This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa File: 323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa (raw, json) Hash identifier: FDEFqGGA+SSJsnnmI8CUvx1/9XCxoIIeHHtaqWwvbsY= Subject key identifier: EC:A6:F1:C6:BF:7B:F6:7E:CD:8B:70:4E:CC:E6:5E:A3:32:61:E2:0F Certificate issuer: /CN=12608F449BBF3F86819F95307654EF5D740A9084 Certificate serial: 063F943886AE6C8CB4EEB840CDBDB0DE4937C245 Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa Signing time: Tue 06 Jan 2026 19:12:37 +0000 ROA not before: Tue 06 Jan 2026 19:07:37 +0000 ROA not after: Tue 05 Jan 2027 19:12:37 +0000 asID: 262212 IP address blocks: 2800:68:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 16:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3f:94:38:86:ae:6c:8c:b4:ee:b8:40:cd:bd:b0:de:49:37:c2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084 Validity Not Before: Jan 6 19:07:37 2026 GMT Not After : Jan 5 19:12:37 2027 GMT Subject: CN=ECA6F1C6BF7BF67ECD8B704ECCE65EA33261E20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:a3:fc:12:c0:2a:5e:06:c7:41:c4:49:ec: d0:be:44:ef:5b:fc:e0:67:7c:b9:8c:92:98:da:31: dc:e6:b7:39:a9:72:16:f1:49:fc:b1:41:74:cf:d3: a7:5f:4f:6d:da:53:f8:d1:e3:5d:40:35:8e:a8:47: 3d:2f:e1:19:ee:63:16:e9:24:74:86:cc:7d:f9:f5: 0a:d8:33:e0:06:e0:f1:d4:4e:21:03:24:77:1c:d4: 17:cb:b8:14:fb:96:24:28:49:ab:ec:34:10:3b:cd: 9e:49:32:60:5d:e0:78:1c:de:ec:cf:a7:6e:a1:65: 31:df:2c:c4:d7:c6:e7:bb:b5:a2:29:e2:c6:98:35: 62:62:eb:9f:ae:16:1f:3b:3f:bf:47:83:57:50:e0: 74:54:4a:d9:fe:5b:4d:b9:06:2a:46:6c:b0:57:f5: 7a:79:5e:9f:48:b2:95:24:92:ea:13:84:91:d7:4a: a4:83:df:ac:90:47:42:b3:a3:25:f2:43:45:f4:21: d5:c8:d8:25:17:8b:6d:74:f0:68:7b:65:c9:69:60: 0f:25:39:75:23:94:44:e4:b4:92:23:6f:f1:1f:37: 8d:9c:89:94:40:ca:e3:bc:87:c8:69:ab:84:d1:d7: 68:80:74:dc:4c:65:4b:fe:ce:ce:56:40:d0:5c:60: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:F1:C6:BF:7B:F6:7E:CD:8B:70:4E:CC:E6:5E:A3:32:61:E2:0F X509v3 Authority Key Identifier: keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a31313a3a2f34382d3438203d3e20323632323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:68:11::/48 Signature Algorithm: sha256WithRSAEncryption 16:60:f2:6c:d2:ed:b2:e0:ef:04:43:c8:a8:4b:3f:bf:cb:38: de:61:a1:f1:69:80:1a:fd:6d:c9:b2:c2:38:ad:80:c6:a1:a9: a1:a7:48:21:ad:17:36:ff:12:0e:53:de:76:6b:bf:27:e8:56: 16:79:d6:63:34:e7:bd:61:cc:46:a2:f4:e5:56:6c:2a:68:35: 1b:6f:57:fe:5a:8f:d5:9a:cf:79:89:c9:4e:8e:16:c8:6e:a3: ae:82:62:7e:cd:0d:78:bf:bf:e0:e9:e9:f2:ad:f1:eb:03:af: 74:d3:26:3a:83:15:1e:b6:ec:d0:1c:1d:12:15:20:f9:f3:1c: 60:5b:a3:2b:fd:e6:be:d1:e7:ef:f0:55:d4:76:73:8c:f3:4e: e4:bf:f9:ce:bf:0d:ff:4a:fb:94:43:a9:df:81:37:03:e8:47: 15:78:e5:2a:4f:04:bc:86:88:8f:cc:3e:a0:fc:36:cc:5b:0b: e4:53:11:ea:1a:11:f6:ac:7c:ce:c4:db:46:21:4f:4e:52:60: 4f:5a:f4:51:01:78:70:d2:12:89:af:8d:80:66:60:12:1d:6c: c9:63:49:a0:00:bd:5f:c3:73:c3:a1:70:25:70:79:e8:f6:d6: 31:22:85:00:bd:d4:34:0c:52:fe:1a:16:c1:1d:05:cc:52:fc: d4:70:9d:78 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUBj+UOIaubIy07rhAzb2w3kk3wkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3 NDBBOTA4NDAeFw0yNjAxMDYxOTA3MzdaFw0yNzAxMDUxOTEyMzdaMDMxMTAvBgNV BAMTKEVDQTZGMUM2QkY3QkY2N0VDRDhCNzA0RUNDRTY1RUEzMzI2MUUyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNqP8EsAqXgbHQcRJ7NC+RO9b /OBnfLmMkpjaMdzmtzmpchbxSfyxQXTP06dfT23aU/jR411ANY6oRz0v4RnuYxbp JHSGzH359QrYM+AG4PHUTiEDJHcc1BfLuBT7liQoSavsNBA7zZ5JMmBd4Hgc3uzP p26hZTHfLMTXxue7taIp4saYNWJi65+uFh87P79Hg1dQ4HRUStn+W025BipGbLBX 9Xp5Xp9IspUkkuoThJHXSqSD36yQR0KzoyXyQ0X0IdXI2CUXi2108Gh7ZclpYA8l OXUjlETktJIjb/EfN42ciZRAyuO8h8hpq4TR12iAdNxMZUv+zs5WQNBcYLdZAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQU7Kbxxr979n7Ni3BOzOZeozJh4g8wHwYDVR0j BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4 MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4 NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5 Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMyMzgzMDMwM2EzNjM4M2EzMTMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzIzMTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAAA aAARMA0GCSqGSIb3DQEBCwUAA4IBAQAWYPJs0u2y4O8EQ8ioSz+/yzjeYaHxaYAa /W3JssI4rYDGoamhp0ghrRc2/xIOU952a78n6FYWedZjNOe9YcxGovTlVmwqaDUb b1f+Wo/Vms95iclOjhbIbqOugmJ+zQ14v7/g6enyrfHrA6900yY6gxUetuzQHB0S FSD58xxgW6Mr/ea+0efv8FXUdnOM807kv/nOvw3/SvuUQ6nfgTcD6EcVeOUqTwS8 hoiPzD6g/DbMWwvkUxHqGhH2rHzOxNtGIU9OUmBPWvRRAXhw0hKJr42AZmASHWzJ Y0mgAL1fw3PDoXAlcHno9tYxIoUAvdQ0DFL+GhbBHQXMUvzUcJ14 -----END CERTIFICATE-----Generated at Sun Jan 25 14:52:37 2026 by rpki-client