This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: Ys6zQ5eSI7URFoKUqiQpeH2m8S9q4sttV7CQKFtmrxo= Subject key identifier: 54:74:92:E9:B3:CD:13:90:BA:5C:8F:42:10:7A:A2:23:73:00:84:C6 Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 3A99CFF39C1E39E7844BAED5D05191264A840554 Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:47 +0000 ROA not before: Tue 06 Jan 2026 19:39:47 +0000 ROA not after: Tue 05 Jan 2027 19:44:47 +0000 asID: 263762 IP address blocks: 2803:5180:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:99:cf:f3:9c:1e:39:e7:84:4b:ae:d5:d0:51:91:26:4a:84:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:47 2026 GMT Not After : Jan 5 19:44:47 2027 GMT Subject: CN=547492E9B3CD1390BA5C8F42107AA223730084C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:1a:32:89:3b:d4:b6:a2:96:d2:57:5e:8c: c7:3f:f8:b7:64:49:4e:a2:b7:76:5d:31:3a:65:66: 43:d9:75:99:8c:fe:3f:4b:09:3d:b6:8d:40:00:c3: 58:2b:af:05:5d:4c:eb:1f:b9:b2:eb:e0:cd:e6:bf: af:46:47:a6:1f:61:c7:45:b1:60:06:be:b5:61:a4: db:27:d8:ea:f3:df:b6:03:76:f0:86:39:a1:3b:2b: 18:9b:4f:ef:71:f8:26:6f:19:fa:2c:7e:de:e0:a0: 23:d6:b0:8d:b7:38:61:e4:d7:5c:35:7e:98:ea:fc: 46:11:3f:5e:d8:5d:f4:05:b5:3b:65:c7:76:73:92: ad:e7:43:72:6b:95:e3:d8:47:5a:08:8a:d1:c0:43: ca:c5:42:54:4b:a4:87:64:04:8e:0c:48:cf:75:96: 9a:94:23:ae:e1:a7:06:23:d5:46:3f:d6:ce:23:8d: 0b:95:de:02:7d:ca:50:dc:b0:88:e0:10:45:8c:27: 7b:19:8f:3a:0a:58:4d:e5:44:a6:cd:04:eb:27:c2: 58:11:07:9a:76:11:72:f8:e5:b0:31:23:e6:a8:ed: db:1b:a3:e0:07:d7:36:c6:28:ab:54:e8:2a:d8:c6: bb:70:a9:62:e2:3f:b0:8a:64:92:41:a7:b6:ae:3f: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:74:92:E9:B3:CD:13:90:BA:5C:8F:42:10:7A:A2:23:73:00:84:C6 X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a323030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:2000::/36 Signature Algorithm: sha256WithRSAEncryption 3c:1e:83:ec:61:a9:be:c3:f8:72:38:8c:4c:d0:23:fb:40:bb: d1:33:7f:c5:95:3e:97:dc:66:33:bf:6d:ea:a4:b2:9d:d4:d0: 7b:2b:da:26:27:cc:55:1d:1a:e3:39:e9:15:bb:ad:c8:05:08: e2:5b:99:a5:dc:fc:7c:0a:88:f3:fb:f7:4b:00:4e:8b:12:53: 05:c4:0f:b4:fb:d9:03:e8:48:46:a2:ff:a8:35:5c:52:0f:96: 1b:36:34:b8:84:2b:b8:c7:43:24:81:32:8f:a9:d8:a2:0b:64: 98:c7:7c:3d:cb:9d:96:85:2a:e5:2a:b3:e2:8c:5b:e3:89:89: d2:54:d0:cb:f8:01:6d:da:b3:e6:0f:dd:8f:7f:8f:31:17:0a: 02:8d:43:2a:a9:d4:58:e9:6a:ee:b3:5a:52:c2:ba:52:27:9a: ed:56:31:c3:53:b1:e0:f0:5a:c4:98:15:8a:90:e3:2f:10:20: a9:32:93:83:9f:72:16:79:79:78:59:27:8f:17:e9:a4:5d:2f: e3:6d:3e:7a:c6:4e:2a:66:23:6a:17:3b:66:ea:53:7f:cd:b6: f4:dc:dc:df:93:3e:89:84:54:d1:9e:f8:28:41:7f:7b:ee:78: b2:ac:dd:f1:f5:78:b0:f0:fa:93:a1:ba:49:dd:38:6b:18:7f: 07:da:68:7c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUOpnP85weOeeES67V0FGRJkqEBVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDdaFw0yNzAxMDUxOTQ0NDdaMDMxMTAvBgNV BAMTKDU0NzQ5MkU5QjNDRDEzOTBCQTVDOEY0MjEwN0FBMjIzNzMwMDg0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYBoyiTvUtqKW0ldejMc/+Ldk SU6it3ZdMTplZkPZdZmM/j9LCT22jUAAw1grrwVdTOsfubLr4M3mv69GR6YfYcdF sWAGvrVhpNsn2Orz37YDdvCGOaE7KxibT+9x+CZvGfosft7goCPWsI23OGHk11w1 fpjq/EYRP17YXfQFtTtlx3Zzkq3nQ3JrlePYR1oIitHAQ8rFQlRLpIdkBI4MSM91 lpqUI67hpwYj1UY/1s4jjQuV3gJ9ylDcsIjgEEWMJ3sZjzoKWE3lRKbNBOsnwlgR B5p2EXL45bAxI+ao7dsbo+AH1zbGKKtU6CrYxrtwqWLiP7CKZJJBp7auPyDdAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUVHSS6bPNE5C6XI9CEHqiI3MAhMYwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAIDANBgkqhkiG9w0BAQsFAAOCAQEAPB6D7GGpvsP4cjiMTNAj+0C7 0TN/xZU+l9xmM79t6qSyndTQeyvaJifMVR0a4znpFbutyAUI4luZpdz8fAqI8/v3 SwBOixJTBcQPtPvZA+hIRqL/qDVcUg+WGzY0uIQruMdDJIEyj6nYogtkmMd8Pcud loUq5Sqz4oxb44mJ0lTQy/gBbdqz5g/dj3+PMRcKAo1DKqnUWOlq7rNaUsK6Uiea 7VYxw1Ox4PBaxJgVipDjLxAgqTKTg59yFnl5eFknjxfppF0v420+esZOKmYjahc7 ZupTf8229Nzc35M+iYRU0Z74KEF/e+54sqzd8fV4sPD6k6G6Sd04axh/B9pofA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:35 2026 by rpki-client