This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a393030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a393030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: z8bAbmtZ2awGPKPgc+BCmW/WvA2rXn5g78fmEzZK1GA= Subject key identifier: 6A:40:57:5E:FF:2F:32:AA:D5:55:9D:2B:B3:65:87:3F:4A:E5:FA:5F Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 366508D5B6B81FC989E7405B19AD7C2791D773BC Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a393030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:47 +0000 ROA not before: Tue 06 Jan 2026 19:39:47 +0000 ROA not after: Tue 05 Jan 2027 19:44:47 +0000 asID: 263762 IP address blocks: 2803:5180:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:65:08:d5:b6:b8:1f:c9:89:e7:40:5b:19:ad:7c:27:91:d7:73:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:47 2026 GMT Not After : Jan 5 19:44:47 2027 GMT Subject: CN=6A40575EFF2F32AAD5559D2BB365873F4AE5FA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:9c:7b:3d:51:c3:ad:1a:d1:01:c3:58:f9: 97:3d:29:8b:f8:d5:b4:bb:81:d3:f7:66:03:32:37: 27:54:52:24:99:b8:6b:cf:07:68:13:2a:39:af:c0: 68:37:bf:5f:28:a0:d9:78:b0:2b:0c:23:ea:ea:f4: 73:c4:a3:eb:8b:49:92:ca:a4:69:08:21:b6:f0:99: 18:1d:eb:45:9d:a6:eb:37:0a:3f:20:a5:d4:28:83: 4c:36:ea:92:d9:7f:2b:95:c9:e6:db:af:28:79:31: 7b:26:15:ab:25:63:65:1e:52:f8:06:5d:4e:5b:0f: 01:1e:bc:d5:19:3d:ec:68:da:1f:5b:da:88:fd:a4: 8d:30:a5:fb:3d:a5:49:a3:e8:2c:3d:23:82:3a:e2: 89:3a:d2:dc:bf:2a:53:b0:61:5f:e5:25:d1:d4:73: 97:8b:84:7d:9a:18:20:5f:da:71:e6:37:7b:98:08: ae:c7:42:25:88:09:f8:c4:c4:54:f3:bf:16:86:72: 26:69:fd:c6:1e:77:a8:d5:eb:86:fe:e5:b7:c6:61: 2a:44:91:dd:4f:71:de:6e:7b:e3:e4:fa:0f:ef:62: d1:2e:46:89:4f:13:a5:09:56:5f:07:34:a7:4d:24: f7:2f:d2:b9:13:22:28:8d:78:7d:d8:1a:7f:be:e2: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:57:5E:FF:2F:32:AA:D5:55:9D:2B:B3:65:87:3F:4A:E5:FA:5F X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a393030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:9000::/36 Signature Algorithm: sha256WithRSAEncryption cd:1d:4a:2e:27:2c:98:d0:a6:15:8a:be:52:8c:d1:ab:93:83: b2:52:c8:0a:b5:e6:bc:6c:b2:ea:a3:84:5b:2e:04:83:75:59: a1:a0:ff:cd:57:23:f6:f6:44:df:53:d1:a7:4d:70:4c:a9:ed: ed:e1:41:05:93:81:81:d3:74:d6:b8:46:cd:13:e1:f7:5c:93: dc:5a:52:55:ef:6a:62:81:b6:cb:68:63:f4:b6:c7:f9:5f:7f: 08:ef:f4:1c:db:83:29:66:a1:c2:7d:67:fb:3b:5e:ae:f2:3d: b7:8f:f6:5f:ed:e4:37:2d:8d:93:82:6e:6d:5d:45:28:b2:96: b4:b9:0e:2c:67:91:8b:11:61:d6:d0:7e:df:2a:f7:95:83:12: 31:ce:f8:bb:da:1f:33:6a:8f:32:57:de:a7:65:af:b7:91:4b: 98:aa:63:e7:f1:ea:97:87:7e:0b:ac:0b:17:e7:67:71:3e:ce: b7:ca:e8:37:2a:bc:5a:a0:92:f2:f6:7a:2c:d4:1c:76:49:6d: d2:dc:29:d3:dd:ff:bb:9e:d1:96:eb:90:6d:37:7b:3b:2c:de: 8b:0c:61:66:bc:2c:f5:04:48:f4:6c:06:dd:ec:a9:3c:cb:7f: 78:9b:1b:f1:f5:08:dd:ad:5d:1c:bf:2d:af:7f:fc:70:b5:95: 58:86:0c:c4 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNmUI1ba4H8mJ50BbGa18J5HXc7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDdaFw0yNzAxMDUxOTQ0NDdaMDMxMTAvBgNV BAMTKDZBNDA1NzVFRkYyRjMyQUFENTU1OUQyQkIzNjU4NzNGNEFFNUZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIpx7PVHDrRrRAcNY+Zc9KYv4 1bS7gdP3ZgMyNydUUiSZuGvPB2gTKjmvwGg3v18ooNl4sCsMI+rq9HPEo+uLSZLK pGkIIbbwmRgd60Wdpus3Cj8gpdQog0w26pLZfyuVyebbryh5MXsmFaslY2UeUvgG XU5bDwEevNUZPexo2h9b2oj9pI0wpfs9pUmj6Cw9I4I64ok60ty/KlOwYV/lJdHU c5eLhH2aGCBf2nHmN3uYCK7HQiWICfjExFTzvxaGciZp/cYed6jV64b+5bfGYSpE kd1Pcd5ue+Pk+g/vYtEuRolPE6UJVl8HNKdNJPcv0rkTIiiNeH3YGn++4vmrAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUakBXXv8vMqrVVZ0rs2WHP0rl+l8wHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzkz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAkDANBgkqhkiG9w0BAQsFAAOCAQEAzR1KLicsmNCmFYq+UozRq5OD slLICrXmvGyy6qOEWy4Eg3VZoaD/zVcj9vZE31PRp01wTKnt7eFBBZOBgdN01rhG zRPh91yT3FpSVe9qYoG2y2hj9LbH+V9/CO/0HNuDKWahwn1n+ztervI9t4/2X+3k Ny2Nk4JubV1FKLKWtLkOLGeRixFh1tB+3yr3lYMSMc74u9ofM2qPMlfep2Wvt5FL mKpj5/Hql4d+C6wLF+dncT7Ot8roNyq8WqCS8vZ6LNQcdklt0twp093/u57RluuQ bTd7OyzeiwxhZrws9QRI9GwG3eypPMt/eJsb8fUI3a1dHL8tr3/8cLWVWIYMxA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:19 2026 by rpki-client