This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa File: 323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa (raw, json) Hash identifier: hofbhgS1k6QNu2OPcbiPyKToXMdKvQWHaZ1VrO+yjjM= Subject key identifier: B9:C6:B6:C4:95:CF:FE:99:C1:24:54:21:DF:0A:DB:9F:F1:C1:02:31 Certificate issuer: /CN=3FA213F071F512993E71744BA485B170F0449C83 Certificate serial: 591C4C19F8617DA0658C013CD53EC5E2A921D5E6 Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa Signing time: Tue 06 Jan 2026 19:18:09 +0000 ROA not before: Tue 06 Jan 2026 19:13:09 +0000 ROA not after: Tue 05 Jan 2027 19:18:09 +0000 asID: 267893 IP address blocks: 2801:1e:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 18:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:4c:19:f8:61:7d:a0:65:8c:01:3c:d5:3e:c5:e2:a9:21:d5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83 Validity Not Before: Jan 6 19:13:09 2026 GMT Not After : Jan 5 19:18:09 2027 GMT Subject: CN=B9C6B6C495CFFE99C1245421DF0ADB9FF1C10231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:9f:60:46:55:dd:0b:3f:fa:60:59:ec:6b: 90:c8:cf:04:a3:78:58:6e:7f:00:33:0d:be:1e:38: 17:6d:50:cc:75:13:e5:8c:4f:80:fd:42:4b:bc:88: a2:3c:d9:4c:17:d0:be:7e:83:f7:58:be:09:f4:40: 46:a4:f9:e3:ff:d1:8d:6b:4a:7e:c9:56:41:dc:de: e6:46:64:a6:61:4f:92:dc:8e:de:e8:21:72:5a:8c: 39:81:36:c9:a9:cb:2e:eb:e7:5b:18:cc:4d:42:96: 3a:7e:09:20:9e:24:10:f7:92:86:fb:c1:eb:04:f1: 7c:ef:27:38:91:5d:06:53:26:4a:74:f5:ac:fb:2a: f0:ae:2c:61:29:1c:69:d2:4b:0c:12:3b:49:72:91: f2:5b:9c:60:5a:72:7d:36:ed:aa:38:a4:97:4f:4c: 59:23:cd:f0:eb:de:de:4e:0e:98:8a:c0:c8:a2:70: ef:59:b4:77:92:0a:2b:10:12:66:57:ca:6a:7c:a7: 24:70:44:21:3c:e2:45:ae:60:7e:67:3b:c0:de:50: 33:3d:30:84:7c:73:5e:4d:dd:31:1f:31:76:03:72: 55:19:16:34:ae:4c:82:90:77:b1:7e:09:65:4e:79: 8b:81:4d:b5:dd:6a:c3:ce:e8:3c:ae:74:ad:45:52: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C6:B6:C4:95:CF:FE:99:C1:24:54:21:DF:0A:DB:9F:F1:C1:02:31 X509v3 Authority Key Identifier: keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e:3000::/48 Signature Algorithm: sha256WithRSAEncryption a5:ae:2b:d2:d4:59:f4:b7:1e:07:6c:79:a1:b8:ad:80:1c:e0: 11:57:4f:8a:1c:10:9c:70:c3:ec:4d:79:c5:52:f6:ad:c7:7e: 6a:65:b1:02:f9:96:87:9d:e5:73:7a:cf:2b:bd:d8:08:2a:c1: c2:de:95:40:23:2c:24:42:02:50:69:04:21:02:92:26:54:03: ac:ca:d0:19:f2:82:1f:14:be:9a:b1:a3:fc:a7:09:2a:2f:22: e6:ad:00:04:e2:0f:69:a5:61:47:0d:f7:e2:92:6e:60:ac:64: b7:88:26:88:23:76:5a:22:cc:77:80:b3:5c:6c:2b:ac:02:b4: 8e:1f:b7:ef:57:94:7a:54:6c:dc:d0:8f:8a:ad:ab:2b:e4:da: c1:2c:8b:0b:d3:50:97:c4:11:6b:41:cb:a5:b0:f9:c7:f6:15: 44:95:57:07:c6:aa:ea:80:07:4d:76:9e:1f:41:e5:de:08:a6: f7:4e:2d:30:c5:89:11:65:b6:0e:13:be:13:b4:fa:8b:19:73: b6:de:d0:a9:17:04:35:58:e3:66:16:26:85:d3:fc:6d:68:62: d9:ea:e1:5c:08:f3:83:c4:ce:7e:91:75:c3:48:a9:1b:95:74: 48:b4:70:f1:5c:97:0e:b2:aa:b5:0b:0d:8f:18:08:d9:cf:57: 8a:5f:18:64 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUWRxMGfhhfaBljAE81T7F4qkh1eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBMjEzRjA3MUY1MTI5OTNFNzE3NDRCQTQ4NUIxNzBG MDQ0OUM4MzAeFw0yNjAxMDYxOTEzMDlaFw0yNzAxMDUxOTE4MDlaMDMxMTAvBgNV BAMTKEI5QzZCNkM0OTVDRkZFOTlDMTI0NTQyMURGMEFEQjlGRjFDMTAyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXH59gRlXdCz/6YFnsa5DIzwSj eFhufwAzDb4eOBdtUMx1E+WMT4D9Qku8iKI82UwX0L5+g/dYvgn0QEak+eP/0Y1r Sn7JVkHc3uZGZKZhT5Lcjt7oIXJajDmBNsmpyy7r51sYzE1Cljp+CSCeJBD3kob7 wesE8XzvJziRXQZTJkp09az7KvCuLGEpHGnSSwwSO0lykfJbnGBacn027ao4pJdP TFkjzfDr3t5ODpiKwMiicO9ZtHeSCisQEmZXymp8pyRwRCE84kWuYH5nO8DeUDM9 MIR8c15N3TEfMXYDclUZFjSuTIKQd7F+CWVOeYuBTbXdasPO6DyudK1FUlS5AgMB AAGjggLRMIICzTAdBgNVHQ4EFgQUuca2xJXP/pnBJFQh3wrbn/HBAjEwHwYDVR0j BBgwFoAUP6IT8HH1Epk+cXRLpIWxcPBEnIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUZGNDc2OTYzQkVFRUZCQTkyNUU2MDk0QUQ2MUY4RkUx MDhCNUQ0N0YyNDNBN0QyQzYyODhFMjNGQTRGNjY3LzAvM0ZBMjEzRjA3MUY1MTI5 OTNFNzE3NDRCQTQ4NUIxNzBGMDQ0OUM4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkEyMTNGMDcxRjUxMjk5M0U3 MTc0NEJBNDg1QjE3MEYwNDQ5QzgzLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFGRjQ3Njk2M0JFRUVGQkE5MjVFNjA5NEFENjFGOEZFMTA4QjVENDdG MjQzQTdEMkM2Mjg4RTIzRkE0RjY2Ny8wLzMyMzgzMDMxM2EzMTY1M2EzMzMwMzAz MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNzM4MzkzMy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACgBAB4wADANBgkqhkiG9w0BAQsFAAOCAQEApa4r0tRZ9LceB2x5obitgBzgEVdP ihwQnHDD7E15xVL2rcd+amWxAvmWh53lc3rPK73YCCrBwt6VQCMsJEICUGkEIQKS JlQDrMrQGfKCHxS+mrGj/KcJKi8i5q0ABOIPaaVhRw334pJuYKxkt4gmiCN2WiLM d4CzXGwrrAK0jh+371eUelRs3NCPiq2rK+TawSyLC9NQl8QRa0HLpbD5x/YVRJVX B8aq6oAHTXaeH0Hl3gim904tMMWJEWW2DhO+E7T6ixlztt7QqRcENVjjZhYmhdP8 bWhi2erhXAjzg8TOfpF1w0ipG5V0SLRw8VyXDrKqtQsNjxgI2c9Xil8YZA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:41 2026 by rpki-client