This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa File: 323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa (raw, json) Hash identifier: WZqwuGQOOsbd+9p0ZJ3B+S6JrkgPUSSOlnR1tyEm89o= Subject key identifier: 97:BE:A8:64:0E:E1:4B:12:5A:86:66:26:F2:67:F7:BF:85:73:1B:B1 Certificate issuer: /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Certificate serial: 0D1290F8A890BBF27E446460D84C7D0831D3B1B8 Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa Signing time: Tue 06 Jan 2026 19:42:34 +0000 ROA not before: Tue 06 Jan 2026 19:37:34 +0000 ROA not after: Tue 05 Jan 2027 19:42:34 +0000 asID: 272822 IP address blocks: 2803:1490:f200::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 10:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:12:90:f8:a8:90:bb:f2:7e:44:64:60:d8:4c:7d:08:31:d3:b1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Validity Not Before: Jan 6 19:37:34 2026 GMT Not After : Jan 5 19:42:34 2027 GMT Subject: CN=97BEA8640EE14B125A866626F267F7BF85731BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:56:42:98:1a:7a:90:44:02:0c:11:84:72: 3b:2f:6c:03:43:08:2a:27:31:97:74:1c:75:c9:83: d2:c6:11:f3:43:62:f5:d2:05:4d:c0:0f:e6:dd:a1: 78:cf:d7:b7:5b:00:5e:48:46:31:44:a9:2d:21:85: fe:e7:86:1a:9d:ca:bf:0f:11:a7:30:dc:56:48:c7: 40:fc:4f:b9:0c:23:9e:23:06:ef:13:01:c3:00:d7: db:25:b0:3c:36:ed:0d:81:e5:0f:d2:55:94:11:ca: 93:48:fa:83:64:11:d7:f8:c8:a1:6f:08:73:96:32: d7:46:c0:f8:65:ac:5a:ca:ac:15:52:c9:8d:51:0e: 14:3f:20:14:94:c8:c8:8e:be:d9:5a:c9:ae:97:b7: 30:b8:af:08:44:ff:f0:5d:3a:20:14:8a:22:dc:d5: a4:2c:84:97:14:f7:b0:20:87:31:0b:ee:bf:f3:42: 34:f0:8b:b8:a4:62:c2:0a:16:72:59:72:02:d8:3b: 43:47:43:32:96:9e:a6:d4:0a:f8:74:b6:03:3b:65: 7a:e5:78:bf:1e:e6:e9:b2:85:a4:84:45:9c:c2:54: f6:14:1b:d0:fb:fc:1d:2b:f7:85:a1:e6:e0:d2:a3: 88:96:ca:97:42:36:e1:40:a4:75:46:f0:65:97:0d: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BE:A8:64:0E:E1:4B:12:5A:86:66:26:F2:67:F7:BF:85:73:1B:B1 X509v3 Authority Key Identifier: keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1490:f200::/40 Signature Algorithm: sha256WithRSAEncryption 55:e7:79:7c:69:a8:c5:b2:5d:c9:b5:3d:9d:c9:8e:af:6c:2a: 8b:2b:16:0b:6b:5d:2b:5b:69:53:57:4b:b0:4a:34:11:de:2f: 95:67:2d:52:80:d1:7c:f8:0e:01:89:65:d1:b2:bb:7c:2f:fb: 87:b3:30:26:7d:2c:5d:a8:d5:06:f8:7d:17:29:89:5e:3c:1f: 4a:8b:52:bc:59:a5:74:f0:e3:fa:b0:73:60:e5:c7:f8:75:96: c4:07:74:b8:69:d0:6a:a9:77:93:1b:72:1a:37:ae:fd:d1:08: 2d:d8:21:1c:2b:f2:55:aa:1e:69:cb:98:ea:ff:ea:16:ea:a7: 8d:ed:9b:c9:cd:bf:7e:7d:6c:20:61:c8:43:f3:06:4a:ac:86: 67:d9:2b:13:2f:b9:ea:6d:2a:ed:f7:71:5e:74:b6:1f:04:c3: f7:31:01:98:ed:c6:1e:2a:d1:49:ec:40:29:fb:80:e1:6c:e8: 28:64:3b:e1:aa:4d:ff:e8:70:f0:fc:48:a4:5f:32:34:43:c6: ef:57:be:d1:bd:49:52:ca:f8:7d:af:66:04:d2:bb:9f:ef:5d: 9d:77:63:b5:3c:59:77:5f:27:ff:85:6b:e7:53:d7:c5:e4:2f: ca:3d:ac:d5:76:af:4a:75:d3:40:6c:51:52:5a:31:52:c5:5a: 70:15:4d:39 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUDRKQ+KiQu/J+RGRg2Ex9CDHTsbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNDNTIwOTZEN0ZGQjIzNUEzREYxODQ5MTBGQTRCNzU0 N0ZFMkQ1NjAeFw0yNjAxMDYxOTM3MzRaFw0yNzAxMDUxOTQyMzRaMDMxMTAvBgNV BAMTKDk3QkVBODY0MEVFMTRCMTI1QTg2NjYyNkYyNjdGN0JGODU3MzFCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCVZCmBp6kEQCDBGEcjsvbAND CConMZd0HHXJg9LGEfNDYvXSBU3AD+bdoXjP17dbAF5IRjFEqS0hhf7nhhqdyr8P Eacw3FZIx0D8T7kMI54jBu8TAcMA19slsDw27Q2B5Q/SVZQRypNI+oNkEdf4yKFv CHOWMtdGwPhlrFrKrBVSyY1RDhQ/IBSUyMiOvtlaya6XtzC4rwhE//BdOiAUiiLc 1aQshJcU97AghzEL7r/zQjTwi7ikYsIKFnJZcgLYO0NHQzKWnqbUCvh0tgM7ZXrl eL8e5umyhaSERZzCVPYUG9D7/B0r94Wh5uDSo4iWypdCNuFApHVG8GWXDXS1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUl76oZA7hSxJahmYm8mf3v4VzG7EwHwYDVR0j BBgwFoAUU8Ugltf/sjWj3xhJEPpLdUf+LVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRUU5NTM3NjcyREIzODk3RjZDQTc4MzYzRkJBOTVFN0ZF NjAyQjlFOTA4ODczRjAxNzk4ODlBMTEyREM2QjlCLzAvNTNDNTIwOTZEN0ZGQjIz NUEzREYxODQ5MTBGQTRCNzU0N0ZFMkQ1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0M1MjA5NkQ3RkZCMjM1QTNE RjE4NDkxMEZBNEI3NTQ3RkUyRDU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkVFOTUzNzY3MkRCMzg5N0Y2Q0E3ODM2M0ZCQTk1RTdGRTYwMkI5RTkw ODg3M0YwMTc5ODg5QTExMkRDNkI5Qi8wLzMyMzgzMDMzM2EzMTM0MzkzMDNhNjYz MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMyMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxSQ8jANBgkqhkiG9w0BAQsFAAOCAQEAVed5fGmoxbJdybU9ncmOr2wq iysWC2tdK1tpU1dLsEo0Ed4vlWctUoDRfPgOAYll0bK7fC/7h7MwJn0sXajVBvh9 FymJXjwfSotSvFmldPDj+rBzYOXH+HWWxAd0uGnQaql3kxtyGjeu/dEILdghHCvy VaoeacuY6v/qFuqnje2byc2/fn1sIGHIQ/MGSqyGZ9krEy+56m0q7fdxXnS2HwTD 9zEBmO3GHirRSexAKfuA4WzoKGQ74apN/+hw8PxIpF8yNEPG71e+0b1JUsr4fa9m BNK7n+9dnXdjtTxZd18n/4Vr51PXxeQvyj2s1XavSnXTQGxRUloxUsVacBVNOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:40 2026 by rpki-client