This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa File: 323830303a3232303a3a2f33322d3438203d3e203133353835.roa (raw, json) Hash identifier: ZTtmkg2h4nQt6iGHeamSEwi2bC0FtyzPS1Fl6IfyUIc= Subject key identifier: AE:8B:2C:C1:F1:29:26:8C:F3:17:BF:A8:A2:42:96:52:1D:61:7F:C6 Certificate issuer: /CN=194BC878A0116733917FAE71A98D799CA4442D66 Certificate serial: 463A3456B88DC4C3472F9F5CBF2262B9B8ED9F8B Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa Signing time: Tue 06 Jan 2026 20:53:57 +0000 ROA not before: Tue 06 Jan 2026 20:48:57 +0000 ROA not after: Tue 05 Jan 2027 20:53:57 +0000 asID: 13585 IP address blocks: 2800:220::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 09:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3a:34:56:b8:8d:c4:c3:47:2f:9f:5c:bf:22:62:b9:b8:ed:9f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66 Validity Not Before: Jan 6 20:48:57 2026 GMT Not After : Jan 5 20:53:57 2027 GMT Subject: CN=AE8B2CC1F129268CF317BFA8A24296521D617FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:6b:67:c7:7f:6d:56:92:2c:18:27:e1:c8: 60:47:f9:9f:80:4e:f9:b4:8b:95:62:8f:cc:46:85: 72:08:8b:b4:8b:3b:50:d5:d3:d8:6e:8d:f1:a2:00: 8a:8e:87:52:8f:50:83:f1:86:f9:6a:35:b3:4a:c3: 54:63:57:af:69:6d:d1:30:94:3d:41:58:8f:e5:1a: 7b:75:eb:40:01:84:f3:80:d5:16:f7:40:a9:bb:3f: 99:fc:46:07:d0:e8:d7:5f:0c:21:8d:dc:59:a2:65: a8:2d:9e:22:c8:37:c9:ff:ee:b8:22:ef:22:20:22: c6:8b:42:fd:54:f6:dc:78:bb:c2:35:c9:74:df:41: 62:3c:3c:c4:f8:84:cc:30:14:7b:f6:95:b3:64:e6: f6:ea:ff:4b:c3:63:4d:4d:37:ac:7e:79:88:7d:dd: 7a:b2:7c:fe:bf:dc:88:8c:ad:85:5d:f4:d1:57:d7: 98:77:55:58:78:7a:9a:84:32:31:cb:bc:53:7d:3e: 91:ce:55:6f:fc:c4:12:7e:fd:59:cc:74:00:56:1a: 02:2b:5c:36:2e:47:06:09:4b:2f:2f:36:3f:64:c4: b6:b7:1f:a6:c9:38:52:d0:8a:9a:82:41:b4:09:40: 1c:ef:79:17:b5:fd:17:36:7f:c9:75:f5:f0:57:be: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:2C:C1:F1:29:26:8C:F3:17:BF:A8:A2:42:96:52:1D:61:7F:C6 X509v3 Authority Key Identifier: keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:220::/32 Signature Algorithm: sha256WithRSAEncryption c7:9e:b0:65:f4:a1:f7:d5:97:fc:41:6a:27:6f:55:df:f9:9b: 0b:62:e4:9c:b6:f2:52:f8:02:ce:63:b2:bf:f0:d2:b6:fc:55: 85:05:9e:8f:81:56:01:a0:2c:b3:54:69:c6:da:fe:69:fe:fe: a9:ea:cf:28:73:01:a0:14:b3:3d:86:1d:b6:fe:7e:cc:70:91: a8:f2:6f:60:59:92:52:07:c3:bf:45:e2:13:30:f8:ed:5b:cf: c9:a6:90:bd:77:54:65:8e:e1:7d:68:61:18:aa:c6:e0:2f:53: 97:2a:02:aa:1c:67:71:13:50:83:04:ee:1e:f6:ba:2f:08:23: 2e:be:4a:5e:df:e3:56:ee:2f:a8:c3:f4:d5:e8:b2:0a:70:86: 06:57:e7:c4:66:13:10:29:50:f8:c4:a4:3f:48:ff:c7:9f:97: 39:10:74:d4:ef:6e:06:77:9d:d2:6b:45:c1:d0:e3:fb:fe:a4: 7d:1a:00:43:d1:01:cb:6b:31:ad:0d:5b:7f:41:27:95:f9:0b: 89:a3:f0:fc:f6:c8:0d:27:24:c9:6b:de:9f:50:70:42:3a:46: 61:fc:48:73:e3:25:b2:bf:9a:aa:1b:32:db:79:86:0e:1a:d7: 8b:21:6b:75:b1:c4:d2:8c:54:3f:92:89:17:7e:8c:a9:42:f1: 35:73:34:51 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIURjo0VriNxMNHL59cvyJiubjtn4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0QkM4NzhBMDExNjczMzkxN0ZBRTcxQTk4RDc5OUNB NDQ0MkQ2NjAeFw0yNjAxMDYyMDQ4NTdaFw0yNzAxMDUyMDUzNTdaMDMxMTAvBgNV BAMTKEFFOEIyQ0MxRjEyOTI2OENGMzE3QkZBOEEyNDI5NjUyMUQ2MTdGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyGtnx39tVpIsGCfhyGBH+Z+A Tvm0i5Vij8xGhXIIi7SLO1DV09hujfGiAIqOh1KPUIPxhvlqNbNKw1RjV69pbdEw lD1BWI/lGnt160ABhPOA1Rb3QKm7P5n8RgfQ6NdfDCGN3FmiZagtniLIN8n/7rgi 7yIgIsaLQv1U9tx4u8I1yXTfQWI8PMT4hMwwFHv2lbNk5vbq/0vDY01NN6x+eYh9 3XqyfP6/3IiMrYVd9NFX15h3VVh4epqEMjHLvFN9PpHOVW/8xBJ+/VnMdABWGgIr XDYuRwYJSy8vNj9kxLa3H6bJOFLQipqCQbQJQBzveRe1/Rc2f8l19fBXvqrfAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUrosswfEpJozzF7+ookKWUh1hf8YwHwYDVR0j BBgwFoAUGUvIeKARZzORf65xqY15nKRELWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENDJDOUY2MjAyRTZCMkUwQjBENzIwOTIxNTU4RThDNjNB RTZEMzcwNTMzNTg1NjYyRjJENjk0M0Y5MDlCQjdDLzAvMTk0QkM4NzhBMDExNjcz MzkxN0ZBRTcxQTk4RDc5OUNBNDQ0MkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTRCQzg3OEEwMTE2NzMzOTE3 RkFFNzFBOThENzk5Q0E0NDQyRDY2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDQyQzlGNjIwMkU2QjJFMEIwRDcyMDkyMTU1OEU4QzYzQUU2RDM3MDUz MzU4NTY2MkYyRDY5NDNGOTA5QkI3Qy8wLzMyMzgzMDMwM2EzMjMyMzAzYTNhMmYz MzMyMmQzNDM4MjAzZDNlMjAzMTMzMzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAACIDANBgkq hkiG9w0BAQsFAAOCAQEAx56wZfSh99WX/EFqJ29V3/mbC2LknLbyUvgCzmOyv/DS tvxVhQWej4FWAaAss1Rpxtr+af7+qerPKHMBoBSzPYYdtv5+zHCRqPJvYFmSUgfD v0XiEzD47VvPyaaQvXdUZY7hfWhhGKrG4C9TlyoCqhxncRNQgwTuHva6LwgjLr5K Xt/jVu4vqMP01eiyCnCGBlfnxGYTEClQ+MSkP0j/x5+XORB01O9uBned0mtFwdDj +/6kfRoAQ9EBy2sxrQ1bf0EnlfkLiaPw/PbIDSckyWven1BwQjpGYfxIc+Mlsr+a qhsy23mGDhrXiyFrdbHE0oxUP5KJF36MqULxNXM0UQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:04:27 2026 by rpki-client