This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa File: 323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa (raw, json) Hash identifier: P4OPMI0bTuAkg9pZYMlgUMTqmhjRTwTVowGAiTUvCrE= Subject key identifier: E7:A8:13:EF:69:8A:19:4E:43:53:6D:0F:A3:15:DF:DD:D4:B9:53:30 Certificate issuer: /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0 Certificate serial: 2C33EF2D1199C4C6430CD1D0D05564CA7D0F9F2D Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa Signing time: Tue 06 Jan 2026 19:32:03 +0000 ROA not before: Tue 06 Jan 2026 19:27:03 +0000 ROA not after: Tue 05 Jan 2027 19:32:03 +0000 asID: 3356 IP address blocks: 2801:1a:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:33:ef:2d:11:99:c4:c6:43:0c:d1:d0:d0:55:64:ca:7d:0f:9f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0 Validity Not Before: Jan 6 19:27:03 2026 GMT Not After : Jan 5 19:32:03 2027 GMT Subject: CN=E7A813EF698A194E43536D0FA315DFDDD4B95330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:29:28:2e:17:c8:68:f5:34:31:60:c1:b8: 0b:4d:6a:2b:dc:fa:59:7b:47:d1:93:1e:12:e6:77: 89:0d:13:0c:df:b3:c2:e0:4a:ea:5f:08:74:cf:8c: 80:dd:af:6e:1f:5d:2f:27:5e:2b:4f:b4:34:b7:9e: e6:6c:6a:b3:06:b1:a5:99:2f:95:7e:24:6b:17:91: a0:63:17:a6:5a:8d:9e:e5:19:2c:64:9e:db:4f:95: a3:a9:82:cc:0d:78:55:e7:f7:bd:ae:75:50:41:44: 98:1d:95:53:9c:e5:73:47:f4:16:9a:2a:9e:71:23: df:85:33:24:3f:07:2a:5b:1b:59:aa:ca:05:f9:42: 1e:3f:42:65:c1:70:40:e5:5f:1a:47:a1:e9:fc:04: 9e:69:f7:4f:e3:fa:40:e9:cc:38:08:b8:6c:bf:c1: e0:31:29:76:56:9d:06:b0:b8:9a:db:2f:c5:43:75: 5b:18:70:ca:b5:26:75:91:53:57:fb:c0:60:1e:04: 2d:ed:27:7a:be:d7:63:02:5d:46:cf:28:6d:e9:36: f4:d0:70:35:37:aa:12:ca:6d:a2:43:65:36:cf:ed: 3f:03:74:0a:ee:af:e2:ae:84:52:bb:6f:93:08:9f: f1:ac:8e:4d:33:b7:95:21:ff:34:6b:f2:97:2b:53: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:13:EF:69:8A:19:4E:43:53:6D:0F:A3:15:DF:DD:D4:B9:53:30 X509v3 Authority Key Identifier: keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e2033333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a:3000::/48 Signature Algorithm: sha256WithRSAEncryption 61:8c:ef:ec:a5:6c:e8:aa:5d:30:79:46:db:e9:c0:5d:56:13: f6:c8:45:e4:2d:27:fe:40:08:a8:b6:41:1f:82:9f:a6:1a:5e: 06:3b:4b:a1:31:b7:81:26:5e:07:df:3a:a6:f7:59:99:a8:31: f3:24:52:94:c8:88:32:06:45:f5:3d:72:20:08:3e:6f:32:cf: 71:b9:bd:e7:b4:39:5f:72:eb:32:40:fc:41:76:5e:a0:26:4d: ec:ea:a7:e1:b6:fa:39:ec:db:77:f6:5b:f7:2d:b9:bf:db:8f: c8:6c:cf:d9:f4:dc:1c:e7:79:58:dc:b3:ba:9c:c1:06:6e:47: b5:59:4d:fd:53:16:5d:ab:4e:33:72:f7:08:05:b0:8f:38:24: 31:14:78:17:13:4b:d2:55:94:e8:e9:bf:f1:8b:b9:e4:44:ae: c7:6e:cb:f2:23:ce:15:2d:55:41:a4:ab:43:86:03:aa:fd:ab: 0d:9a:1b:ca:13:4b:22:fb:73:b1:b1:d4:02:29:73:82:7d:94: 5d:a6:25:bf:38:2c:fc:45:c9:bb:a9:b0:9d:ba:ae:90:4e:f7: b1:6f:0c:2b:99:00:7e:4f:b4:48:79:e3:7d:9f:a5:18:13:c8: 8b:5c:f0:ee:4b:4d:bd:e2:85:64:fd:db:5d:66:65:83:f2:07: 2d:80:da:2b -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIULDPvLRGZxMZDDNHQ0FVkyn0Pny0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwRUVCOUQxRTg1QkYzMDNFNUZBQjE4NUY1QTM5N0I4 MzQzMzNGMDAeFw0yNjAxMDYxOTI3MDNaFw0yNzAxMDUxOTMyMDNaMDMxMTAvBgNV BAMTKEU3QTgxM0VGNjk4QTE5NEU0MzUzNkQwRkEzMTVERkRERDRCOTUzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6SkoLhfIaPU0MWDBuAtNaivc +ll7R9GTHhLmd4kNEwzfs8LgSupfCHTPjIDdr24fXS8nXitPtDS3nuZsarMGsaWZ L5V+JGsXkaBjF6ZajZ7lGSxknttPlaOpgswNeFXn972udVBBRJgdlVOc5XNH9Baa Kp5xI9+FMyQ/BypbG1mqygX5Qh4/QmXBcEDlXxpHoen8BJ5p90/j+kDpzDgIuGy/ weAxKXZWnQawuJrbL8VDdVsYcMq1JnWRU1f7wGAeBC3tJ3q+12MCXUbPKG3pNvTQ cDU3qhLKbaJDZTbP7T8DdArur+KuhFK7b5MIn/Gsjk0zt5Uh/zRr8pcrUwR7AgMB AAGjggLNMIICyTAdBgNVHQ4EFgQU56gT72mKGU5DU20PoxXf3dS5UzAwHwYDVR0j BBgwFoAUEg7rnR6FvzA+X6sYX1o5e4NDM/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMDAzMUFGOTE0MDMzMEY0OUQ5NkE5OTYyMDNDMjMzMzY2 QUY3NDUwMzIzNjBDNzJBM0U0ODM1Nzg1ODlDNTcwLzAvMTIwRUVCOUQxRTg1QkYz MDNFNUZBQjE4NUY1QTM5N0I4MzQzMzNGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjBFRUI5RDFFODVCRjMwM0U1 RkFCMTg1RjVBMzk3QjgzNDMzM0YwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDAwMzFBRjkxNDAzMzBGNDlEOTZBOTk2MjAzQzIzMzM2NkFGNzQ1MDMy MzYwQzcyQTNFNDgzNTc4NTg5QzU3MC8wLzMyMzgzMDMxM2EzMTYxM2EzMzMwMzAz MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA GjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBhjO/spWzoql0weUbb6cBdVhP2yEXkLSf+ QAiotkEfgp+mGl4GO0uhMbeBJl4H3zqm91mZqDHzJFKUyIgyBkX1PXIgCD5vMs9x ub3ntDlfcusyQPxBdl6gJk3s6qfhtvo57Nt39lv3Lbm/24/IbM/Z9Nwc53lY3LO6 nMEGbke1WU39UxZdq04zcvcIBbCPOCQxFHgXE0vSVZTo6b/xi7nkRK7HbsvyI84V LVVBpKtDhgOq/asNmhvKE0si+3OxsdQCKXOCfZRdpiW/OCz8Rcm7qbCduq6QTvex bwwrmQB+T7RIeeN9n6UYE8iLXPDuS0294oVk/dtdZmWD8gctgNor -----END CERTIFICATE-----Generated at Sun Jan 25 08:30:45 2026 by rpki-client