This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa File: 323830333a643232303a3a2f33322d3438203d3e203532343638.roa (raw, json) Hash identifier: ZLJVm2rm2xppj/tZklWi+TDzHhEf4BhNgNBIM4TdIEw= Subject key identifier: 49:1B:30:33:B5:49:EF:F7:18:D2:39:FA:3D:31:69:DD:16:42:71:F1 Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66 Certificate serial: 3B04B4EBA7D78F395A353C9D8DE2CDB87BFE392A Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa Signing time: Tue 06 Jan 2026 19:46:36 +0000 ROA not before: Tue 06 Jan 2026 19:41:36 +0000 ROA not after: Tue 05 Jan 2027 19:46:36 +0000 asID: 52468 IP address blocks: 2803:d220::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:04:b4:eb:a7:d7:8f:39:5a:35:3c:9d:8d:e2:cd:b8:7b:fe:39:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66 Validity Not Before: Jan 6 19:41:36 2026 GMT Not After : Jan 5 19:46:36 2027 GMT Subject: CN=491B3033B549EFF718D239FA3D3169DD164271F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:fb:28:99:5c:d8:e4:f0:86:db:e2:b8:9c: 9d:95:46:ae:82:fb:4e:7d:22:1e:0d:b9:99:a0:ac: bf:c4:ad:4e:f4:1d:74:64:c7:65:fd:8b:51:29:35: 00:3a:18:22:d8:17:46:93:1c:95:9e:ae:22:c7:4a: d6:2b:ea:54:ca:a1:97:79:ef:98:b0:e8:7a:93:70: eb:73:35:99:d3:b2:31:6c:15:8c:b0:94:b7:12:0a: 76:19:f7:00:84:e2:7e:f8:71:6f:da:c9:12:36:db: a3:1e:7c:90:a2:19:6b:02:4b:12:79:2e:af:11:6d: 2e:f9:26:55:90:56:c4:f8:29:b1:7c:90:dc:db:19: 63:a3:20:75:4b:1c:32:b2:1c:bb:2c:37:6a:92:86: 48:04:c3:7d:3f:82:4d:51:08:75:b2:d8:f7:1c:0b: 72:ec:5c:69:a0:99:33:a7:16:be:df:2e:e0:4f:82: 38:7b:93:b0:47:61:27:4b:0f:c1:25:62:e0:5b:28: a7:35:c1:36:40:4e:88:9e:f6:3d:35:86:b9:9a:02: 73:f3:aa:0d:77:3e:4e:51:ed:94:9d:d2:5a:f5:38: 93:0f:a3:d1:6b:ce:55:fa:1f:95:ab:27:7f:ca:0e: 8c:c1:1b:30:67:6e:e4:c3:53:aa:af:84:63:50:75: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:30:33:B5:49:EF:F7:18:D2:39:FA:3D:31:69:DD:16:42:71:F1 X509v3 Authority Key Identifier: keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e203532343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d220::/32 Signature Algorithm: sha256WithRSAEncryption 81:d5:90:62:38:58:98:d5:dd:43:b5:8b:38:66:b1:35:3b:1d: 7e:6b:2a:f5:47:54:44:91:fe:1e:4e:eb:ba:44:25:90:c7:f4: b7:22:f3:e7:1f:be:42:1c:27:cc:69:fb:03:06:9b:d6:1f:00: 07:7a:5e:da:2e:4d:ae:03:27:1c:48:3f:55:81:84:d1:f3:ea: 50:06:b6:67:9f:3e:a5:96:70:92:3a:16:7d:c7:83:35:9c:8f: f1:da:23:83:9c:1b:3d:ee:10:63:76:81:19:8d:70:80:9a:d4: 3a:0c:8a:8e:b5:85:51:b3:c5:d5:5d:9d:dd:92:66:11:51:16: 7c:67:33:a6:2c:d2:19:ff:4e:b8:b1:4a:91:85:1f:5e:b1:b9: dc:0d:7e:c5:72:3d:b7:53:a6:31:62:56:29:77:5d:09:e0:9d: bb:01:fa:76:07:dc:ca:c6:28:07:b7:3c:82:69:9d:01:8f:81: f7:34:cb:bd:78:bf:e1:4a:3a:37:56:a2:30:73:dc:03:00:8a: cf:72:4e:0a:56:ca:c2:5f:06:08:e0:e3:6f:15:04:d7:3a:68: 19:42:a0:e9:93:1a:0d:a2:34:3d:87:98:97:c5:22:9f:69:18: 26:4c:ca:fc:d7:f0:11:09:b8:7c:9e:fd:85:8a:1c:3e:f9:4a: cf:cc:53:6f -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUOwS066fXjzlaNTydjeLNuHv+OSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVFRkZFMENCRDcw N0ZDQUU2NjAeFw0yNjAxMDYxOTQxMzZaFw0yNzAxMDUxOTQ2MzZaMDMxMTAvBgNV BAMTKDQ5MUIzMDMzQjU0OUVGRjcxOEQyMzlGQTNEMzE2OUREMTY0MjcxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3t/somVzY5PCG2+K4nJ2VRq6C +059Ih4NuZmgrL/ErU70HXRkx2X9i1EpNQA6GCLYF0aTHJWeriLHStYr6lTKoZd5 75iw6HqTcOtzNZnTsjFsFYywlLcSCnYZ9wCE4n74cW/ayRI226MefJCiGWsCSxJ5 Lq8RbS75JlWQVsT4KbF8kNzbGWOjIHVLHDKyHLssN2qShkgEw30/gk1RCHWy2Pcc C3LsXGmgmTOnFr7fLuBPgjh7k7BHYSdLD8ElYuBbKKc1wTZAToie9j01hrmaAnPz qg13Pk5R7ZSd0lr1OJMPo9FrzlX6H5WrJ3/KDozBGzBnbuTDU6qvhGNQdYpdAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUSRswM7VJ7/cY0jn6PTFp3RZCcfEwHwYDVR0j BBgwFoAUsa+K0OvTB3cpeK5e/+DL1wf8rmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVB RjE2NDJGQzQxNzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3 NzI5NzhBRTVFRkZFMENCRDcwN0ZDQUU2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFGOEFEMEVCRDMwNzc3Mjk3 OEFFNUVGRkUwQ0JENzA3RkNBRTY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIwMTU1NTA4RDQ1QUYxNjQyRkM0 MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wLzMyMzgzMDMzM2E2NDMyMzIzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9IgMA0G CSqGSIb3DQEBCwUAA4IBAQCB1ZBiOFiY1d1DtYs4ZrE1Ox1+ayr1R1REkf4eTuu6 RCWQx/S3IvPnH75CHCfMafsDBpvWHwAHel7aLk2uAyccSD9VgYTR8+pQBrZnnz6l lnCSOhZ9x4M1nI/x2iODnBs97hBjdoEZjXCAmtQ6DIqOtYVRs8XVXZ3dkmYRURZ8 ZzOmLNIZ/064sUqRhR9esbncDX7Fcj23U6YxYlYpd10J4J27Afp2B9zKxigHtzyC aZ0Bj4H3NMu9eL/hSjo3VqIwc9wDAIrPck4KVsrCXwYI4ONvFQTXOmgZQqDpkxoN ojQ9h5iXxSKfaRgmTMr81/ARCbh8nv2Fihw++UrPzFNv -----END CERTIFICATE-----Generated at Sun Jan 25 12:59:21 2026 by rpki-client