This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a643030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a643030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: WgoM/ZNplxAAfUVYS7jRyYNxYFr0GnnvcSbhoWK9hhE= Subject key identifier: D5:5F:2E:2A:3B:57:B7:25:A8:A3:C8:46:63:F2:12:E1:A8:5C:B3:DA Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 3BCAC77E377A6331B0E7C5E67FFCC4E9AA62146E Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a643030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:46 +0000 ROA not before: Tue 06 Jan 2026 20:48:46 +0000 ROA not after: Tue 05 Jan 2027 20:53:46 +0000 asID: 269809 IP address blocks: 2803:c4e0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ca:c7:7e:37:7a:63:31:b0:e7:c5:e6:7f:fc:c4:e9:aa:62:14:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:46 2026 GMT Not After : Jan 5 20:53:46 2027 GMT Subject: CN=D55F2E2A3B57B725A8A3C84663F212E1A85CB3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:a2:65:88:94:a5:85:1e:99:cf:55:a4:e8: 8f:1d:f0:4d:52:e0:f2:2d:81:ba:92:46:84:98:1b: 9e:62:72:ec:cf:94:36:cd:66:2c:7a:ea:59:37:bd: d0:7e:ef:d9:f6:3e:82:ec:17:29:f5:52:69:9c:70: 7b:e2:48:d0:33:27:05:5a:5f:b4:5d:31:65:0b:04: 59:66:39:5e:c7:83:04:28:03:7a:1a:4c:7c:d3:f4: d8:42:8c:bc:6b:c6:c3:b4:fb:69:4d:40:3e:42:a1: d7:9c:a3:60:7e:09:f9:90:75:2d:90:a7:12:a6:64: f7:29:94:9e:ee:4d:ff:a6:42:64:e6:21:73:28:d6: 1d:bc:4a:fe:1e:47:80:45:59:18:b5:33:b4:42:59: 9c:59:77:8f:1a:e6:56:20:91:58:d7:59:a6:e3:b9: 1a:ce:f1:58:b2:a1:72:43:f8:34:86:65:d3:3d:54: 23:71:87:b7:35:b1:b7:e4:5d:43:b1:8b:fe:42:34: 69:8c:7a:d9:8b:93:d7:10:25:6c:22:8c:38:5a:2a: eb:9e:54:56:04:d9:b5:27:6f:f0:83:85:f4:37:c2: 6d:b6:eb:ad:12:27:1a:2c:d6:0c:e2:4e:b9:64:30: 11:41:f3:bf:58:19:c4:0d:07:bc:d2:94:79:2a:d1: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5F:2E:2A:3B:57:B7:25:A8:A3:C8:46:63:F2:12:E1:A8:5C:B3:DA X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a643030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:d000::/36 Signature Algorithm: sha256WithRSAEncryption 55:4d:20:3a:26:51:aa:ed:29:73:9c:21:8b:2c:88:ec:9f:d3: 6f:43:0c:96:4f:cd:b0:76:91:15:10:c2:7c:18:20:0e:4c:30: 8c:84:9b:09:a3:f0:4b:09:e9:67:8d:0e:db:01:32:a5:09:10: c1:06:6b:6e:3c:56:17:f7:e6:de:01:cd:36:bc:ee:f6:2a:b6: 16:98:c3:25:75:1a:47:23:77:c5:6b:20:40:a0:84:5e:f0:ca: 13:b1:69:5f:99:28:43:da:f4:bf:b6:f7:0a:25:59:18:e3:61: 66:fe:f9:e0:c9:21:53:23:ce:06:ad:3b:4f:bb:d9:4f:c2:d9: 85:4a:03:ff:2e:32:cb:a2:30:f1:40:d9:2d:65:90:a1:e2:fb: 7d:2b:ff:e5:65:79:81:74:c5:0c:33:77:15:62:50:01:69:55: a5:34:a8:3e:3c:3a:a0:db:b4:58:a8:d5:4d:a5:fb:80:5c:29: d3:fb:bb:37:50:d6:8d:99:5e:56:77:d3:22:4d:3f:62:5e:ca: 64:ee:28:96:54:6a:f2:0a:75:23:06:f6:12:92:af:69:92:cc: 55:69:38:25:c4:5d:46:11:f6:54:98:5a:e0:f7:25:0c:b4:fa: a9:46:18:28:bf:b2:ff:f9:a2:c5:f2:34:37:ca:31:88:44:de: 43:ba:64:14 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUO8rHfjd6YzGw58Xmf/zE6apiFG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDZaFw0yNzAxMDUyMDUzNDZaMDMxMTAvBgNV BAMTKEQ1NUYyRTJBM0I1N0I3MjVBOEEzQzg0NjYzRjIxMkUxQTg1Q0IzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qaJliJSlhR6Zz1Wk6I8d8E1S 4PItgbqSRoSYG55icuzPlDbNZix66lk3vdB+79n2PoLsFyn1UmmccHviSNAzJwVa X7RdMWULBFlmOV7HgwQoA3oaTHzT9NhCjLxrxsO0+2lNQD5Codeco2B+CfmQdS2Q pxKmZPcplJ7uTf+mQmTmIXMo1h28Sv4eR4BFWRi1M7RCWZxZd48a5lYgkVjXWabj uRrO8ViyoXJD+DSGZdM9VCNxh7c1sbfkXUOxi/5CNGmMetmLk9cQJWwijDhaKuue VFYE2bUnb/CDhfQ3wm22660SJxos1gziTrlkMBFB879YGcQNB7zSlHkq0bwVAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU1V8uKjtXtyWoo8hGY/IS4ahcs9owHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhNjQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8Tg0DANBgkqhkiG9w0BAQsFAAOCAQEAVU0gOiZRqu0pc5whiyyI7J/T b0MMlk/NsHaRFRDCfBggDkwwjISbCaPwSwnpZ40O2wEypQkQwQZrbjxWF/fm3gHN Nrzu9iq2FpjDJXUaRyN3xWsgQKCEXvDKE7FpX5koQ9r0v7b3CiVZGONhZv754Mkh UyPOBq07T7vZT8LZhUoD/y4yy6Iw8UDZLWWQoeL7fSv/5WV5gXTFDDN3FWJQAWlV pTSoPjw6oNu0WKjVTaX7gFwp0/u7N1DWjZleVnfTIk0/Yl7KZO4ollRq8gp1Iwb2 EpKvaZLMVWk4JcRdRhH2VJha4PclDLT6qUYYKL+y//mixfI0N8oxiETeQ7pkFA== -----END CERTIFICATE-----Generated at Thu Jan 29 05:04:18 2026 by rpki-client