This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: fLGMEcB/akjIA1D9XhpIm7Y7ZIlvqaD+M5vawddgo5o= Subject key identifier: 49:CA:F1:2A:20:E6:A4:73:B1:3F:47:65:20:45:86:CA:82:17:B3:24 Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 58BCEA67A30E713F71A93F8F45788288FF58CCF5 Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:46 +0000 ROA not before: Tue 06 Jan 2026 19:39:46 +0000 ROA not after: Tue 05 Jan 2027 19:44:46 +0000 asID: 263762 IP address blocks: 2803:5180:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bc:ea:67:a3:0e:71:3f:71:a9:3f:8f:45:78:82:88:ff:58:cc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:46 2026 GMT Not After : Jan 5 19:44:46 2027 GMT Subject: CN=49CAF12A20E6A473B13F4765204586CA8217B324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:7b:d6:d1:84:56:88:c2:ec:c0:6b:0d:6d: 58:48:47:6d:58:d0:7a:d4:da:b3:fc:01:f7:f1:ec: 21:b2:ad:0a:32:15:da:06:a8:d3:c9:1b:b4:67:8a: b8:ac:64:8f:ac:86:3b:ce:93:e4:46:82:bc:2e:14: 96:fb:a3:0e:f5:fe:31:df:4c:72:8a:cd:37:a5:1b: 77:dc:f6:3c:0e:b4:04:3f:b7:4d:2b:97:9b:9f:a8: e5:ea:89:d6:45:57:d9:96:32:61:4b:e2:c2:6e:e3: de:12:5d:31:83:dc:10:f8:d2:dc:88:56:ce:53:15: 2d:64:fb:64:79:03:9e:94:7f:e8:10:6a:5e:0c:74: ea:29:43:1f:78:2a:87:37:88:8a:3b:72:63:c2:74: ef:0a:24:c4:83:dd:d7:4e:de:00:5a:90:58:f2:cb: 17:31:31:f9:e4:0e:97:d5:6c:64:94:c6:40:6d:7f: 6a:00:c9:63:34:05:10:a3:a4:1b:9f:93:59:b5:1e: 5e:21:ba:2c:97:4d:74:d4:52:a6:d0:e3:ad:0d:42: 73:a9:21:b2:8b:9c:d1:db:17:07:46:66:d1:6f:41: fb:35:ee:bf:99:47:4f:24:6a:96:44:3d:b6:34:14: 2c:16:95:aa:3a:3e:fa:a0:d3:89:f4:6a:7a:5b:2f: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:F1:2A:20:E6:A4:73:B1:3F:47:65:20:45:86:CA:82:17:B3:24 X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a343030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:4000::/36 Signature Algorithm: sha256WithRSAEncryption b7:0a:a3:53:d1:a5:f0:4d:13:36:d8:f5:f1:47:6f:55:43:da: 65:d6:06:e5:20:66:aa:30:b5:6b:4e:fe:9e:b7:f1:4c:78:a2: ea:bb:e9:33:a5:fb:75:bb:71:7d:6c:de:85:89:99:4f:11:35: 55:ba:30:54:31:06:f9:91:17:a0:e5:f6:be:7e:1e:0f:04:03: 9f:93:7f:ab:9f:13:88:63:c4:57:30:46:0c:7b:c2:f3:33:60: 17:85:71:57:2b:e9:a2:8c:e5:40:a7:44:a7:6d:75:1c:e0:bb: 4a:91:20:27:30:df:cb:ba:46:c1:6a:7a:bc:0f:43:70:2c:fe: 21:10:ca:79:2f:be:05:0e:b2:92:02:ab:a7:d8:ad:a0:2a:3e: 85:07:ef:b0:e2:e8:0e:a6:05:2d:29:30:c6:f4:76:c9:1a:72: d9:d0:ed:c6:f0:79:89:e6:f9:a2:9e:b8:ff:81:ca:32:5e:7c: b8:4e:15:2d:74:77:ba:59:5c:4a:1b:17:a3:d7:4b:fa:60:3e: e4:03:cb:74:d0:31:5d:0d:7f:cf:74:64:be:09:59:03:f5:cc: a4:d8:8d:0d:22:4e:38:e6:5a:38:d0:3e:b7:dd:4b:0f:a3:5b: 91:77:7e:7b:45:6f:82:38:46:68:55:33:26:df:f4:88:50:a1: 33:75:a3:6c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUWLzqZ6MOcT9xqT+PRXiCiP9YzPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDZaFw0yNzAxMDUxOTQ0NDZaMDMxMTAvBgNV BAMTKDQ5Q0FGMTJBMjBFNkE0NzNCMTNGNDc2NTIwNDU4NkNBODIxN0IzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH03vW0YRWiMLswGsNbVhIR21Y 0HrU2rP8Affx7CGyrQoyFdoGqNPJG7RnirisZI+shjvOk+RGgrwuFJb7ow71/jHf THKKzTelG3fc9jwOtAQ/t00rl5ufqOXqidZFV9mWMmFL4sJu494SXTGD3BD40tyI Vs5TFS1k+2R5A56Uf+gQal4MdOopQx94Koc3iIo7cmPCdO8KJMSD3ddO3gBakFjy yxcxMfnkDpfVbGSUxkBtf2oAyWM0BRCjpBufk1m1Hl4huiyXTXTUUqbQ460NQnOp IbKLnNHbFwdGZtFvQfs17r+ZR08kapZEPbY0FCwWlao6Pvqg04n0anpbLymbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUScrxKiDmpHOxP0dlIEWGyoIXsyQwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAQDANBgkqhkiG9w0BAQsFAAOCAQEAtwqjU9Gl8E0TNtj18UdvVUPa ZdYG5SBmqjC1a07+nrfxTHii6rvpM6X7dbtxfWzehYmZTxE1VbowVDEG+ZEXoOX2 vn4eDwQDn5N/q58TiGPEVzBGDHvC8zNgF4VxVyvpoozlQKdEp211HOC7SpEgJzDf y7pGwWp6vA9DcCz+IRDKeS++BQ6ykgKrp9itoCo+hQfvsOLoDqYFLSkwxvR2yRpy 2dDtxvB5ieb5op64/4HKMl58uE4VLXR3ullcShsXo9dL+mA+5APLdNAxXQ1/z3Rk vglZA/XMpNiNDSJOOOZaONA+t91LD6NbkXd+e0VvgjhGaFUzJt/0iFChM3WjbA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:26 2026 by rpki-client