This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a633030303a3a2f33362d3336203d3e20323636383230.roa File: 323830333a383461303a633030303a3a2f33362d3336203d3e20323636383230.roa (raw, json) Hash identifier: KLACOh6c43gYMmLUdMdKNBBwAh+tKPnb6SEovZlC8EQ= Subject key identifier: 9D:C4:64:17:D9:E2:5F:4B:CE:5B:0D:B7:72:53:CE:49:1E:93:12:20 Certificate issuer: /CN=876619C7FD0F295D57635312903E44E56FCF51A3 Certificate serial: 1BC5193ECECB97F20834B7C2DA13063AF857AF8C Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a633030303a3a2f33362d3336203d3e20323636383230.roa Signing time: Tue 06 Jan 2026 19:47:55 +0000 ROA not before: Tue 06 Jan 2026 19:42:55 +0000 ROA not after: Tue 05 Jan 2027 19:47:55 +0000 asID: 266820 IP address blocks: 2803:84a0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c5:19:3e:ce:cb:97:f2:08:34:b7:c2:da:13:06:3a:f8:57:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3 Validity Not Before: Jan 6 19:42:55 2026 GMT Not After : Jan 5 19:47:55 2027 GMT Subject: CN=9DC46417D9E25F4BCE5B0DB77253CE491E931220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:25:29:14:a8:0e:02:0d:a1:1c:bb:e0:35: 71:f7:29:e4:f5:6e:f4:0f:fc:f7:37:fb:be:bd:98: f3:7b:d3:af:41:c7:14:47:01:74:0c:f0:45:98:fb: c9:51:66:9d:08:ed:64:5a:d4:19:03:14:23:ef:b4: 8f:32:9b:36:40:07:f4:16:34:2b:35:2a:94:b5:bc: 06:32:85:82:3a:da:69:aa:1a:f0:38:c7:8e:33:7d: e7:80:e0:ad:d4:c7:63:98:a4:29:ed:c5:e9:a8:84: ef:bb:d1:28:ed:a8:d5:8d:8a:44:2e:a2:3d:4a:fa: 23:3d:61:c7:cd:40:e9:e8:20:29:c7:68:6c:fd:02: 4a:61:fe:6b:ee:ac:41:60:3d:12:82:63:5a:d7:e4: 32:8f:5d:78:23:2c:6f:7b:58:67:07:77:b7:1e:f7: 2d:8d:6e:4f:c4:e3:e5:2e:a7:ce:1d:c4:c9:2c:48: 40:55:2a:39:c6:ea:c5:b5:06:b6:aa:35:0b:9b:84: a8:11:9f:9e:c6:25:5a:19:b5:c7:e4:11:c1:78:13: c1:39:65:64:dd:e2:b3:50:0f:04:c0:8b:17:b2:d3: 2c:80:7e:ae:4c:83:ac:1b:ed:95:75:13:68:ef:4e: ca:fd:ac:c0:71:16:f8:85:96:e8:54:da:a5:26:3a: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C4:64:17:D9:E2:5F:4B:CE:5B:0D:B7:72:53:CE:49:1E:93:12:20 X509v3 Authority Key Identifier: keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a633030303a3a2f33362d3336203d3e20323636383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:84a0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 72:96:22:71:47:3f:b4:39:92:ca:35:51:fc:77:28:a9:c7:8d: 59:34:7f:8c:5d:0d:60:c3:48:44:11:da:27:50:86:7d:9d:a3: 5e:73:e6:39:3b:02:04:a9:cc:fa:0f:d9:2d:1e:a2:b1:5e:af: bf:81:ec:b2:c0:de:3d:45:cf:96:be:a5:a0:1a:d4:b3:fe:d4: ec:93:03:27:66:3b:fc:78:0e:3a:64:06:91:80:9a:12:d0:c5: 83:94:1c:15:da:87:fa:e7:da:3c:7d:1c:33:fc:6b:21:a5:ca: 11:b8:1d:70:55:11:b9:02:17:f4:60:d5:d4:fc:81:29:87:74: 34:2f:29:04:95:72:89:45:e8:52:4c:d9:5f:47:5e:c3:ad:9c: da:a4:7a:da:0b:e6:4a:aa:73:1e:a3:0e:f4:a3:59:c1:15:27: eb:2d:1b:c5:70:f3:39:19:10:60:bc:0b:42:da:ce:f7:ba:5c: 4b:7f:53:f5:73:1b:58:31:59:27:b5:0b:07:5f:09:23:28:39: 1a:be:7b:81:4c:82:cd:e5:69:53:46:69:33:1d:26:0e:6b:7f: e1:8f:04:e5:47:06:7b:ec:ed:34:1a:13:cc:d8:5a:12:64:78: 72:9d:4c:98:02:ac:0c:6e:e7:e4:81:73:11:1b:09:5a:be:05: 03:c3:ba:7c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUG8UZPs7Ll/IINLfC2hMGOvhXr4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2NjE5QzdGRDBGMjk1RDU3NjM1MzEyOTAzRTQ0RTU2 RkNGNTFBMzAeFw0yNjAxMDYxOTQyNTVaFw0yNzAxMDUxOTQ3NTVaMDMxMTAvBgNV BAMTKDlEQzQ2NDE3RDlFMjVGNEJDRTVCMERCNzcyNTNDRTQ5MUU5MzEyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnsiUpFKgOAg2hHLvgNXH3KeT1 bvQP/Pc3+769mPN7069BxxRHAXQM8EWY+8lRZp0I7WRa1BkDFCPvtI8ymzZAB/QW NCs1KpS1vAYyhYI62mmqGvA4x44zfeeA4K3Ux2OYpCntxemohO+70SjtqNWNikQu oj1K+iM9YcfNQOnoICnHaGz9Akph/mvurEFgPRKCY1rX5DKPXXgjLG97WGcHd7ce 9y2Nbk/E4+Uup84dxMksSEBVKjnG6sW1BraqNQubhKgRn57GJVoZtcfkEcF4E8E5 ZWTd4rNQDwTAixey0yyAfq5Mg6wb7ZV1E2jvTsr9rMBxFviFluhU2qUmOkNxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUncRkF9niX0vOWw23clPOSR6TEiAwHwYDVR0j BBgwFoAUh2YZx/0PKV1XY1MSkD5E5W/PUaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0Y0Mzc1M0Q1NDdBOURBNTQ2REZDNEU1ODNDQ0UwNDFD MzU4NTMxOTMxNzdGRUU3Q0U3NTdBRjJBRDI0RDE5LzAvODc2NjE5QzdGRDBGMjk1 RDU3NjM1MzEyOTAzRTQ0RTU2RkNGNTFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzY2MTlDN0ZEMEYyOTVENTc2 MzUzMTI5MDNFNDRFNTZGQ0Y1MUEzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdGNDM3NTNENTQ3QTlEQTU0NkRGQzRFNTgzQ0NFMDQxQzM1ODUzMTkz MTc3RkVFN0NFNzU3QUYyQUQyNEQxOS8wLzMyMzgzMDMzM2EzODM0NjEzMDNhNjMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4SgwDANBgkqhkiG9w0BAQsFAAOCAQEAcpYicUc/tDmSyjVR/HcoqceN WTR/jF0NYMNIRBHaJ1CGfZ2jXnPmOTsCBKnM+g/ZLR6isV6vv4HsssDePUXPlr6l oBrUs/7U7JMDJ2Y7/HgOOmQGkYCaEtDFg5QcFdqH+ufaPH0cM/xrIaXKEbgdcFUR uQIX9GDV1PyBKYd0NC8pBJVyiUXoUkzZX0dew62c2qR62gvmSqpzHqMO9KNZwRUn 6y0bxXDzORkQYLwLQtrO97pcS39T9XMbWDFZJ7ULB18JIyg5Gr57gUyCzeVpU0Zp Mx0mDmt/4Y8E5UcGe+ztNBoTzNhaEmR4cp1MmAKsDG7n5IFzERsJWr4FA8O6fA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:23 2026 by rpki-client