This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a343030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a343030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: Grnxr66z9Id/4RIk4Fa4GV6oYYdA7XTAI5Lmz92p0XY= Subject key identifier: 93:8D:FF:0C:7C:60:AC:77:8F:99:0F:F8:99:7A:9D:84:82:FE:6E:79 Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 4A292F0CD5B5CA047539773BDCA5A43AE4137C66 Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a343030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:44 +0000 ROA not before: Tue 06 Jan 2026 20:48:44 +0000 ROA not after: Tue 05 Jan 2027 20:53:44 +0000 asID: 269809 IP address blocks: 2803:c4e0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:29:2f:0c:d5:b5:ca:04:75:39:77:3b:dc:a5:a4:3a:e4:13:7c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:44 2026 GMT Not After : Jan 5 20:53:44 2027 GMT Subject: CN=938DFF0C7C60AC778F990FF8997A9D8482FE6E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:08:64:4f:4a:57:4a:b1:91:7e:9b:6a:93: aa:4c:4b:7d:e5:4d:95:ff:c5:dd:97:22:83:d9:1e: 5b:f1:1e:70:de:64:96:5c:09:a6:17:c2:48:72:cb: 49:f5:5c:35:62:9a:a1:aa:7d:38:38:1c:77:f9:14: ae:6b:d5:a3:da:3a:92:c1:0f:e2:7f:a1:05:39:e8: 1f:56:5c:40:b8:7a:12:31:cd:67:10:12:25:02:5e: e6:d5:7d:1d:0d:c2:dd:f6:87:74:ac:6d:b0:20:01: eb:55:02:65:77:e6:35:73:bb:ce:8e:3f:b4:ae:60: fd:d8:b1:2b:4f:17:cf:15:36:39:f9:cb:30:c7:ed: c9:35:3d:bc:90:d6:2a:58:74:36:5a:3a:c7:1a:df: 66:ed:ca:08:b9:4b:ae:4c:be:b9:c1:6a:2f:67:02: 27:19:3d:72:a1:41:df:c5:18:0f:a5:a4:95:40:c5: 5c:fa:a7:52:21:54:19:01:15:16:a6:12:53:c7:78: 09:ae:32:10:5e:ad:c4:e5:30:36:61:00:3c:16:ac: fb:c8:91:c1:bf:f0:f8:7d:41:ff:12:ee:9a:a0:15: be:76:13:9c:3c:20:31:15:c5:a8:43:f2:25:d9:81: 88:92:97:0d:8e:e8:a6:de:00:00:92:32:0c:8d:98: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8D:FF:0C:7C:60:AC:77:8F:99:0F:F8:99:7A:9D:84:82:FE:6E:79 X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a343030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 67:03:71:e1:3c:0c:71:4d:d1:35:50:a2:ca:d6:02:61:c5:18: 27:a7:c3:f0:e5:2b:90:70:9d:65:54:43:15:7e:5e:21:b3:a4: 7b:1a:a3:8e:81:6e:d6:82:08:7a:bb:cc:4d:7d:3a:50:42:30: 5e:e6:24:18:df:19:65:8a:75:7a:90:92:d9:bd:db:00:ab:ba: ff:a7:eb:23:1e:d3:99:2b:3b:91:95:2a:34:1b:02:06:70:97: b1:24:f8:eb:fb:f0:f9:6b:b6:52:f1:1e:e3:d2:12:7b:ac:66: 47:c9:e1:ca:be:8a:cd:12:3e:51:64:fe:88:be:17:f7:1e:bc: d8:4f:9e:1a:22:ed:0c:b9:5c:3b:71:97:88:47:3c:3c:8b:9d: e6:e4:47:eb:d5:8d:7d:c5:01:ce:31:ba:87:ff:a8:1e:13:4e: 63:68:e4:0a:98:62:3a:98:04:0a:1e:ed:92:cd:f1:bd:1d:58: 47:9f:3e:a4:2f:56:6f:ef:ae:7e:e8:0f:f8:63:6f:5a:0f:ff: ed:74:b3:a7:69:03:46:ca:83:d4:83:f4:b6:92:44:56:c9:79: d1:de:03:c5:f9:64:84:66:81:96:00:70:ce:70:5b:64:ef:2c: 2b:98:08:70:f2:0c:9d:40:8b:2d:07:98:1f:9a:46:b3:13:05: 9d:4a:5a:c2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSikvDNW1ygR1OXc73KWkOuQTfGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDRaFw0yNzAxMDUyMDUzNDRaMDMxMTAvBgNV BAMTKDkzOERGRjBDN0M2MEFDNzc4Rjk5MEZGODk5N0E5RDg0ODJGRTZFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYQhkT0pXSrGRfptqk6pMS33l TZX/xd2XIoPZHlvxHnDeZJZcCaYXwkhyy0n1XDVimqGqfTg4HHf5FK5r1aPaOpLB D+J/oQU56B9WXEC4ehIxzWcQEiUCXubVfR0Nwt32h3SsbbAgAetVAmV35jVzu86O P7SuYP3YsStPF88VNjn5yzDH7ck1PbyQ1ipYdDZaOsca32btygi5S65MvrnBai9n AicZPXKhQd/FGA+lpJVAxVz6p1IhVBkBFRamElPHeAmuMhBercTlMDZhADwWrPvI kcG/8Ph9Qf8S7pqgFb52E5w8IDEVxahD8iXZgYiSlw2O6KbeAACSMgyNmFhzAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUk43/DHxgrHePmQ/4mXqdhIL+bnkwHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8TgQDANBgkqhkiG9w0BAQsFAAOCAQEAZwNx4TwMcU3RNVCiytYCYcUY J6fD8OUrkHCdZVRDFX5eIbOkexqjjoFu1oIIervMTX06UEIwXuYkGN8ZZYp1epCS 2b3bAKu6/6frIx7TmSs7kZUqNBsCBnCXsST46/vw+Wu2UvEe49ISe6xmR8nhyr6K zRI+UWT+iL4X9x682E+eGiLtDLlcO3GXiEc8PIud5uRH69WNfcUBzjG6h/+oHhNO Y2jkCphiOpgECh7tks3xvR1YR58+pC9Wb++ufugP+GNvWg//7XSzp2kDRsqD1IP0 tpJEVsl50d4DxflkhGaBlgBwznBbZO8sK5gIcPIMnUCLLQeYH5pGsxMFnUpawg== -----END CERTIFICATE-----Generated at Thu Jan 29 05:04:19 2026 by rpki-client