This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa File: 323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (raw, json) Hash identifier: 2XXQwR92/KjgJ/2++HVI7fSD1UdmL5aNxYFyD/p5LNw= Subject key identifier: 91:16:9A:EF:2E:51:DB:7A:45:41:27:06:64:EA:EB:B8:F0:03:BB:88 Certificate issuer: /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Certificate serial: 0DC2F0544DE8375EF40646C1D0FE9DB8CD0DDC37 Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa Signing time: Tue 06 Jan 2026 19:37:55 +0000 ROA not before: Tue 06 Jan 2026 19:32:55 +0000 ROA not after: Tue 05 Jan 2027 19:37:55 +0000 asID: 267920 IP address blocks: 2803:2e60::/32 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 21:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:f0:54:4d:e8:37:5e:f4:06:46:c1:d0:fe:9d:b8:cd:0d:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Validity Not Before: Jan 6 19:32:55 2026 GMT Not After : Jan 5 19:37:55 2027 GMT Subject: CN=91169AEF2E51DB7A4541270664EAEBB8F003BB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:f0:a2:65:dc:da:b9:ca:44:f3:97:e0:1e: a4:84:68:7b:8b:15:5e:da:b1:6c:73:8b:f6:54:fe: 79:bf:be:39:4e:90:b0:04:4f:dd:d1:db:d7:0a:e5: 04:be:73:a6:2d:a6:81:e5:5d:fc:21:50:c6:8d:94: d2:c8:bc:a0:01:9d:30:ac:8f:61:44:cb:5e:0a:70: 12:8a:8b:ca:ba:77:20:d8:8a:10:72:44:51:e3:55: 45:9b:e8:b8:d0:7a:6a:18:0c:51:f8:55:06:08:39: 82:b8:8c:dc:18:92:c3:b2:2d:7f:ed:00:b4:f5:39: a0:2d:da:ba:6b:76:e8:8c:2f:a9:ce:d7:f1:9d:7b: 28:1a:f8:ed:66:06:86:41:ec:42:fe:04:aa:cc:c6: 9d:14:ed:07:b7:8c:f7:74:22:19:ef:64:52:a5:98: 85:bd:7b:c6:c8:a0:fc:51:d8:1a:28:da:75:4c:86: be:d1:7d:86:a5:a7:ea:db:d0:22:76:b9:5e:f0:bc: da:10:3c:6c:d4:ef:06:89:74:b7:5d:80:5f:b3:a1: 30:ba:b8:6e:0b:15:3b:7e:5d:d9:9f:16:bb:be:fb: cf:55:6f:27:00:da:16:cb:2e:1a:e2:f2:f9:c8:38: d3:67:52:04:82:f4:72:e2:6b:d8:7d:47:b1:f1:de: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:16:9A:EF:2E:51:DB:7A:45:41:27:06:64:EA:EB:B8:F0:03:BB:88 X509v3 Authority Key Identifier: keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2e60::/32 Signature Algorithm: sha256WithRSAEncryption 64:8f:4e:29:d0:c1:25:ba:06:e3:28:dc:44:22:d2:fd:80:3c: 3d:d8:7d:4b:ed:35:ec:0b:6b:8a:76:f6:e3:de:48:c5:a1:df: 85:3a:83:c8:65:01:bd:54:41:0f:f3:a3:ab:5e:28:fb:79:73: 59:43:fa:b9:e6:48:db:5d:81:ce:68:13:6b:bc:f0:a7:3f:05: 42:d9:04:5b:f1:0a:31:c7:0f:f1:db:54:ff:68:d8:1f:ee:0a: a9:10:fd:65:40:6c:85:a9:27:39:e3:36:16:ea:ff:fd:25:01: 18:17:4f:88:1b:a8:66:39:2d:a9:c2:c0:ec:f8:9f:b6:50:c4: d1:5d:b6:a5:a4:6b:a9:3d:96:b3:4e:73:07:78:83:93:e7:26: 58:da:0d:ab:2e:d8:8c:a5:b9:35:e4:41:e8:39:93:90:98:27: 58:47:bb:c6:9d:8c:81:21:a0:52:ce:ec:90:db:4c:c8:4e:70: d3:2e:9a:ab:05:80:ec:46:f4:07:ff:50:ba:70:99:ac:e7:2a: 63:92:5f:8a:64:dc:f4:c0:e2:b8:73:5c:38:1e:10:8c:39:d6: 32:75:2e:6a:10:ca:61:ea:d6:4e:af:53:f9:d1:af:3f:16:58: a8:3b:ec:cf:a9:7f:6c:a5:d0:e4:68:7f:9c:78:2e:db:12:fe: 19:71:dc:ca -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUDcLwVE3oN170BkbB0P6duM0N3DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3OTcwRUE4MUNG RTQ0RUE4ODAeFw0yNjAxMDYxOTMyNTVaFw0yNzAxMDUxOTM3NTVaMDMxMTAvBgNV BAMTKDkxMTY5QUVGMkU1MURCN0E0NTQxMjcwNjY0RUFFQkI4RjAwM0JCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/vCiZdzaucpE85fgHqSEaHuL FV7asWxzi/ZU/nm/vjlOkLAET93R29cK5QS+c6YtpoHlXfwhUMaNlNLIvKABnTCs j2FEy14KcBKKi8q6dyDYihByRFHjVUWb6LjQemoYDFH4VQYIOYK4jNwYksOyLX/t ALT1OaAt2rprduiML6nO1/Gdeyga+O1mBoZB7EL+BKrMxp0U7Qe3jPd0IhnvZFKl mIW9e8bIoPxR2Boo2nVMhr7RfYalp+rb0CJ2uV7wvNoQPGzU7waJdLddgF+zoTC6 uG4LFTt+XdmfFru++89VbycA2hbLLhri8vnIONNnUgSC9HLia9h9R7Hx3q3NAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUkRaa7y5R23pFQScGZOrruPADu4gwHwYDVR0j BBgwFoAU2MlHfKW/EVWr9RcHlw6oHP5E6ogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJF QTgxRTJGOEM0MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1 NUFCRjUxNzA3OTcwRUE4MUNGRTQ0RUE4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEM5NDc3Q0E1QkYxMTU1QUJG NTE3MDc5NzBFQTgxQ0ZFNDRFQTg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURBQzlCMkJBRDhCRUE4MUUyRjhD NDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wLzMyMzgzMDMzM2EzMjY1MzYzMDNhM2Ey ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzNzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLmAw DQYJKoZIhvcNAQELBQADggEBAGSPTinQwSW6BuMo3EQi0v2APD3YfUvtNewLa4p2 9uPeSMWh34U6g8hlAb1UQQ/zo6teKPt5c1lD+rnmSNtdgc5oE2u88Kc/BULZBFvx CjHHD/HbVP9o2B/uCqkQ/WVAbIWpJznjNhbq//0lARgXT4gbqGY5LanCwOz4n7ZQ xNFdtqWka6k9lrNOcwd4g5PnJljaDasu2IyluTXkQeg5k5CYJ1hHu8adjIEhoFLO 7JDbTMhOcNMumqsFgOxG9Af/ULpwmaznKmOSX4pk3PTA4rhzXDgeEIw51jJ1LmoQ ymHq1k6vU/nRrz8WWKg77M+pf2yl0ORof5x4LtsS/hlx3Mo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:08:53 2026 by rpki-client