This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa File: 323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa (raw, json) Hash identifier: 4SV8DGGPqq5xWY2c8Z+SkmVlunvIrcnNX5hvp4YVves= Subject key identifier: 81:7C:DF:D8:6C:C2:7A:E7:11:A1:B1:79:A0:0D:8E:F3:3A:17:F9:72 Certificate issuer: /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Certificate serial: 782D50D25374C1FF63BC2FDEFFB4DE8F7C364F3B Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa Signing time: Tue 06 Jan 2026 19:42:35 +0000 ROA not before: Tue 06 Jan 2026 19:37:35 +0000 ROA not after: Tue 05 Jan 2027 19:42:35 +0000 asID: 272822 IP address blocks: 2803:1490:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 10:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2d:50:d2:53:74:c1:ff:63:bc:2f:de:ff:b4:de:8f:7c:36:4f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56 Validity Not Before: Jan 6 19:37:35 2026 GMT Not After : Jan 5 19:42:35 2027 GMT Subject: CN=817CDFD86CC27AE711A1B179A00D8EF33A17F972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:fd:5c:cd:0b:e3:73:64:83:33:bf:50:31: 45:b3:8a:60:88:b1:b2:4e:e0:a3:ff:ac:10:f3:f7: f0:40:19:51:5e:d3:e0:24:27:d3:52:f3:db:0e:ff: ad:fa:5b:ec:95:41:86:d7:3b:57:4e:f7:53:81:33: 73:02:33:aa:e8:d9:a1:a0:81:39:90:ee:41:95:63: 3c:26:75:13:d8:c5:61:98:78:00:c1:64:5b:30:e1: 8a:2a:c1:9d:98:e4:c5:40:5a:48:ee:38:1e:16:fd: 48:5c:98:21:5b:7c:46:6d:5d:74:71:c4:fe:57:53: b7:44:e2:db:b6:b5:7d:34:91:60:24:60:07:de:8c: 17:20:e5:e0:33:d0:8d:cd:dd:e9:df:50:0d:33:0d: 9d:ca:5d:ca:bb:26:52:5e:88:01:fb:c0:3b:12:53: 92:90:d2:48:a0:69:25:6f:bd:f4:9f:09:3d:1e:a8: 26:bd:bc:05:0b:5a:e8:5e:0f:24:a5:4b:24:59:6a: fd:bd:ab:83:a5:d4:c1:66:20:1d:9f:ac:57:bb:fe: f6:e6:b2:e2:84:76:95:39:8a:e0:86:75:d4:5d:d9: 4a:e7:6d:c7:1b:8f:76:78:2f:fc:e8:cf:32:1c:1f: 2b:cb:62:a7:14:81:e3:36:56:26:fb:5f:53:c4:f2: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7C:DF:D8:6C:C2:7A:E7:11:A1:B1:79:A0:0D:8E:F3:3A:17:F9:72 X509v3 Authority Key Identifier: keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1490:f300::/40 Signature Algorithm: sha256WithRSAEncryption 23:6a:a2:b1:e0:b3:35:13:17:68:0f:dc:b1:4c:ab:fa:b1:42: 91:90:29:b2:2f:8d:b7:89:48:a5:13:f9:c9:ff:2e:94:96:0f: 75:7a:77:64:82:4e:6c:7e:b7:b5:f2:a6:ff:0d:0a:cf:8c:ea: 79:89:0b:4c:c4:b6:2d:af:83:9c:2f:b6:e4:54:ab:49:25:fc: 90:85:73:6c:27:00:51:51:b4:9f:f9:2c:8b:f4:a8:0d:80:ee: e0:92:61:0c:10:43:84:90:8e:1d:1b:81:2b:c1:a3:89:27:53: e5:ef:3d:af:4e:bd:94:12:9f:2d:4a:68:7a:ae:04:ff:f4:ad: f1:b3:1e:4e:9d:11:b0:6f:2f:5a:e7:2c:bc:6c:2b:03:ea:08: 59:64:71:5c:e3:d6:2a:40:7b:c3:f9:71:46:22:18:c3:e6:76: 12:3c:4e:83:23:40:3c:3e:08:c5:67:22:b3:5c:e9:57:a5:e2: 68:6a:96:e4:99:0a:18:af:d6:42:7f:e8:bc:5b:dc:2c:18:9f: bc:f9:22:3b:55:d0:a1:74:c2:d3:b3:5a:90:fe:0c:cb:7a:db: 34:74:e5:7b:07:b8:64:eb:16:98:c2:04:a8:a3:ea:64:26:93: 8f:a6:67:67:76:e7:ed:92:9f:00:72:16:41:1e:22:ea:7b:06: 97:05:59:c9 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUeC1Q0lN0wf9jvC/e/7Tej3w2TzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNDNTIwOTZEN0ZGQjIzNUEzREYxODQ5MTBGQTRCNzU0 N0ZFMkQ1NjAeFw0yNjAxMDYxOTM3MzVaFw0yNzAxMDUxOTQyMzVaMDMxMTAvBgNV BAMTKDgxN0NERkQ4NkNDMjdBRTcxMUExQjE3OUEwMEQ4RUYzM0ExN0Y5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dv1czQvjc2SDM79QMUWzimCI sbJO4KP/rBDz9/BAGVFe0+AkJ9NS89sO/636W+yVQYbXO1dO91OBM3MCM6ro2aGg gTmQ7kGVYzwmdRPYxWGYeADBZFsw4YoqwZ2Y5MVAWkjuOB4W/UhcmCFbfEZtXXRx xP5XU7dE4tu2tX00kWAkYAfejBcg5eAz0I3N3enfUA0zDZ3KXcq7JlJeiAH7wDsS U5KQ0kigaSVvvfSfCT0eqCa9vAULWuheDySlSyRZav29q4Ol1MFmIB2frFe7/vbm suKEdpU5iuCGddRd2Urnbccbj3Z4L/zozzIcHyvLYqcUgeM2Vib7X1PE8gnPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUgXzf2GzCeucRobF5oA2O8zoX+XIwHwYDVR0j BBgwFoAUU8Ugltf/sjWj3xhJEPpLdUf+LVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRUU5NTM3NjcyREIzODk3RjZDQTc4MzYzRkJBOTVFN0ZF NjAyQjlFOTA4ODczRjAxNzk4ODlBMTEyREM2QjlCLzAvNTNDNTIwOTZEN0ZGQjIz NUEzREYxODQ5MTBGQTRCNzU0N0ZFMkQ1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0M1MjA5NkQ3RkZCMjM1QTNE RjE4NDkxMEZBNEI3NTQ3RkUyRDU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkVFOTUzNzY3MkRCMzg5N0Y2Q0E3ODM2M0ZCQTk1RTdGRTYwMkI5RTkw ODg3M0YwMTc5ODg5QTExMkRDNkI5Qi8wLzMyMzgzMDMzM2EzMTM0MzkzMDNhNjYz MzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMyMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxSQ8zANBgkqhkiG9w0BAQsFAAOCAQEAI2qiseCzNRMXaA/csUyr+rFC kZApsi+Nt4lIpRP5yf8ulJYPdXp3ZIJObH63tfKm/w0Kz4zqeYkLTMS2La+DnC+2 5FSrSSX8kIVzbCcAUVG0n/ksi/SoDYDu4JJhDBBDhJCOHRuBK8GjiSdT5e89r069 lBKfLUpoeq4E//St8bMeTp0RsG8vWucsvGwrA+oIWWRxXOPWKkB7w/lxRiIYw+Z2 EjxOgyNAPD4IxWcis1zpV6XiaGqW5JkKGK/WQn/ovFvcLBifvPkiO1XQoXTC07Na kP4My3rbNHTlewe4ZOsWmMIEqKPqZCaTj6ZnZ3bn7ZKfAHIWQR4i6nsGlwVZyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:40 2026 by rpki-client