This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313130303a3a2f34302d3430203d3e20323733323830.roa File: 323030313a313232363a313130303a3a2f34302d3430203d3e20323733323830.roa (raw, json) Hash identifier: JO//ifXoX3GbP9pLqQY8vCu6ryXC2DJWvqpFZ4CPhvM= Subject key identifier: A0:89:89:3E:C0:88:F1:8E:6C:E3:65:DA:65:06:3B:E3:F3:93:59:38 Certificate issuer: /CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Certificate serial: 10AFF61E36A39EAED01BF94CD49030B3CE0CA0C5 Authority key identifier: 86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313130303a3a2f34302d3430203d3e20323733323830.roa Signing time: Tue 11 Nov 2025 23:35:00 +0000 ROA not before: Tue 11 Nov 2025 23:30:00 +0000 ROA not after: Tue 10 Nov 2026 23:35:00 +0000 asID: 273280 IP address blocks: 2001:1226:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:af:f6:1e:36:a3:9e:ae:d0:1b:f9:4c:d4:90:30:b3:ce:0c:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Validity Not Before: Nov 11 23:30:00 2025 GMT Not After : Nov 10 23:35:00 2026 GMT Subject: CN=A089893EC088F18E6CE365DA65063BE3F3935938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:1a:12:bd:45:d2:d5:c1:ab:12:15:77:42: b6:f0:46:be:7c:7a:5f:02:10:a1:75:fd:77:2d:b3: 9e:07:b8:30:2a:57:c0:16:68:c5:95:37:4a:fe:4c: a5:1e:d9:aa:56:54:8e:f2:36:0b:4d:e5:11:58:c0: 8b:d9:0b:98:3a:27:89:80:b6:62:ca:bd:af:83:a5: 68:9f:10:2f:ba:9d:15:23:ea:ed:b7:fe:6c:89:f2: 97:1d:4a:53:54:f2:c0:57:a5:8a:d3:a2:24:87:bb: 1b:da:b7:4e:40:18:33:58:73:d4:33:c9:33:03:98: 8d:b0:be:b7:74:6e:f3:4d:3a:55:c0:56:06:f2:db: 91:5b:5d:3a:fd:cd:25:00:d4:db:5b:ca:01:2c:b8: f6:63:a4:87:47:2a:45:c7:5c:88:b3:e4:75:38:13: 9d:23:71:64:7b:6e:64:56:5e:bf:be:4b:44:21:08: e9:b5:a5:64:a3:5b:69:f4:15:5a:5c:c1:e4:e1:36: b2:70:bf:e1:58:26:3d:2f:49:c0:60:ae:ed:20:0b: 78:72:2d:9f:86:6d:63:43:3f:20:58:b0:56:5e:69: 7e:30:1c:ce:48:e6:c6:eb:ec:1f:0a:45:be:1d:19: 3f:3d:f9:e8:d6:7d:9b:80:f4:ee:24:5b:92:af:47: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:89:89:3E:C0:88:F1:8E:6C:E3:65:DA:65:06:3B:E3:F3:93:59:38 X509v3 Authority Key Identifier: keyid:86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313130303a3a2f34302d3430203d3e20323733323830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1226:1100::/40 Signature Algorithm: sha256WithRSAEncryption 3c:55:1a:e1:dd:55:ec:92:05:cd:e0:f0:cd:72:a3:3a:1b:22: 1a:0d:e6:10:17:3b:bf:85:1b:fb:5b:c8:83:17:e0:f0:42:62: ce:13:41:ca:7f:71:7d:d4:22:b6:2a:bb:a1:11:25:5e:35:84: 74:54:d3:c9:f2:13:cf:8b:6e:db:25:db:3e:f0:18:c3:b7:d9: 00:73:f8:eb:33:c2:75:32:d9:69:0c:62:a4:d9:9b:6b:d6:c2: 2a:8f:1c:53:e0:60:5a:10:67:76:b2:43:bf:e6:00:a1:f8:b3: e6:64:48:e6:de:14:45:b8:d4:9d:e0:0b:1f:53:1b:41:75:8e: 10:a3:40:ec:31:c4:c8:14:3c:7e:78:72:f1:1c:46:36:2e:c0: 4d:3a:63:04:e1:12:99:e5:5d:b8:60:c0:cb:ac:bd:83:85:51: 73:20:40:f9:46:62:cc:24:ef:a6:90:60:e7:cd:22:75:94:fa: a9:50:51:89:1c:16:43:3d:6f:18:e1:df:84:40:a9:34:f5:d7: c9:d8:ac:ed:83:56:5e:e5:58:1d:16:2a:b1:5c:fe:71:46:0c: 38:94:52:88:28:b3:3f:c6:6f:4d:e3:e3:38:d0:b2:26:e8:6f: 8a:b0:c9:a8:0a:68:c8:28:30:b0:0d:41:cf:71:b1:11:0f:7d: c5:ce:51:11 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEK/2Hjajnq7QG/lM1JAws84MoMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1RTU1ODYxMDdFMEM5RTA1NjYyNEQ4OTAwMzM4QzVD MUNCRkNDNTAeFw0yNTExMTEyMzMwMDBaFw0yNjExMTAyMzM1MDBaMDMxMTAvBgNV BAMTKEEwODk4OTNFQzA4OEYxOEU2Q0UzNjVEQTY1MDYzQkUzRjM5MzU5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMRoSvUXS1cGrEhV3QrbwRr58 el8CEKF1/Xcts54HuDAqV8AWaMWVN0r+TKUe2apWVI7yNgtN5RFYwIvZC5g6J4mA tmLKva+DpWifEC+6nRUj6u23/myJ8pcdSlNU8sBXpYrToiSHuxvat05AGDNYc9Qz yTMDmI2wvrd0bvNNOlXAVgby25FbXTr9zSUA1NtbygEsuPZjpIdHKkXHXIiz5HU4 E50jcWR7bmRWXr++S0QhCOm1pWSjW2n0FVpcweThNrJwv+FYJj0vScBgru0gC3hy LZ+GbWNDPyBYsFZeaX4wHM5I5sbr7B8KRb4dGT89+ejWfZuA9O4kW5KvRwgtAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUoImJPsCI8Y5s42XaZQY74/OTWTgwHwYDVR0j BBgwFoAUhl5VhhB+DJ4FZiTYkAM4xcHL/MUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNTMzN0RFMkIzNkMwQzBFQkZFQ0M0RjJGNDE4RTEzMzc4 NUQ4ODc1MTFBMjREODJGODg2NUZFNTgyOTY3NkU1LzAvODY1RTU1ODYxMDdFMEM5 RTA1NjYyNEQ4OTAwMzM4QzVDMUNCRkNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjVFNTU4NjEwN0UwQzlFMDU2 NjI0RDg5MDAzMzhDNUMxQ0JGQ0M1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzUzMzdERTJCMzZDMEMwRUJGRUNDNEYyRjQxOEUxMzM3ODVEODg3NTEx QTI0RDgyRjg4NjVGRTU4Mjk2NzZFNS8wLzMyMzAzMDMxM2EzMTMyMzIzNjNhMzEz MTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzMzMjM4MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAgARImETANBgkqhkiG9w0BAQsFAAOCAQEAPFUa4d1V7JIFzeDwzXKjOhsi Gg3mEBc7v4Ub+1vIgxfg8EJizhNByn9xfdQitiq7oRElXjWEdFTTyfITz4tu2yXb PvAYw7fZAHP46zPCdTLZaQxipNmba9bCKo8cU+BgWhBndrJDv+YAofiz5mRI5t4U RbjUneALH1MbQXWOEKNA7DHEyBQ8fnhy8RxGNi7ATTpjBOESmeVduGDAy6y9g4VR cyBA+UZizCTvppBg580idZT6qVBRiRwWQz1vGOHfhECpNPXXydis7YNWXuVYHRYq sVz+cUYMOJRSiCizP8ZvTePjONCyJuhvirDJqApoyCgwsA1Bz3GxEQ99xc5REQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:52:47 2025 by rpki-client