This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa File: 323830303a3664303a3a2f33322d3438203d3e203139383839.roa (raw, json) Hash identifier: gDQ8ppli0/DPet4C7y9zVpuRug5q1mu4bF2RmGoIjUI= Subject key identifier: 3E:A0:7B:93:A4:4D:73:ED:F5:ED:A2:AD:61:A8:7B:D0:56:15:62:44 Certificate issuer: /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB Certificate serial: 6A669DCDC5AEBFA4537963E9F291DD0E0B4F94C8 Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa Signing time: Tue 06 Jan 2026 20:57:04 +0000 ROA not before: Tue 06 Jan 2026 20:52:04 +0000 ROA not after: Tue 05 Jan 2027 20:57:04 +0000 asID: 19889 IP address blocks: 2800:6d0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:66:9d:cd:c5:ae:bf:a4:53:79:63:e9:f2:91:dd:0e:0b:4f:94:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB Validity Not Before: Jan 6 20:52:04 2026 GMT Not After : Jan 5 20:57:04 2027 GMT Subject: CN=3EA07B93A44D73EDF5EDA2AD61A87BD056156244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:5b:1b:3e:c1:fb:fe:8c:8f:e9:f8:55:25: e4:90:38:ae:09:39:4b:40:7e:b6:e9:a6:ff:b7:76: 5c:3a:2d:9e:81:69:a7:ee:1e:4b:a6:ed:5c:ce:53: bc:a6:33:14:ab:06:69:eb:d9:18:27:a2:97:1c:fc: 37:44:f7:78:e0:9a:a5:f5:20:8d:c4:e0:fc:ef:e7: 10:01:f5:b2:7b:dd:5d:27:86:db:3a:52:82:c9:bf: 29:57:58:88:f4:70:72:61:3c:0d:e5:15:7f:bd:f0: b5:04:65:25:f9:e1:d6:63:3b:3a:eb:c0:61:4d:70: fd:ba:de:63:17:70:c5:5c:bc:0f:79:2b:04:9e:fe: f1:d8:75:3a:e7:03:59:65:da:01:82:4d:87:4e:91: f9:ef:8b:69:75:c2:3c:ec:a5:fb:c4:db:90:7e:49: 70:e0:f5:95:74:f3:e6:05:93:b5:de:97:94:d9:c3: e0:b3:44:43:c7:43:ff:5b:4b:fd:21:a1:62:1c:75: 5f:f2:38:bc:9d:22:69:fa:14:4f:68:3e:bc:60:02: e1:04:c8:d4:f6:e5:aa:96:7c:bc:a2:ea:a8:5d:2d: 1f:ab:1f:b0:37:01:e2:34:77:f7:36:f8:a1:a9:b0: 9c:e5:61:c9:de:8c:52:18:11:c2:18:d5:24:0e:08: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A0:7B:93:A4:4D:73:ED:F5:ED:A2:AD:61:A8:7B:D0:56:15:62:44 X509v3 Authority Key Identifier: keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/323830303a3664303a3a2f33322d3438203d3e203139383839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:6d0::/32 Signature Algorithm: sha256WithRSAEncryption 52:ae:77:46:a0:21:0f:2f:54:1d:73:f1:21:62:0d:8f:b4:d5: f0:71:b5:6c:0b:19:eb:3c:15:f3:75:30:93:53:56:50:fa:29: 57:c9:6b:71:0f:ca:f5:cd:d9:22:da:54:75:41:02:4e:28:b7: a9:35:0c:c5:9a:5d:bb:4b:41:fe:58:b8:15:d3:a4:42:6b:02: 66:77:00:40:a2:46:bf:94:93:f2:9b:58:a2:a8:81:f9:a2:47: 22:d3:d6:df:8b:a4:50:de:fa:52:6c:c4:69:59:45:31:01:d0: 91:e0:09:8b:f0:cf:9e:51:61:c4:94:a5:83:ec:49:07:d2:82: e8:13:ea:30:7d:06:74:73:ee:f2:8c:27:e9:42:f3:06:e9:1a: 30:42:37:1e:c7:e0:ad:9c:2f:e7:f0:40:12:9e:d0:81:96:c8: f4:c8:ec:50:45:8e:f1:2e:ee:22:4a:5a:ba:2b:09:2c:27:b8: 92:36:89:0c:0f:0d:b5:aa:e9:cc:1c:4f:a9:c7:f9:13:64:3d: 9f:06:fc:1c:eb:c8:c0:ea:69:c0:90:d5:b6:4e:fc:50:6a:68: ad:56:81:5e:05:11:1c:b5:d7:39:e8:9e:06:a1:90:80:22:10: 53:f6:9f:0b:bf:d6:78:cb:93:52:98:a2:8c:9b:f1:10:6f:e0: 2b:7e:0f:68 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUamadzcWuv6RTeWPp8pHdDgtPlMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI2RkMyQjNCRUQxREFGMDVFN0Y1REY0NDVEMDg4QkIz OTY0NThFQjAeFw0yNjAxMDYyMDUyMDRaFw0yNzAxMDUyMDU3MDRaMDMxMTAvBgNV BAMTKDNFQTA3QjkzQTQ0RDczRURGNUVEQTJBRDYxQTg3QkQwNTYxNTYyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNX1sbPsH7/oyP6fhVJeSQOK4J OUtAfrbppv+3dlw6LZ6BaafuHkum7VzOU7ymMxSrBmnr2Rgnopcc/DdE93jgmqX1 II3E4Pzv5xAB9bJ73V0nhts6UoLJvylXWIj0cHJhPA3lFX+98LUEZSX54dZjOzrr wGFNcP263mMXcMVcvA95KwSe/vHYdTrnA1ll2gGCTYdOkfnvi2l1wjzspfvE25B+ SXDg9ZV08+YFk7Xel5TZw+CzREPHQ/9bS/0hoWIcdV/yOLydImn6FE9oPrxgAuEE yNT25aqWfLyi6qhdLR+rH7A3AeI0d/c2+KGpsJzlYcnejFIYEcIY1SQOCLVjAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUPqB7k6RNc+317aKtYah70FYVYkQwHwYDVR0j BBgwFoAUq2/Cs77R2vBef130RdCIuzlkWOswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERDA3MzMxMjhCMkQ4NkU4NEQyQzFGQUQyMkM3NjFBMzcz QUY4QTI0RjBGOTcwOEZCREI1NURDMTc2MDNEN0JBLzAvQUI2RkMyQjNCRUQxREFG MDVFN0Y1REY0NDVEMDg4QkIzOTY0NThFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjZGQzJCM0JFRDFEQUYwNUU3 RjVERjQ0NUQwODhCQjM5NjQ1OEVCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREQwNzMzMTI4QjJEODZFODREMkMxRkFEMjJDNzYxQTM3M0FGOEEyNEYw Rjk3MDhGQkRCNTVEQzE3NjAzRDdCQS8wLzMyMzgzMDMwM2EzNjY0MzAzYTNhMmYz MzMyMmQzNDM4MjAzZDNlMjAzMTM5MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAG0DANBgkq hkiG9w0BAQsFAAOCAQEAUq53RqAhDy9UHXPxIWINj7TV8HG1bAsZ6zwV83Uwk1NW UPopV8lrcQ/K9c3ZItpUdUECTii3qTUMxZpdu0tB/li4FdOkQmsCZncAQKJGv5ST 8ptYoqiB+aJHItPW34ukUN76UmzEaVlFMQHQkeAJi/DPnlFhxJSlg+xJB9KC6BPq MH0GdHPu8own6ULzBukaMEI3HsfgrZwv5/BAEp7QgZbI9MjsUEWO8S7uIkpauisJ LCe4kjaJDA8NtarpzBxPqcf5E2Q9nwb8HOvIwOppwJDVtk78UGporVaBXgURHLXX OeieBqGQgCIQU/afC7/WeMuTUpiijJvxEG/gK34PaA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:02:24 2026 by rpki-client