This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa File: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (raw, json) Hash identifier: ja5NzAS9zsurXlmAUDmehMIKhNL3KuIVCRoF+SlYZZk= Subject key identifier: FA:AA:29:15:82:DB:9C:9C:9F:47:7F:BB:49:70:B2:33:7C:BF:A6:9B Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 01596CF4F4942F99A6EB4B5688731A1759D173D2 Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa Signing time: Thu 22 Jan 2026 19:26:54 +0000 ROA not before: Thu 22 Jan 2026 19:21:54 +0000 ROA not after: Thu 21 Jan 2027 19:26:54 +0000 asID: 266696 IP address blocks: 2803:d20::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:6c:f4:f4:94:2f:99:a6:eb:4b:56:88:73:1a:17:59:d1:73:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Jan 22 19:21:54 2026 GMT Not After : Jan 21 19:26:54 2027 GMT Subject: CN=FAAA291582DB9C9C9F477FBB4970B2337CBFA69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:fc:b4:9f:c3:ac:20:fc:1f:ee:97:23:90: 2e:6b:7b:3e:48:9d:bd:0e:2d:ea:8d:24:cd:e3:51: f4:c5:46:a7:b1:d9:72:85:5e:d8:a4:40:a3:5b:5b: 01:87:9f:33:e9:c2:11:29:d2:ac:c0:45:95:16:2b: 17:3d:9d:66:a8:dc:1c:aa:02:77:c2:b9:9a:8e:f2: aa:df:d5:42:4e:48:53:d4:07:00:c7:61:35:f7:5d: b0:59:7e:03:89:85:ca:c0:bd:bc:1d:ea:4b:64:d7: f5:2e:f0:46:d1:ed:30:1c:12:fd:40:5a:34:db:6e: de:bb:a7:95:f1:86:49:2b:60:2e:3c:c0:e8:93:f1: 4a:b4:05:cc:0d:95:0c:d0:a9:37:07:f5:af:aa:31: 06:23:90:9b:01:7a:21:78:82:f2:03:8c:b5:4f:19: 6d:66:5f:50:b5:43:93:19:66:fc:c0:b5:b0:06:7e: 45:75:c8:fc:b0:15:65:86:c2:29:93:68:cb:93:6c: 8f:f1:bf:21:35:77:9b:0e:0d:97:c7:9b:f1:ae:79: d8:66:dc:13:c0:0a:4a:52:02:d0:b0:07:10:94:13: df:4f:5b:c3:44:99:77:30:7d:17:72:f2:5a:9e:83: 64:af:77:02:18:92:54:dd:87:9a:54:ab:b9:c3:8d: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:29:15:82:DB:9C:9C:9F:47:7F:BB:49:70:B2:33:7C:BF:A6:9B X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d20::/32 Signature Algorithm: sha256WithRSAEncryption 93:e8:1e:62:7b:2c:b6:d2:1e:a9:15:bf:9f:f9:2d:0b:7e:59: b0:1a:ba:0c:35:2c:8f:c1:b1:8d:eb:c7:4a:d0:41:d2:fc:b6: 47:c4:b5:80:90:00:6d:9e:27:17:06:a8:99:9b:46:70:24:f2: 8d:5e:69:39:40:d2:9b:68:fd:25:5a:9e:8e:09:83:50:08:20: 1b:7a:91:5d:ed:f5:20:4e:c6:d8:ab:d1:d4:76:a3:7b:e8:40: be:e2:7e:0e:cf:fe:89:13:92:bc:f8:1f:c2:7e:bb:66:0e:dc: 7e:6c:45:0c:3f:29:5e:b7:d4:79:83:48:b0:d4:5d:11:30:9d: f5:0b:0d:48:54:5f:27:6f:d6:31:e5:fa:33:5f:dc:fa:7a:fb: 6e:eb:a4:1d:60:27:0f:3b:70:7f:47:53:07:01:8f:55:36:fe: 17:8c:e1:38:e9:3e:f4:9b:5a:66:d8:18:90:af:9d:68:c3:0e: 08:0f:ea:ec:fc:69:85:a0:67:0a:1a:4b:0d:94:16:d4:10:34: bf:2b:9a:7e:c4:53:9d:ad:bf:d1:41:26:c2:e1:5e:c6:a7:7d: 5a:bb:88:de:9a:05:1f:e0:11:61:96:0f:be:65:e1:92:06:48: 17:c8:d3:5d:97:99:49:3e:a2:8f:25:e6:e0:36:bb:75:c5:24: 25:13:59:c2 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUAVls9PSUL5mm60tWiHMaF1nRc9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNjAxMjIxOTIxNTRaFw0yNzAxMjExOTI2NTRaMDMxMTAvBgNV BAMTKEZBQUEyOTE1ODJEQjlDOUM5RjQ3N0ZCQjQ5NzBCMjMzN0NCRkE2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjNPy0n8OsIPwf7pcjkC5rez5I nb0OLeqNJM3jUfTFRqex2XKFXtikQKNbWwGHnzPpwhEp0qzARZUWKxc9nWao3Byq AnfCuZqO8qrf1UJOSFPUBwDHYTX3XbBZfgOJhcrAvbwd6ktk1/Uu8EbR7TAcEv1A WjTbbt67p5XxhkkrYC48wOiT8Uq0BcwNlQzQqTcH9a+qMQYjkJsBeiF4gvIDjLVP GW1mX1C1Q5MZZvzAtbAGfkV1yPywFWWGwimTaMuTbI/xvyE1d5sODZfHm/Guedhm 3BPACkpSAtCwBxCUE99PW8NEmXcwfRdy8lqeg2SvdwIYklTdh5pUq7nDjcPDAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQU+qopFYLbnJyfR3+7SXCyM3y/ppswHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wLzMyMzgzMDMzM2E2NDMyMzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzYzNjM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw0gMA0G CSqGSIb3DQEBCwUAA4IBAQCT6B5ieyy20h6pFb+f+S0LflmwGroMNSyPwbGN68dK 0EHS/LZHxLWAkABtnicXBqiZm0ZwJPKNXmk5QNKbaP0lWp6OCYNQCCAbepFd7fUg TsbYq9HUdqN76EC+4n4Oz/6JE5K8+B/CfrtmDtx+bEUMPylet9R5g0iw1F0RMJ31 Cw1IVF8nb9Yx5fozX9z6evtu66QdYCcPO3B/R1MHAY9VNv4XjOE46T70m1pm2BiQ r51oww4ID+rs/GmFoGcKGksNlBbUEDS/K5p+xFOdrb/RQSbC4V7Gp31au4jemgUf 4BFhlg++ZeGSBkgXyNNdl5lJPqKPJebgNrt1xSQlE1nC -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:17 2026 by rpki-client