This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa File: 323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa (raw, json) Hash identifier: +kfSjKkdokEtEhiKioTkkobqmhTlzYZAYLvBKJoR33w= Subject key identifier: A0:BD:77:90:11:69:F1:3B:E6:89:C8:8D:F3:9D:30:87:55:AB:96:F4 Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Certificate serial: 2215627728C4F75C79B07A5D8317C74826C0E674 Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa Signing time: Tue 06 Jan 2026 19:35:16 +0000 ROA not before: Tue 06 Jan 2026 19:30:16 +0000 ROA not after: Tue 05 Jan 2027 19:35:16 +0000 asID: 267790 IP address blocks: 2001:13b0:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 24 Jan 2026 15:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:15:62:77:28:c4:f7:5c:79:b0:7a:5d:83:17:c7:48:26:c0:e6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Validity Not Before: Jan 6 19:30:16 2026 GMT Not After : Jan 5 19:35:16 2027 GMT Subject: CN=A0BD77901169F13BE689C88DF39D308755AB96F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:82:8d:53:28:3e:ad:ef:22:b7:4a:b2:19: 4c:d5:f9:97:cf:90:ab:d2:72:7e:7e:18:54:84:71: 2f:d3:46:c3:4a:44:62:83:3c:72:1b:d9:da:a7:20: 6c:46:e6:d0:1f:b9:95:74:1a:0d:7a:ec:86:ab:88: a8:36:4c:88:52:18:98:08:39:51:88:66:49:fe:b8: 3c:f0:24:38:d3:7b:28:53:cc:77:e0:27:e1:c5:cc: fc:6f:d5:94:c2:8b:44:17:72:fd:14:4e:0d:03:bc: 13:f6:d0:17:de:c8:f6:10:6b:63:7e:d9:bd:11:54: cf:bd:69:05:46:e5:d8:f3:fb:37:8c:10:43:bd:51: 89:64:50:db:2a:8a:5e:10:d2:55:c3:5e:4b:4f:62: 12:35:b9:b6:86:f5:21:33:01:3d:e4:66:6c:7e:4c: fb:15:26:58:56:1e:c8:40:a0:35:31:37:7c:d6:bf: 40:3e:d8:20:1c:88:06:73:c4:cf:b1:26:7a:fb:13: 89:de:b5:f9:99:81:50:57:f1:d1:89:55:fc:97:8a: 37:cd:3e:57:de:5f:3e:7d:b1:b1:0d:ba:c9:7e:7e: 46:36:96:28:f3:cf:da:c3:16:94:86:22:42:f1:78: 8a:bf:da:9f:8f:41:a0:50:10:e4:bf:f9:15:42:89: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BD:77:90:11:69:F1:3B:E6:89:C8:8D:F3:9D:30:87:55:AB:96:F4 X509v3 Authority Key Identifier: keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030653a3a2f34382d3438203d3e20323637373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:13b0:800e::/48 Signature Algorithm: sha256WithRSAEncryption 1b:66:7b:04:29:58:2f:c9:02:51:ef:70:68:ae:e1:d2:73:d8: b9:0f:39:07:a6:a1:62:02:d8:bd:bf:c6:6d:e7:57:75:28:af: f5:6d:8f:43:2c:39:a6:21:47:54:e9:a4:4b:9b:ee:a1:2f:11: aa:14:09:10:48:f9:0d:4c:1d:00:6a:b8:5a:62:9a:09:f8:52: b9:a3:a2:ee:78:41:ca:73:b7:68:a7:27:98:5e:66:9b:9f:fd: f1:23:ef:91:dd:2a:60:ed:9f:fb:39:0d:e2:66:57:5e:c8:3b: 40:30:7b:7c:7b:12:3d:b9:92:16:fe:04:f5:1f:ab:0f:2a:89: d9:42:ad:94:34:76:b2:77:e9:56:40:46:c6:4f:92:ef:95:14: bf:2a:b1:b0:b5:6e:87:12:27:0a:0d:de:56:42:aa:01:b6:c9: 50:de:2c:fc:41:e3:2c:2a:84:1b:34:5f:e4:8c:ea:03:d0:aa: 0f:60:76:cf:b0:66:bf:09:90:e7:db:f8:29:df:00:ea:a1:e8: 75:95:3d:d1:59:34:71:98:b0:22:d3:3d:6a:c4:f5:4b:2e:4c: 20:66:ad:24:62:49:61:23:03:4b:f5:fd:04:14:96:fc:50:a2: a8:8c:e0:87:00:51:01:3e:11:4e:c7:5f:98:62:36:49:13:e4: e7:12:91:8f -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUIhVidyjE91x5sHpdgxfHSCbA5nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz QjdDRUM1NjAeFw0yNjAxMDYxOTMwMTZaFw0yNzAxMDUxOTM1MTZaMDMxMTAvBgNV BAMTKEEwQkQ3NzkwMTE2OUYxM0JFNjg5Qzg4REYzOUQzMDg3NTVBQjk2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMIKNUyg+re8it0qyGUzV+ZfP kKvScn5+GFSEcS/TRsNKRGKDPHIb2dqnIGxG5tAfuZV0Gg167IariKg2TIhSGJgI OVGIZkn+uDzwJDjTeyhTzHfgJ+HFzPxv1ZTCi0QXcv0UTg0DvBP20BfeyPYQa2N+ 2b0RVM+9aQVG5djz+zeMEEO9UYlkUNsqil4Q0lXDXktPYhI1ubaG9SEzAT3kZmx+ TPsVJlhWHshAoDUxN3zWv0A+2CAciAZzxM+xJnr7E4netfmZgVBX8dGJVfyXijfN PlfeXz59sbENusl+fkY2lijzz9rDFpSGIkLxeIq/2p+PQaBQEOS/+RVCicrLAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUoL13kBFp8TvmiciN850wh1WrlvQwHwYDVR0j BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1 ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4 M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDMxM2EzMTMzNjIzMDNhMzgz MDMwNjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczNzM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAgAROwgA4wDQYJKoZIhvcNAQELBQADggEBABtmewQpWC/JAlHvcGiu4dJz 2LkPOQemoWIC2L2/xm3nV3Uor/Vtj0MsOaYhR1TppEub7qEvEaoUCRBI+Q1MHQBq uFpimgn4Urmjou54Qcpzt2inJ5heZpuf/fEj75HdKmDtn/s5DeJmV17IO0Awe3x7 Ej25khb+BPUfqw8qidlCrZQ0drJ36VZARsZPku+VFL8qsbC1bocSJwoN3lZCqgG2 yVDeLPxB4ywqhBs0X+SM6gPQqg9gds+wZr8JkOfb+CnfAOqh6HWVPdFZNHGYsCLT PWrE9UsuTCBmrSRiSWEjA0v1/QQUlvxQoqiM4IcAUQE+EU7HX5hiNkkT5OcSkY8= -----END CERTIFICATE-----Generated at Wed Jan 21 05:42:37 2026 by rpki-client