This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: RtjjYpnGKoIKn6sgPtatDJcw9YRO6zP/RgbFYLyuU4s= Subject key identifier: F1:ED:E3:1A:D9:63:E1:6F:BF:94:98:11:F7:B6:D1:C9:FB:D8:EA:CA Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 4F4106AAFEAB43F26350DE3C4996431E3C4151B5 Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:45 +0000 ROA not before: Tue 06 Jan 2026 20:48:45 +0000 ROA not after: Tue 05 Jan 2027 20:53:45 +0000 asID: 269809 IP address blocks: 2803:c4e0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:41:06:aa:fe:ab:43:f2:63:50:de:3c:49:96:43:1e:3c:41:51:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:45 2026 GMT Not After : Jan 5 20:53:45 2027 GMT Subject: CN=F1EDE31AD963E16FBF949811F7B6D1C9FBD8EACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:4d:a6:49:7f:0d:12:29:0a:5c:25:17:ac: 82:ee:76:01:d6:2f:5a:8f:31:d5:f9:a9:8e:7f:30: 1e:8d:f6:71:76:5a:9e:70:49:72:e3:eb:39:ef:3d: 8d:56:69:9b:42:94:1d:56:6f:3f:b9:5b:6e:03:2f: d3:b9:d4:57:e5:85:ff:de:00:f7:9e:3d:66:50:20: 1a:2f:81:95:7e:3a:49:b4:dd:04:ed:c7:2f:8b:ae: ab:8e:0c:9a:5e:ef:c6:a3:3f:ad:c8:80:72:c6:bd: a6:7c:21:2c:ab:f1:a8:ab:17:8c:c6:b2:cb:a4:11: 5a:98:7e:42:86:ed:b1:b6:d8:6c:83:78:ad:b8:94: 82:f3:1f:44:3d:13:60:7b:6d:ab:4f:76:c3:b9:a2: 5f:2d:bc:c5:db:5a:6b:cf:84:62:6f:e2:2f:20:60: 91:5b:03:24:b0:cd:d2:70:e5:3b:88:be:f5:8b:f0: 00:ed:ca:e2:78:79:5b:0d:9f:ad:7b:40:cf:9f:09: 6b:a7:8b:69:6f:d9:ee:2e:e7:25:8f:6c:9c:17:77: 66:8e:4f:be:83:a8:a3:0c:9a:94:e1:c7:05:c0:c0: ef:bc:74:6b:a8:a1:6c:aa:93:3e:e3:6d:22:bc:e4: b9:a3:5a:77:60:4a:a4:bd:a5:ca:e4:4a:e1:81:f5: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:ED:E3:1A:D9:63:E1:6F:BF:94:98:11:F7:B6:D1:C9:FB:D8:EA:CA X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:da:10:f5:df:42:ae:f4:31:e5:34:3c:b2:38:62:27:cf:ac: e1:20:e4:1b:df:41:b8:47:b8:2d:ef:1d:a7:5d:ee:4f:b1:64: 87:ea:5a:75:10:f8:e0:cd:87:f6:d8:e2:2f:ee:ab:4a:fa:20: 79:50:0e:5e:f4:25:48:95:15:62:14:e7:ab:dd:59:4c:f9:52: 43:4e:6d:cd:38:38:de:64:15:41:79:8d:ab:9b:a5:ff:41:d4: 85:f7:dd:22:8a:a0:7e:73:ca:c3:d7:4b:74:47:38:ff:36:ff: 98:05:7b:19:3a:f5:cf:2b:57:b9:7f:bd:32:79:49:4d:16:6d: 37:d4:89:39:28:62:68:89:3b:0b:26:34:f2:33:d4:b6:25:0b: 6c:f6:91:4e:b4:ac:dc:95:cb:c2:10:93:4a:37:a0:81:a3:1c: cb:31:35:eb:a5:8a:86:5d:0e:07:61:86:76:b6:e0:ff:7a:b2: 20:0a:2b:c2:14:a1:17:6a:fa:1f:0f:87:61:ed:c8:3b:ec:24: fe:06:db:f2:c1:ea:f1:03:67:d8:50:39:0f:d5:ff:bc:3e:88: 3e:cd:6f:64:89:4d:7b:99:74:e1:c7:14:58:63:aa:3e:ac:87: b1:b6:2b:12:34:3f:aa:50:c0:17:2b:fb:9a:66:5a:58:48:ee: e5:52:b2:71 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUT0EGqv6rQ/JjUN48SZZDHjxBUbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDVaFw0yNzAxMDUyMDUzNDVaMDMxMTAvBgNV BAMTKEYxRURFMzFBRDk2M0UxNkZCRjk0OTgxMUY3QjZEMUM5RkJEOEVBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GE2mSX8NEikKXCUXrILudgHW L1qPMdX5qY5/MB6N9nF2Wp5wSXLj6znvPY1WaZtClB1Wbz+5W24DL9O51Fflhf/e APeePWZQIBovgZV+Okm03QTtxy+LrquODJpe78ajP63IgHLGvaZ8ISyr8airF4zG ssukEVqYfkKG7bG22GyDeK24lILzH0Q9E2B7batPdsO5ol8tvMXbWmvPhGJv4i8g YJFbAySwzdJw5TuIvvWL8ADtyuJ4eVsNn617QM+fCWuni2lv2e4u5yWPbJwXd2aO T76DqKMMmpThxwXAwO+8dGuooWyqkz7jbSK85LmjWndgSqS9pcrkSuGB9WIbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU8e3jGtlj4W+/lJgR97bRyfvY6sowHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8TgUDANBgkqhkiG9w0BAQsFAAOCAQEAK9oQ9d9CrvQx5TQ8sjhiJ8+s 4SDkG99BuEe4Le8dp13uT7Fkh+padRD44M2H9tjiL+6rSvogeVAOXvQlSJUVYhTn q91ZTPlSQ05tzTg43mQVQXmNq5ul/0HUhffdIoqgfnPKw9dLdEc4/zb/mAV7GTr1 zytXuX+9MnlJTRZtN9SJOShiaIk7CyY08jPUtiULbPaRTrSs3JXLwhCTSjeggaMc yzE166WKhl0OB2GGdrbg/3qyIAorwhShF2r6Hw+HYe3IO+wk/gbb8sHq8QNn2FA5 D9X/vD6IPs1vZIlNe5l04ccUWGOqPqyHsbYrEjQ/qlDAFyv7mmZaWEju5VKycQ== -----END CERTIFICATE-----Generated at Thu Jan 29 05:03:53 2026 by rpki-client