e4:fb:1d:e3:27: a5:79:ed:4c:e0:a0:20:54:c6:2b:53:50:d1:d3:08:be:9e:c3: fa:c8:71:c3:73:3c:07:2f:d8:ea:e1:d0:d5:96:30:a0:33:3c: a3:94:38:ef:6f:e9:38:f6:d4:f5:11:82:10:da:ac:69:fc:84: 74:2e:c5:92:30:c7:0b:74:a8:70:b0:17:49:f6:02:f2:9d:5d: 6c:92:e7:12:77:68:27:83:0c:e8:a4:d6:1c:95:d3:d3:71:ec: 0d:75:d6:c7:ea:ee:3d:12:3d:05:4a:ba:dd:51:22:bb:aa:8f: 04:81:0c:64:ae:6d:56:77:65:2e:12:3c:74:73:e7:37:8d:02: b4:68:f7:3d:0b:22:c9:c6:e7:09:e8:77:1f:ec:9e:c2:36:af: 7c:82:5d:dd:70:0b:89:bc:b9:ce:ef:73:18:d9:4d:93:6c:40: ee:e4:d2:a1 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUFxdi5sZJWM2YCMQ1/5+6bD003l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5QjQ3QjMxQjIwOTZCMzVDOTc5NDY5M0RGNjU5ODk2 QTZCNDlDRTAeFw0yNjAxMDYxOTAzMTlaFw0yNzAxMDUxOTA4MTlaMDMxMTAvBgNV BAMTKERERTNEMkU1RENCQ0Y1QzM0ODE4Qzg5RTE0ODg2NjdFMEEyQTg5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydGCR3Nx6jH70J840ECgEl6Qv ngWXwDCDzAMa+MSYirbWuNYVqNfkxxhA1M1dzEXdGn/6+ev3xIh7BxPcx9CTMbFq NpbXqXsPg/Vi35POhDyIEiIkjLx155sVa+Gcq3Bf4elxk5dIPd6Jk5kCcIolTac3 X8AgNDZa17cByrAkzrPkwmB0FexWQ4rMbaMZUtghIeWsXMjsAR1Vuqs1j1DVIin6 oYBsVJKQ1RQsjzhG4hBH/OEZxiVreQ6OuSzKSv1Kgd+ir/nH6s5JuJwH0ZHUri55 fbGpLs2mfQczRYkpEE99Baf8nbhPWFqWDsuewrIWy9DeX5rrLMCswi0H8L/rAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQU3ePS5dy89cNIGMieFIhmfgoqia0wHwYDVR0j BBgwFoAULZtHsxsglrNcl5RpPfZZiWprSc4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CODgyMUE1RjA2RTgwMzZFOUUxQUUwREZFMDI3RUU2MDc2 RDcyRENDNkJDMjY1NUVBM0JGREQ2Mjc0RkFEN0U0LzAvMkQ5QjQ3QjMxQjIwOTZC MzVDOTc5NDY5M0RGNjU5ODk2QTZCNDlDRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDlCNDdCMzFCMjA5NkIzNUM5 Nzk0NjkzREY2NTk4OTZBNkI0OUNFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjg4MjFBNUYwNkU4MDM2RTlFMUFFMERGRTAyN0VFNjA3NkQ3MkRDQzZC QzI2NTVFQTNCRkRENjI3NEZBRDdFNC8wLzMyMzgzMDMzM2E2NDY0NjMzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczODM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA93AMA0G CSqGSIb3DQEBCwUAA4IBAQAqIJsCX5AlPCnyTgFLlqMA06WSx6EpXzYJ+mERFyzZ wC5FAk0vjlzp+bXjHKhpmnGZJ7oiOv9fXMtCauA7zeSjnR7IlSHVaGsH5ZWR0Dhk l+3y1aOc5Psd4yelee1M4KAgVMYrU1DR0wi+nsP6yHHDczwHL9jq4dDVljCgMzyj lDjvb+k49tT1EYIQ2qxp/IR0LsWSMMcLdKhwsBdJ9gLynV1skucSd2gngwzopNYc ldPTcewNddbH6u49Ej0FSrrdUSK7qo8EgQxkrm1Wd2UuEjx0c+c3jQK0aPc9CyLJ xucJ6Hcf7J7CNq98gl3dcAuJvLnO73MY2U2TbEDu5NKh -----END CERTIFICATE-----Generated at Sun Jan 25 10:02:11 2026 by rpki-client