This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a663030303a3a2f33362d3336203d3e20323733323830.roa File: 323030313a313232363a663030303a3a2f33362d3336203d3e20323733323830.roa (raw, json) Hash identifier: pshb6vFkI4TVW3UNmq8xW2SPgydC1XgC2CC9sdWP3tY= Subject key identifier: 79:1B:F0:CB:14:0E:D9:8C:56:A5:D2:A0:C2:F0:F3:06:68:CB:DE:51 Certificate issuer: /CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Certificate serial: 12B5AFFB461E2A4CE95D876D4850BFA3712BCAF0 Authority key identifier: 86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a663030303a3a2f33362d3336203d3e20323733323830.roa Signing time: Wed 12 Nov 2025 19:35:00 +0000 ROA not before: Wed 12 Nov 2025 19:30:00 +0000 ROA not after: Wed 11 Nov 2026 19:35:00 +0000 asID: 273280 IP address blocks: 2001:1226:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b5:af:fb:46:1e:2a:4c:e9:5d:87:6d:48:50:bf:a3:71:2b:ca:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Validity Not Before: Nov 12 19:30:00 2025 GMT Not After : Nov 11 19:35:00 2026 GMT Subject: CN=791BF0CB140ED98C56A5D2A0C2F0F30668CBDE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:0b:6c:45:05:88:fd:62:2f:95:00:20:80: bb:73:93:cd:92:1e:4b:56:da:23:ae:4b:e1:a6:f0: c3:d6:0a:12:25:52:10:e2:b6:2f:37:6b:1c:4e:6d: 4e:f9:04:b4:c0:92:1c:c5:04:ce:7a:a3:8c:15:96: b1:ca:9c:f3:8d:c9:00:ee:54:fa:3f:43:f6:8b:a8: e8:1c:56:de:a7:49:17:cb:67:63:c9:53:d1:43:ba: dd:d1:fc:8c:5f:0d:ee:3b:96:be:a0:a4:3c:2d:04: a8:69:bd:31:94:90:c5:cc:82:91:30:8b:58:55:cf: 78:73:7b:84:0b:94:8c:7f:99:59:f5:05:da:90:01: 66:9c:c4:6c:6b:a0:46:78:20:6a:48:40:9a:9b:d1: 56:b8:b3:17:9c:9b:5c:2a:a3:ea:a5:32:6a:8f:0c: 0a:a5:a9:e3:78:ad:a0:ae:23:70:92:24:7e:a2:56: e5:3f:37:63:eb:7c:ae:18:10:a0:dd:6e:6b:5c:82: 4e:65:57:69:d4:0c:71:ed:b9:76:b8:94:8e:ee:16: f5:ee:6c:ef:31:88:50:ce:cc:ea:f7:2d:63:4d:3d: 36:21:8e:68:4f:b4:7c:ad:dd:5d:b0:3e:14:52:ad: 27:f9:ac:1b:c5:f1:a0:98:60:16:3f:89:cb:7a:e5: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:F0:CB:14:0E:D9:8C:56:A5:D2:A0:C2:F0:F3:06:68:CB:DE:51 X509v3 Authority Key Identifier: keyid:86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a663030303a3a2f33362d3336203d3e20323733323830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1226:f000::/36 Signature Algorithm: sha256WithRSAEncryption 34:ae:5e:4b:7e:d2:90:7c:b6:a3:b1:e3:08:c2:76:64:57:cd: dd:47:7d:62:28:3c:fe:bd:69:8e:d3:b8:a0:0e:70:d7:cf:bd: 10:1b:7d:45:98:14:90:42:1a:ae:eb:02:48:e0:0f:81:ee:0c: b9:e9:ae:d1:4e:04:c5:c7:4d:98:97:c3:e7:a2:55:03:9b:d7: d3:47:8a:bf:ba:46:2c:40:27:00:c8:da:aa:0b:7c:c0:cd:19: 89:f4:9d:0c:db:07:c0:8c:13:d4:0b:b0:23:f1:d1:5b:09:5e: a5:11:c8:10:2b:1a:b6:93:9d:c4:07:be:c9:1c:be:d0:05:ef: 29:d7:cd:a2:58:6d:cf:6f:aa:1f:23:72:15:99:50:61:29:14: 38:95:79:43:d2:7c:38:1a:bc:ec:28:95:3d:4e:b8:97:e0:c1: 46:96:fe:4e:8b:40:bc:7a:41:d7:e8:90:07:00:e5:85:32:99: 3b:d0:c5:8d:e9:12:fb:1c:1e:01:ac:b2:ee:64:cc:ef:eb:e7: 02:8f:51:f1:8f:ab:13:ec:ce:4e:c7:bc:54:d4:f7:19:f9:e3: 7b:9a:93:74:8f:9d:f4:b5:c9:36:c4:da:79:61:d7:80:30:79: eb:cd:3a:a4:fb:b4:93:a0:fe:27:f4:80:15:ad:2c:0c:a7:49: 3a:d2:84:6d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUErWv+0YeKkzpXYdtSFC/o3EryvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1RTU1ODYxMDdFMEM5RTA1NjYyNEQ4OTAwMzM4QzVD MUNCRkNDNTAeFw0yNTExMTIxOTMwMDBaFw0yNjExMTExOTM1MDBaMDMxMTAvBgNV BAMTKDc5MUJGMENCMTQwRUQ5OEM1NkE1RDJBMEMyRjBGMzA2NjhDQkRFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmwtsRQWI/WIvlQAggLtzk82S HktW2iOuS+Gm8MPWChIlUhDiti83axxObU75BLTAkhzFBM56o4wVlrHKnPONyQDu VPo/Q/aLqOgcVt6nSRfLZ2PJU9FDut3R/IxfDe47lr6gpDwtBKhpvTGUkMXMgpEw i1hVz3hze4QLlIx/mVn1BdqQAWacxGxroEZ4IGpIQJqb0Va4sxecm1wqo+qlMmqP DAqlqeN4raCuI3CSJH6iVuU/N2PrfK4YEKDdbmtcgk5lV2nUDHHtuXa4lI7uFvXu bO8xiFDOzOr3LWNNPTYhjmhPtHyt3V2wPhRSrSf5rBvF8aCYYBY/ict65TmLAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUeRvwyxQO2YxWpdKgwvDzBmjL3lEwHwYDVR0j BBgwFoAUhl5VhhB+DJ4FZiTYkAM4xcHL/MUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNTMzN0RFMkIzNkMwQzBFQkZFQ0M0RjJGNDE4RTEzMzc4 NUQ4ODc1MTFBMjREODJGODg2NUZFNTgyOTY3NkU1LzAvODY1RTU1ODYxMDdFMEM5 RTA1NjYyNEQ4OTAwMzM4QzVDMUNCRkNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjVFNTU4NjEwN0UwQzlFMDU2 NjI0RDg5MDAzMzhDNUMxQ0JGQ0M1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzUzMzdERTJCMzZDMEMwRUJGRUNDNEYyRjQxOEUxMzM3ODVEODg3NTEx QTI0RDgyRjg4NjVGRTU4Mjk2NzZFNS8wLzMyMzAzMDMxM2EzMTMyMzIzNjNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzMzMjM4MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQgARIm8DANBgkqhkiG9w0BAQsFAAOCAQEANK5eS37SkHy2o7HjCMJ2ZFfN 3Ud9Yig8/r1pjtO4oA5w18+9EBt9RZgUkEIarusCSOAPge4Muemu0U4ExcdNmJfD 56JVA5vX00eKv7pGLEAnAMjaqgt8wM0ZifSdDNsHwIwT1AuwI/HRWwlepRHIECsa tpOdxAe+yRy+0AXvKdfNolhtz2+qHyNyFZlQYSkUOJV5Q9J8OBq87CiVPU64l+DB Rpb+TotAvHpB1+iQBwDlhTKZO9DFjekS+xweAayy7mTM7+vnAo9R8Y+rE+zOTse8 VNT3Gfnje5qTdI+d9LXJNsTaeWHXgDB56806pPu0k6D+J/SAFa0sDKdJOtKEbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:52:49 2025 by rpki-client