This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: ac2L+7Ywr378VGgsjP6KfcyFdkeOuHsq5EXSjMz/Orw= Subject key identifier: DB:56:19:09:8C:04:29:7A:D0:E0:5B:9C:9C:85:66:1D:89:A2:4D:41 Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 46BA47BBDECFE4B9510898AAC3ED00BD867C817A Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:49 +0000 ROA not before: Tue 06 Jan 2026 19:39:49 +0000 ROA not after: Tue 05 Jan 2027 19:44:49 +0000 asID: 263762 IP address blocks: 2803:5180:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ba:47:bb:de:cf:e4:b9:51:08:98:aa:c3:ed:00:bd:86:7c:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:49 2026 GMT Not After : Jan 5 19:44:49 2027 GMT Subject: CN=DB5619098C04297AD0E05B9C9C85661D89A24D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:31:a4:6d:ab:b3:00:3f:a3:4c:a2:6a:3f: 38:39:ce:f9:ed:c6:ad:ce:ce:ba:7c:78:6b:80:9a: db:c9:b4:0f:39:53:6d:71:14:4b:95:66:78:cb:87: 3f:a4:ec:43:fd:77:6f:f7:35:b6:c2:d6:6d:3b:78: 55:92:a5:f3:4d:96:ed:58:44:07:67:bf:c9:bf:af: 11:fe:da:72:2b:e7:87:92:d6:66:e1:a2:7e:3c:22: a2:8b:ce:be:b5:04:4e:2f:3b:8f:e8:20:f8:89:3c: 0d:4e:c2:04:c9:22:79:be:bc:c9:76:c4:71:51:c7: c9:c4:fe:bd:4f:bd:86:af:63:17:0c:e6:d2:23:ae: 2c:41:60:73:dd:b3:9f:a4:09:d4:79:bc:fd:9f:97: fd:b6:b0:98:b2:b8:49:e8:55:36:77:b5:77:47:cb: a3:5d:47:b8:47:b6:58:72:4b:25:cf:5c:bf:c4:a0: 33:cc:af:07:f9:0e:47:e0:5c:65:7e:05:15:60:83: 74:2a:84:f8:d1:1b:4a:a3:99:17:5e:b4:cd:1c:8b: 9a:ac:df:9f:d6:7b:c3:5b:2f:fc:39:19:36:a6:31: 5c:e1:70:99:76:0f:04:31:b4:8b:c4:66:7c:f8:bb: 36:c0:26:c6:9e:49:27:60:66:84:91:85:ca:cc:f2: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:19:09:8C:04:29:7A:D0:E0:5B:9C:9C:85:66:1D:89:A2:4D:41 X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:7000::/36 Signature Algorithm: sha256WithRSAEncryption 81:70:4a:d9:0c:50:fe:cb:a3:d7:da:ca:84:8d:e5:2f:45:a3: 3c:33:42:6c:e0:af:13:f5:88:24:16:da:ae:8c:0e:b2:35:a8: d1:ad:a3:ac:94:89:3f:c5:2a:04:39:ed:ed:9b:83:2a:42:5f: e3:40:d3:75:42:f3:24:a5:00:ed:90:c9:1f:d7:92:4c:dc:27: 12:6f:96:9d:e1:65:ff:46:5a:44:1a:4f:d5:da:0e:e5:ca:9c: c1:2e:4c:9b:eb:07:14:d6:21:f6:09:27:92:36:86:63:58:3d: 47:df:ab:1c:f8:d4:76:41:de:8d:ae:d1:1c:04:e1:3a:0c:9a: 5f:e9:6f:97:db:4b:66:db:06:77:d4:e2:06:25:d4:65:18:3a: 2f:dd:56:b5:02:1a:c2:18:19:3c:38:cc:fc:97:91:b6:fa:09: 9c:35:13:7e:31:7a:75:1a:48:54:47:69:10:93:5f:e9:da:d6: 14:d9:87:0b:bb:ac:8b:da:c4:0c:f4:47:2c:dd:ec:7f:c3:7a: 1c:c0:ab:09:af:f9:1c:bd:12:35:0d:b5:d0:4a:6d:45:95:4f: dd:21:5f:65:f8:02:5d:62:b0:dc:8c:c2:c7:a9:9d:d9:6e:72: 0a:c0:46:e6:da:9c:59:d9:f9:30:33:89:e9:09:c1:ab:4d:ad: 3b:a9:ef:1d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIURrpHu97P5LlRCJiqw+0AvYZ8gXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDlaFw0yNzAxMDUxOTQ0NDlaMDMxMTAvBgNV BAMTKERCNTYxOTA5OEMwNDI5N0FEMEUwNUI5QzlDODU2NjFEODlBMjRENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPjGkbauzAD+jTKJqPzg5zvnt xq3Ozrp8eGuAmtvJtA85U21xFEuVZnjLhz+k7EP9d2/3NbbC1m07eFWSpfNNlu1Y RAdnv8m/rxH+2nIr54eS1mbhon48IqKLzr61BE4vO4/oIPiJPA1OwgTJInm+vMl2 xHFRx8nE/r1PvYavYxcM5tIjrixBYHPds5+kCdR5vP2fl/22sJiyuEnoVTZ3tXdH y6NdR7hHtlhySyXPXL/EoDPMrwf5DkfgXGV+BRVgg3QqhPjRG0qjmRdetM0ci5qs 35/We8NbL/w5GTamMVzhcJl2DwQxtIvEZnz4uzbAJsaeSSdgZoSRhcrM8iXHAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU21YZCYwEKXrQ4FucnIVmHYmiTUEwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzcz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAcDANBgkqhkiG9w0BAQsFAAOCAQEAgXBK2QxQ/suj19rKhI3lL0Wj PDNCbOCvE/WIJBbarowOsjWo0a2jrJSJP8UqBDnt7ZuDKkJf40DTdULzJKUA7ZDJ H9eSTNwnEm+WneFl/0ZaRBpP1doO5cqcwS5Mm+sHFNYh9gknkjaGY1g9R9+rHPjU dkHeja7RHAThOgyaX+lvl9tLZtsGd9TiBiXUZRg6L91WtQIawhgZPDjM/JeRtvoJ nDUTfjF6dRpIVEdpEJNf6drWFNmHC7usi9rEDPRHLN3sf8N6HMCrCa/5HL0SNQ21 0EptRZVP3SFfZfgCXWKw3IzCx6md2W5yCsBG5tqcWdn5MDOJ6QnBq02tO6nvHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:19:02 2026 by rpki-client