This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa File: 323830313a3130343a3a2f34302d3437203d3e203237383238.roa (raw, json) Hash identifier: TZjVd4bqk/ralGRVZ7cz9xtEDcBTdWKPuqda7NLa+mY= Subject key identifier: CF:F1:34:42:C6:53:7F:3F:05:A2:D1:7B:F0:40:47:E6:C1:29:F6:69 Certificate issuer: /CN=5D81157E960567670F7461B44557EFEA818501D2 Certificate serial: 70461CFC2E95C1AAD6A173303073F5075DB54488 Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa Signing time: Tue 06 Jan 2026 19:34:27 +0000 ROA not before: Tue 06 Jan 2026 19:29:27 +0000 ROA not after: Tue 05 Jan 2027 19:34:27 +0000 asID: 27828 IP address blocks: 2801:104::/40 maxlen: 47 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:1c:fc:2e:95:c1:aa:d6:a1:73:30:30:73:f5:07:5d:b5:44:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2 Validity Not Before: Jan 6 19:29:27 2026 GMT Not After : Jan 5 19:34:27 2027 GMT Subject: CN=CFF13442C6537F3F05A2D17BF04047E6C129F669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:59:3a:fa:19:ce:2b:d6:82:6d:95:b3:0c: da:7d:d7:c0:b1:a0:d5:cf:38:9f:d0:03:55:25:6f: 34:3d:bc:9e:63:e5:88:2e:39:a0:3e:58:7f:97:59: 78:3e:1a:d7:54:a9:9f:d5:2c:42:90:63:21:28:40: 96:b5:3b:1b:c1:0d:ca:7c:b1:f7:4d:12:ec:20:3c: ce:bb:22:ec:13:66:42:2c:82:b1:81:5a:a1:0e:51: 2e:76:ce:b6:db:55:53:ac:e4:13:91:10:98:c3:80: 6a:94:8b:2f:8d:9f:81:9b:98:0d:d5:3d:59:ea:dd: 7d:6f:47:ef:e5:9e:5e:c5:83:3d:c2:24:46:00:a5: fb:f8:43:3e:4f:37:18:56:2f:b2:8b:eb:a9:2e:dd: e8:18:9c:00:22:d8:63:82:f4:56:17:ef:44:04:0f: 83:22:9d:a2:34:5a:6e:03:e5:16:18:51:b3:15:8f: 5e:ee:f6:07:f5:82:31:dc:95:50:6b:81:65:e7:b4: 31:db:24:1a:66:12:58:6c:68:1b:78:7e:b6:e9:17: 7d:b6:e6:10:af:f2:97:d3:5f:e8:aa:1c:14:9f:8e: 37:30:1c:92:e3:3a:1b:2c:f8:6c:0f:3b:2c:05:91: c2:72:81:35:0f:03:3e:80:a4:83:11:60:5e:9b:93: 64:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:34:42:C6:53:7F:3F:05:A2:D1:7B:F0:40:47:E6:C1:29:F6:69 X509v3 Authority Key Identifier: keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3437203d3e203237383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:104::/40 Signature Algorithm: sha256WithRSAEncryption 04:4d:86:6c:89:96:fd:aa:cb:f9:ad:57:46:84:50:9a:ef:66: 5c:94:c5:4f:18:01:41:78:68:fe:78:da:d8:ed:98:33:85:40: c8:73:df:fb:c6:b3:e6:75:b1:33:50:34:a4:a9:5e:be:c3:c3: fd:85:7d:79:c0:ef:7b:7d:a3:43:b1:21:47:92:68:18:f7:7b: a2:49:63:dd:3e:27:f7:2d:97:97:e9:48:a5:92:25:28:43:39: da:e3:22:2b:ec:4e:de:60:93:e3:01:4d:b5:c4:6b:08:27:d8: ae:f6:b2:6c:68:0c:a7:5d:99:ee:7f:9c:77:49:c8:65:f6:9e: 7b:11:f9:5c:15:5d:3b:28:af:5b:b5:fe:df:20:22:23:8c:1d: 94:e4:40:f1:d7:4a:e5:0f:17:a6:aa:5a:d4:94:55:44:41:08: 30:b2:f5:c7:e1:44:e0:90:e4:5f:e2:c1:80:94:43:89:07:0c: 16:03:d4:3b:b8:91:d7:58:b1:7f:68:d3:53:84:32:dc:5a:08: 43:09:a0:cb:d7:ce:2b:2e:23:22:e0:7a:ab:10:ec:89:b8:cb: 93:a5:18:cd:62:e9:cd:6e:4d:0a:d0:a4:13:bd:c7:66:57:06: 41:b9:ed:50:c9:d5:68:eb:94:d9:10:e9:7d:28:f2:5d:de:fb: ae:55:31:2a -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUcEYc/C6VwarWoXMwMHP1B121RIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4 MTg1MDFEMjAeFw0yNjAxMDYxOTI5MjdaFw0yNzAxMDUxOTM0MjdaMDMxMTAvBgNV BAMTKENGRjEzNDQyQzY1MzdGM0YwNUEyRDE3QkYwNDA0N0U2QzEyOUY2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC671k6+hnOK9aCbZWzDNp918Cx oNXPOJ/QA1UlbzQ9vJ5j5YguOaA+WH+XWXg+GtdUqZ/VLEKQYyEoQJa1OxvBDcp8 sfdNEuwgPM67IuwTZkIsgrGBWqEOUS52zrbbVVOs5BOREJjDgGqUiy+Nn4GbmA3V PVnq3X1vR+/lnl7Fgz3CJEYApfv4Qz5PNxhWL7KL66ku3egYnAAi2GOC9FYX70QE D4MinaI0Wm4D5RYYUbMVj17u9gf1gjHclVBrgWXntDHbJBpmElhsaBt4frbpF322 5hCv8pfTX+iqHBSfjjcwHJLjOhss+GwPOywFkcJygTUPAz6ApIMRYF6bk2T1AgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUz/E0QsZTfz8FotF78EBH5sEp9mkwHwYDVR0j BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2 NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3 NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzgzMDMxM2EzMTMwMzQzYTNhMmYz NDMwMmQzNDM3MjAzZDNlMjAzMjM3MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBBAAwDQYJ KoZIhvcNAQELBQADggEBAARNhmyJlv2qy/mtV0aEUJrvZlyUxU8YAUF4aP542tjt mDOFQMhz3/vGs+Z1sTNQNKSpXr7Dw/2FfXnA73t9o0OxIUeSaBj3e6JJY90+J/ct l5fpSKWSJShDOdrjIivsTt5gk+MBTbXEawgn2K72smxoDKddme5/nHdJyGX2nnsR +VwVXTsor1u1/t8gIiOMHZTkQPHXSuUPF6aqWtSUVURBCDCy9cfhROCQ5F/iwYCU Q4kHDBYD1Du4kddYsX9o01OEMtxaCEMJoMvXzisuIyLgeqsQ7Im4y5OlGM1i6c1u TQrQpBO9x2ZXBkG57VDJ1WjrlNkQ6X0o8l3e+65VMSo= -----END CERTIFICATE-----Generated at Sun Jan 25 16:06:42 2026 by rpki-client