This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a363030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a363030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: /Ckzz4dRPsepUQJ2seZ/6YMl76SdPIRBwRkfrdHeE18= Subject key identifier: 21:5F:81:54:43:DC:E7:D1:AD:EB:ED:32:57:1B:A7:6B:B5:BA:10:26 Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 12C56422806219BEF7AC2F94FDE0DDFE91A7F673 Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a363030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:45 +0000 ROA not before: Tue 06 Jan 2026 19:39:45 +0000 ROA not after: Tue 05 Jan 2027 19:44:45 +0000 asID: 263762 IP address blocks: 2803:5180:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:64:22:80:62:19:be:f7:ac:2f:94:fd:e0:dd:fe:91:a7:f6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:45 2026 GMT Not After : Jan 5 19:44:45 2027 GMT Subject: CN=215F815443DCE7D1ADEBED32571BA76BB5BA1026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:39:5b:e5:23:80:2f:b7:f0:ef:9a:00:ef: d3:f4:62:29:a7:9c:69:31:04:57:3b:40:f2:91:3d: 82:b5:50:4c:63:26:a4:ba:8a:d6:68:df:c2:9e:bc: 8c:21:f6:a2:06:f1:7d:8e:f0:46:1d:e2:72:c5:11: 03:bc:25:7e:b2:3e:5c:e5:3d:0f:a3:8c:51:08:02: a7:45:00:b0:94:c2:9a:4a:0a:39:d2:1a:f1:8c:5a: b1:37:ff:24:a0:93:75:e9:69:a4:26:50:a0:a3:c6: 49:d2:82:77:45:f8:6d:28:5d:d0:55:40:20:94:dd: 5a:2c:54:bd:63:50:cd:73:ea:79:5b:44:40:b7:7b: 3a:bb:8b:8f:7b:5b:fe:4e:a6:bf:2a:a9:6a:26:86: 63:79:d6:fa:f6:9f:41:6a:a2:99:a6:a4:2f:cd:ba: e0:b1:2f:a1:81:9f:7a:db:29:3b:06:04:cc:0d:48: e5:63:78:3a:9a:9b:f1:d0:fb:b7:47:f0:b1:3e:25: 98:f6:f4:ee:0f:13:62:41:a2:dc:f1:94:7f:55:52: 8a:f7:ab:41:db:49:87:7e:11:6d:4f:66:e5:ee:df: 64:3e:94:22:b3:fc:99:85:38:2d:d2:16:84:d8:81: c5:84:46:2e:4a:c1:95:c5:7a:4d:4a:c3:d4:46:c7: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:81:54:43:DC:E7:D1:AD:EB:ED:32:57:1B:A7:6B:B5:BA:10:26 X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a363030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:6000::/36 Signature Algorithm: sha256WithRSAEncryption a4:12:88:78:48:bc:81:85:5d:5a:b7:2a:d1:d5:a8:66:e4:80: cd:75:29:48:c6:29:11:db:01:9e:0a:52:af:24:e7:03:c1:5f: f7:a2:24:2d:56:90:7e:2f:7b:2c:50:04:27:92:de:5d:89:14: f6:2d:9c:1e:0c:fe:c0:c5:ae:92:c8:ea:a6:79:b9:a9:55:0d: 05:61:58:61:1c:c1:1d:9a:55:6d:ec:d3:f6:6f:96:1f:ea:75: 12:08:f9:30:62:9c:58:37:83:9a:51:45:45:33:2f:56:ec:60: 4b:c3:5a:c3:b9:1c:10:6a:c4:f8:99:f7:bf:f4:27:f6:44:d5: e6:25:d6:f0:80:f0:04:06:16:92:f9:f1:d8:26:ca:88:e4:42: ed:8b:17:3a:3d:c4:6f:36:74:bb:09:2a:7b:94:1f:d0:25:af: fc:4b:d2:d3:42:15:15:42:4a:88:fe:df:3a:2a:0e:9a:75:dc: e1:63:8a:71:30:46:47:87:d4:1b:84:21:a5:1f:38:63:c3:3b: 84:05:3b:b8:40:cb:9e:48:f4:c5:63:2a:52:25:f7:92:86:16: d9:7a:8a:cc:56:0e:e6:bd:67:79:a0:09:dc:ef:25:64:79:5b: 3e:36:de:9e:a6:bd:15:c5:d9:56:07:dd:21:df:58:90:69:5d: 36:56:68:92 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEsVkIoBiGb73rC+U/eDd/pGn9nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDVaFw0yNzAxMDUxOTQ0NDVaMDMxMTAvBgNV BAMTKDIxNUY4MTU0NDNEQ0U3RDFBREVCRUQzMjU3MUJBNzZCQjVCQTEwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkDlb5SOAL7fw75oA79P0Yimn nGkxBFc7QPKRPYK1UExjJqS6itZo38KevIwh9qIG8X2O8EYd4nLFEQO8JX6yPlzl PQ+jjFEIAqdFALCUwppKCjnSGvGMWrE3/ySgk3XpaaQmUKCjxknSgndF+G0oXdBV QCCU3VosVL1jUM1z6nlbREC3ezq7i497W/5Opr8qqWomhmN51vr2n0FqopmmpC/N uuCxL6GBn3rbKTsGBMwNSOVjeDqam/HQ+7dH8LE+JZj29O4PE2JBotzxlH9VUor3 q0HbSYd+EW1PZuXu32Q+lCKz/JmFOC3SFoTYgcWERi5KwZXFek1Kw9RGx9i9AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUIV+BVEPc59Gt6+0yVxuna7W6ECYwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAYDANBgkqhkiG9w0BAQsFAAOCAQEApBKIeEi8gYVdWrcq0dWoZuSA zXUpSMYpEdsBngpSryTnA8Ff96IkLVaQfi97LFAEJ5LeXYkU9i2cHgz+wMWuksjq pnm5qVUNBWFYYRzBHZpVbezT9m+WH+p1Egj5MGKcWDeDmlFFRTMvVuxgS8Naw7kc EGrE+Jn3v/Qn9kTV5iXW8IDwBAYWkvnx2CbKiORC7YsXOj3EbzZ0uwkqe5Qf0CWv /EvS00IVFUJKiP7fOioOmnXc4WOKcTBGR4fUG4QhpR84Y8M7hAU7uEDLnkj0xWMq UiX3koYW2XqKzFYO5r1neaAJ3O8lZHlbPjbenqa9FcXZVgfdId9YkGldNlZokg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:29 2026 by rpki-client