This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa File: 323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa (raw, json) Hash identifier: phhYdQjmqPxyb+pXjifpm4juz+k91WAKV8jhgyXx+Qk= Subject key identifier: 82:6B:DD:7D:C9:58:61:66:7B:FA:3F:93:39:57:93:2A:0E:90:5F:AE Certificate issuer: /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Certificate serial: 67D9D60ABD0D9E4379CCC3451CB76318FB7CC35B Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa Signing time: Tue 06 Jan 2026 19:42:35 +0000 ROA not before: Tue 06 Jan 2026 19:37:35 +0000 ROA not after: Tue 05 Jan 2027 19:42:35 +0000 asID: 272822 IP address blocks: 2803:1490:f100::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 10:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:d6:0a:bd:0d:9e:43:79:cc:c3:45:1c:b7:63:18:fb:7c:c3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Validity Not Before: Jan 6 19:37:35 2026 GMT Not After : Jan 5 19:42:35 2027 GMT Subject: CN=826BDD7DC95861667BFA3F933957932A0E905FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:5c:d8:73:cc:ae:3e:de:f3:06:a6:41:cc: 6b:22:b9:09:07:c9:62:53:7a:7f:d6:88:f2:31:ca: a6:cb:a3:67:c1:1f:e7:0d:9c:96:f9:7a:62:10:fa: a7:f1:d7:1c:01:95:7f:a0:78:62:25:eb:92:d8:b4: 10:4d:8d:6e:82:92:66:0a:4c:5d:92:cd:07:33:83: 4e:26:4c:f9:39:40:2a:68:1f:a6:18:01:a6:46:66: db:75:0e:93:da:83:43:3b:d2:af:a9:fd:f1:2a:18: 6a:71:23:97:fd:5c:22:71:bd:8a:79:5f:d6:c3:89: 07:ce:f5:44:87:3d:90:27:24:06:ae:34:45:fa:f3: b9:b3:8e:85:da:af:18:34:03:3c:c4:b1:a3:ce:be: 1b:fd:c0:da:02:a7:7c:54:7a:17:27:fc:b0:9d:92: de:34:94:14:e1:8d:23:a6:ea:f4:51:01:b0:55:b7: 7d:75:27:cd:c4:12:52:57:62:d7:73:bd:11:32:7d: fa:9b:fd:ab:e0:a6:d2:3d:4d:03:8f:42:7e:7f:78: 28:b6:d4:0e:2b:3f:4b:72:f5:73:3e:f7:25:41:55: 3d:a1:e0:e8:ba:80:75:33:0b:e5:18:9b:d1:b9:d6: b8:4d:4c:3b:2b:52:45:b8:0c:ac:bd:54:19:9c:da: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6B:DD:7D:C9:58:61:66:7B:FA:3F:93:39:57:93:2A:0E:90:5F:AE X509v3 Authority Key Identifier: keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1490:f100::/40 Signature Algorithm: sha256WithRSAEncryption 83:b9:63:8c:75:24:a0:42:34:71:87:29:2e:88:a2:18:87:94: ed:cc:ac:00:9b:33:34:94:e4:b2:57:f5:37:30:60:d2:5a:45: 34:2a:94:16:91:fd:5b:95:bb:81:98:a9:7c:dd:0d:9a:01:92: ea:64:98:5c:66:95:c9:a0:12:68:22:73:10:7d:a1:c0:f5:79: b4:af:3a:60:ce:ec:b3:49:51:92:f9:f3:44:7a:c0:8b:cf:24: f5:c7:5e:61:e0:af:0e:cc:13:92:ac:6e:6a:8e:a5:5c:21:11: 55:14:83:a1:b9:91:3a:a6:97:78:d6:1a:7e:38:a8:f9:42:27: e0:f6:e1:77:f5:51:8c:d7:2d:6f:e3:e2:01:83:d5:2f:df:08: 17:5b:a5:c9:01:6f:22:d2:c1:dc:50:ef:4c:1a:5e:63:89:27: 09:b0:c2:89:44:6e:db:9f:3b:ee:8c:ae:b4:ab:8d:82:8e:48: 2d:32:8e:3c:f5:4c:c7:ec:57:34:ab:9b:87:cc:be:4e:6f:a7: b0:b5:ea:a0:36:14:9d:b1:03:7c:f2:da:5d:72:13:15:6f:75: f5:21:47:47:c7:43:05:29:b2:3b:c3:6e:0f:df:e7:37:02:2f: c2:d7:95:31:f5:d2:d1:94:0e:91:bc:25:9e:5c:91:4e:dc:11: 85:c5:0c:0f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZ9nWCr0NnkN5zMNFHLdjGPt8w1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNDNTIwOTZEN0ZGQjIzNUEzREYxODQ5MTBGQTRCNzU0 N0ZFMkQ1NjAeFw0yNjAxMDYxOTM3MzVaFw0yNzAxMDUxOTQyMzVaMDMxMTAvBgNV BAMTKDgyNkJERDdEQzk1ODYxNjY3QkZBM0Y5MzM5NTc5MzJBMEU5MDVGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTnFzYc8yuPt7zBqZBzGsiuQkH yWJTen/WiPIxyqbLo2fBH+cNnJb5emIQ+qfx1xwBlX+geGIl65LYtBBNjW6CkmYK TF2SzQczg04mTPk5QCpoH6YYAaZGZtt1DpPag0M70q+p/fEqGGpxI5f9XCJxvYp5 X9bDiQfO9USHPZAnJAauNEX687mzjoXarxg0AzzEsaPOvhv9wNoCp3xUehcn/LCd kt40lBThjSOm6vRRAbBVt311J83EElJXYtdzvREyffqb/avgptI9TQOPQn5/eCi2 1A4rP0ty9XM+9yVBVT2h4Oi6gHUzC+UYm9G51rhNTDsrUkW4DKy9VBmc2ga9AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUgmvdfclYYWZ7+j+TOVeTKg6QX64wHwYDVR0j BBgwFoAUU8Ugltf/sjWj3xhJEPpLdUf+LVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRUU5NTM3NjcyREIzODk3RjZDQTc4MzYzRkJBOTVFN0ZF NjAyQjlFOTA4ODczRjAxNzk4ODlBMTEyREM2QjlCLzAvNTNDNTIwOTZEN0ZGQjIz NUEzREYxODQ5MTBGQTRCNzU0N0ZFMkQ1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0M1MjA5NkQ3RkZCMjM1QTNE RjE4NDkxMEZBNEI3NTQ3RkUyRDU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkVFOTUzNzY3MkRCMzg5N0Y2Q0E3ODM2M0ZCQTk1RTdGRTYwMkI5RTkw ODg3M0YwMTc5ODg5QTExMkRDNkI5Qi8wLzMyMzgzMDMzM2EzMTM0MzkzMDNhNjYz MTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMyMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxSQ8TANBgkqhkiG9w0BAQsFAAOCAQEAg7ljjHUkoEI0cYcpLoiiGIeU 7cysAJszNJTkslf1NzBg0lpFNCqUFpH9W5W7gZipfN0NmgGS6mSYXGaVyaASaCJz EH2hwPV5tK86YM7ss0lRkvnzRHrAi88k9cdeYeCvDswTkqxuao6lXCERVRSDobmR OqaXeNYafjio+UIn4Pbhd/VRjNctb+PiAYPVL98IF1ulyQFvItLB3FDvTBpeY4kn CbDCiURu25877oyutKuNgo5ILTKOPPVMx+xXNKubh8y+Tm+nsLXqoDYUnbEDfPLa XXITFW919SFHR8dDBSmyO8NuD9/nNwIvwteVMfXS0ZQOkbwlnlyRTtwRhcUMDw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:26:08 2026 by rpki-client