This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a333030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a333030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: jUyeZexQz6SVRKQZCjicuh3lKIjuCMyJ/6IwBbpLW3A= Subject key identifier: 62:16:30:24:36:1A:6E:DF:77:63:95:AC:96:E9:D3:D8:80:3F:B3:F1 Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 3CE832BE651839803D071D4860AA67FA653FE872 Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a333030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:48 +0000 ROA not before: Tue 06 Jan 2026 19:39:48 +0000 ROA not after: Tue 05 Jan 2027 19:44:48 +0000 asID: 263762 IP address blocks: 2803:5180:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e8:32:be:65:18:39:80:3d:07:1d:48:60:aa:67:fa:65:3f:e8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:48 2026 GMT Not After : Jan 5 19:44:48 2027 GMT Subject: CN=62163024361A6EDF776395AC96E9D3D8803FB3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:6f:e6:7b:f4:d2:fc:c2:e8:20:b8:78:b3: 2d:ba:d4:fb:55:1b:d0:f8:b1:9d:b6:33:e9:d6:24: 6d:05:31:1d:6c:a9:7b:ee:4a:2a:76:20:93:e7:08: 7d:98:2f:64:08:58:5d:bc:e0:60:23:f3:08:9c:6b: 0d:ac:89:1c:81:2c:d7:3a:5a:13:67:3b:22:af:23: 8b:14:40:3f:d0:4e:7b:a1:d5:18:b1:07:4a:8a:76: 12:32:6c:c8:f1:be:f4:05:b0:25:8b:07:5c:eb:58: 32:c4:53:db:cf:1e:b8:21:a5:ca:66:27:6f:48:ff: d5:c3:22:3a:65:19:58:bb:f0:f4:c7:21:6d:95:2f: 2a:25:7a:ec:09:c6:1c:4a:97:b2:76:e8:5c:ec:3d: 6f:d0:58:7f:8c:21:38:e5:17:a0:57:fe:dd:0e:37: 38:f8:78:8a:af:2a:e9:d3:2b:d9:30:5f:fe:fe:0c: fc:ad:eb:cb:07:b7:f4:cc:1e:1c:a2:e4:0d:aa:b2: 7e:0c:5b:e1:9b:5a:fe:9e:72:8a:59:b3:4b:99:b0: 8f:66:45:f5:9d:57:0c:d2:05:b7:df:ca:11:ce:b6: 2a:39:5d:0d:77:e8:af:b0:2f:75:2e:38:8d:35:e8: 70:ac:93:9a:36:2b:68:29:ef:3c:72:7b:59:92:9f: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:30:24:36:1A:6E:DF:77:63:95:AC:96:E9:D3:D8:80:3F:B3:F1 X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a333030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:3000::/36 Signature Algorithm: sha256WithRSAEncryption 62:94:6e:08:75:cd:0e:32:bf:8b:b7:b9:53:c0:b5:74:71:7e: 1c:a8:b2:57:35:43:56:bc:34:5b:e3:17:54:b5:03:0e:f3:bc: 5e:0c:e9:d7:5e:04:55:8a:a5:dc:40:61:12:47:b0:1c:df:25: c1:6d:08:a7:e1:4d:64:b2:e1:94:a1:d5:7d:98:b3:6a:8c:e3: 2a:06:4d:40:e8:45:d6:8f:a8:2d:37:a3:5d:61:ff:d1:57:fb: 37:2e:a4:ac:d4:56:ce:0a:d1:8f:61:73:9d:7c:a8:99:3e:6f: 78:2c:c0:bb:45:e3:82:bb:57:f3:9d:a3:25:ad:38:de:6b:91: f8:44:ce:1a:35:02:cf:3c:cc:74:2f:58:f6:f5:7a:98:9e:43: 27:e1:d6:df:22:e8:85:7b:da:2b:a5:79:b5:ca:27:93:59:1b: 2f:8d:e3:25:c4:09:74:3d:65:dd:79:96:54:c0:ed:5e:48:31: 97:ce:af:d6:46:78:bd:71:ec:4b:a6:7b:58:30:c0:de:04:57: d3:15:db:10:7a:34:39:e7:01:64:6e:34:73:ce:33:ba:78:30: ab:57:0e:7d:ff:84:02:8b:5c:37:df:5a:52:87:50:2c:89:fb: 4d:91:79:09:00:08:0e:7b:e6:7c:e1:85:f6:55:af:66:3f:31: c0:ee:71:e3 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUPOgyvmUYOYA9Bx1IYKpn+mU/6HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDhaFw0yNzAxMDUxOTQ0NDhaMDMxMTAvBgNV BAMTKDYyMTYzMDI0MzYxQTZFREY3NzYzOTVBQzk2RTlEM0Q4ODAzRkIzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zG/me/TS/MLoILh4sy261PtV G9D4sZ22M+nWJG0FMR1sqXvuSip2IJPnCH2YL2QIWF284GAj8wicaw2siRyBLNc6 WhNnOyKvI4sUQD/QTnuh1RixB0qKdhIybMjxvvQFsCWLB1zrWDLEU9vPHrghpcpm J29I/9XDIjplGVi78PTHIW2VLyoleuwJxhxKl7J26FzsPW/QWH+MITjlF6BX/t0O Nzj4eIqvKunTK9kwX/7+DPyt68sHt/TMHhyi5A2qsn4MW+GbWv6ecopZs0uZsI9m RfWdVwzSBbffyhHOtio5XQ136K+wL3UuOI016HCsk5o2K2gp7zxye1mSn78ZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUYhYwJDYabt93Y5WslunT2IA/s/EwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAMDANBgkqhkiG9w0BAQsFAAOCAQEAYpRuCHXNDjK/i7e5U8C1dHF+ HKiyVzVDVrw0W+MXVLUDDvO8Xgzp114EVYql3EBhEkewHN8lwW0Ip+FNZLLhlKHV fZizaozjKgZNQOhF1o+oLTejXWH/0Vf7Ny6krNRWzgrRj2FznXyomT5veCzAu0Xj grtX852jJa043muR+ETOGjUCzzzMdC9Y9vV6mJ5DJ+HW3yLohXvaK6V5tconk1kb L43jJcQJdD1l3XmWVMDtXkgxl86v1kZ4vXHsS6Z7WDDA3gRX0xXbEHo0OecBZG40 c84zungwq1cOff+EAotcN99aUodQLIn7TZF5CQAIDnvmfOGF9lWvZj8xwO5x4w== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:33 2026 by rpki-client