This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa File: 323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa (raw, json) Hash identifier: Oa/Ce702NCiVIeeznZeFYeMJjuJRB32ZJtcvI8FBSVs= Subject key identifier: 1A:5F:6B:94:FE:EA:A5:94:B8:52:1C:20:3A:35:81:70:E8:EC:D2:1C Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Certificate serial: 12DF3E0064164F8C044906E80EE6EE2FE1E61D9D Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa Signing time: Tue 06 Jan 2026 19:35:22 +0000 ROA not before: Tue 06 Jan 2026 19:30:22 +0000 ROA not after: Tue 05 Jan 2027 19:35:22 +0000 asID: 267790 IP address blocks: 2001:13b0:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 24 Jan 2026 15:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:df:3e:00:64:16:4f:8c:04:49:06:e8:0e:e6:ee:2f:e1:e6:1d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Validity Not Before: Jan 6 19:30:22 2026 GMT Not After : Jan 5 19:35:22 2027 GMT Subject: CN=1A5F6B94FEEAA594B8521C203A358170E8ECD21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:be:b6:c8:c9:6e:df:dd:3d:6d:2d:a0:a2: ac:25:6d:01:92:0b:3d:c2:ee:b6:65:d3:a0:d7:ce: ea:bb:62:6e:6f:ca:5f:5c:3a:43:2d:70:8f:1c:b9: 54:5a:ed:4b:e1:eb:26:02:78:13:76:12:7f:d3:dd: 67:71:d9:a7:c2:03:f9:b0:cd:95:f6:8a:eb:c6:d6: 74:cd:f7:86:44:79:65:2c:3c:0a:c1:b4:c7:84:77: 14:87:a2:2f:5a:d7:95:ca:d6:15:c5:78:60:64:d0: a4:33:45:58:93:87:76:3c:45:19:1c:7c:52:77:24: 33:a3:f2:ff:bd:e0:28:d2:17:85:f8:26:6c:4a:29: 1c:20:c5:82:5a:fe:64:d7:fc:d4:9d:0a:96:98:af: 7d:f3:db:1f:4d:06:f1:b0:30:a5:4f:74:ab:1b:6b: 72:08:74:19:08:f6:2e:06:61:0e:ca:c2:c8:54:db: 55:0c:9b:13:47:6f:cc:ab:b5:c2:77:3a:2c:b9:69: 04:a5:1b:db:5f:b7:3a:7e:71:e9:97:13:d0:75:e3: ca:1c:e2:7e:c7:ef:2d:73:35:77:cc:af:92:9b:11: 43:da:98:94:d3:ee:75:fe:61:cb:0a:e3:9f:1e:9a: ff:44:73:06:fe:50:f1:e3:99:5d:7f:cf:54:9f:b3: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5F:6B:94:FE:EA:A5:94:B8:52:1C:20:3A:35:81:70:E8:EC:D2:1C X509v3 Authority Key Identifier: keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030643a3a2f34382d3438203d3e20323637373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:13b0:800d::/48 Signature Algorithm: sha256WithRSAEncryption 4f:bc:f2:e1:74:82:15:81:6d:cd:c5:dd:ed:0c:a2:0d:54:13: 96:54:73:9c:b1:d8:76:c3:41:6a:e3:09:5d:f4:8b:74:d0:0c: 26:88:0e:e0:6a:14:50:87:37:78:21:87:f5:04:e9:76:62:10: 85:af:b3:58:f9:24:ad:74:4c:27:a3:09:9d:6a:69:f3:4f:b7: f7:89:a9:f3:ee:4f:94:1f:70:b4:f1:f4:a7:65:0a:90:a3:2d: ea:ed:5f:a6:e5:09:63:4e:5a:fb:e6:13:fc:ae:f2:97:4c:ee: b8:9e:3d:e6:10:12:75:61:97:57:be:0f:32:25:8a:77:a6:4a: db:5a:d7:2a:d7:a2:11:f2:2f:fd:99:e7:b7:e2:0d:9e:ac:c3: 51:7d:af:ed:00:57:7d:8b:61:98:ad:2e:ba:0c:de:36:ed:e9: 04:80:f1:42:ab:9e:87:33:75:32:6d:3b:c1:2b:8b:0c:9f:89: 73:3d:f9:c8:d6:bb:74:2d:a4:62:14:97:cc:52:17:46:2c:82: c8:61:f1:61:2e:a4:a6:20:b2:69:7d:85:57:3c:db:1e:89:1c: 4e:4e:ae:bf:f8:c5:23:05:89:52:7b:a7:9d:45:d2:0c:83:e9: 19:d7:cb:a7:f5:20:cf:0a:75:7f:b4:81:ac:77:70:63:7f:01: 9c:23:50:60 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUEt8+AGQWT4wESQboDubuL+HmHZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz QjdDRUM1NjAeFw0yNjAxMDYxOTMwMjJaFw0yNzAxMDUxOTM1MjJaMDMxMTAvBgNV BAMTKDFBNUY2Qjk0RkVFQUE1OTRCODUyMUMyMDNBMzU4MTcwRThFQ0QyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCya762yMlu3909bS2goqwlbQGS Cz3C7rZl06DXzuq7Ym5vyl9cOkMtcI8cuVRa7Uvh6yYCeBN2En/T3Wdx2afCA/mw zZX2iuvG1nTN94ZEeWUsPArBtMeEdxSHoi9a15XK1hXFeGBk0KQzRViTh3Y8RRkc fFJ3JDOj8v+94CjSF4X4JmxKKRwgxYJa/mTX/NSdCpaYr33z2x9NBvGwMKVPdKsb a3IIdBkI9i4GYQ7KwshU21UMmxNHb8yrtcJ3Oiy5aQSlG9tftzp+cemXE9B148oc 4n7H7y1zNXfMr5KbEUPamJTT7nX+YcsK458emv9Ecwb+UPHjmV1/z1Sfs0rBAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUGl9rlP7qpZS4UhwgOjWBcOjs0hwwHwYDVR0j BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1 ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4 M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDMxM2EzMTMzNjIzMDNhMzgz MDMwNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNzM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAgAROwgA0wDQYJKoZIhvcNAQELBQADggEBAE+88uF0ghWBbc3F3e0Mog1U E5ZUc5yx2HbDQWrjCV30i3TQDCaIDuBqFFCHN3ghh/UE6XZiEIWvs1j5JK10TCej CZ1qafNPt/eJqfPuT5QfcLTx9KdlCpCjLertX6blCWNOWvvmE/yu8pdM7riePeYQ EnVhl1e+DzIlinemStta1yrXohHyL/2Z57fiDZ6sw1F9r+0AV32LYZitLroM3jbt 6QSA8UKrnoczdTJtO8EriwyfiXM9+cjWu3QtpGIUl8xSF0Ysgshh8WEupKYgsml9 hVc82x6JHE5Orr/4xSMFiVJ7p51F0gyD6RnXy6f1IM8KdX+0gax3cGN/AZwjUGA= -----END CERTIFICATE-----Generated at Wed Jan 21 05:42:38 2026 by rpki-client