This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa File: 323830333a623263303a3a2f33322d3438203d3e203139313639.roa (raw, json) Hash identifier: pa0jvCJFyx96BqbTO4YG3z1MvUkxUsNLH2kA++BUORw= Subject key identifier: F2:32:17:C6:17:FB:22:00:A8:BD:CB:1C:38:E9:F4:94:84:2C:EE:DD Certificate issuer: /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F Certificate serial: 78D3F14FE4E896350F27A595D0C7AF8FEF2D580B Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa Signing time: Tue 06 Jan 2026 19:13:11 +0000 ROA not before: Tue 06 Jan 2026 19:08:11 +0000 ROA not after: Tue 05 Jan 2027 19:13:11 +0000 asID: 19169 IP address blocks: 2803:b2c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 13:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d3:f1:4f:e4:e8:96:35:0f:27:a5:95:d0:c7:af:8f:ef:2d:58:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F Validity Not Before: Jan 6 19:08:11 2026 GMT Not After : Jan 5 19:13:11 2027 GMT Subject: CN=F23217C617FB2200A8BDCB1C38E9F494842CEEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:3c:c4:a4:aa:69:a9:51:c6:ff:f0:2b:ee: fb:9b:18:05:bd:62:de:2f:a4:81:3d:71:7d:32:7d: 6f:20:9d:a9:b1:00:55:a0:e5:2d:20:81:79:5e:63: 01:43:ab:e2:e1:eb:31:56:67:c1:cf:5d:78:9f:39: ee:22:92:8c:d4:88:d7:ca:f7:bf:e8:c8:87:32:0a: 11:70:d5:f2:1f:4f:50:8e:5b:2d:07:22:93:83:de: d4:7e:5f:b7:ed:05:a5:c8:90:d5:d8:99:b1:0e:18: e0:50:21:60:c9:f1:39:f6:34:28:34:c5:ab:bb:7c: 5a:09:14:4f:54:33:52:02:e7:73:35:f5:6d:95:88: 35:87:a7:76:b8:8c:4a:0d:29:62:7a:55:c7:73:60: 33:21:ba:b2:da:e2:5a:5b:3e:cd:d9:ca:c0:06:45: ec:55:0f:16:5f:6f:87:d5:d0:a5:65:05:52:c0:8a: 78:ce:b1:b9:86:21:94:8f:a0:f2:6e:31:d7:98:e8: 20:e3:cc:df:e6:ac:e9:e0:3f:9b:99:79:d9:16:a2: 87:e1:33:3b:c9:60:4e:d2:88:ab:76:a1:df:06:a6: 7b:e7:34:f2:78:59:33:0c:1e:83:af:7a:68:da:33: 03:ca:29:26:5d:3b:a3:96:86:bd:6d:19:00:b0:cf: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:32:17:C6:17:FB:22:00:A8:BD:CB:1C:38:E9:F4:94:84:2C:EE:DD X509v3 Authority Key Identifier: keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:ff:1f:32:0d:39:11:38:9d:a3:fc:60:ac:3f:79:6e:f3:bb: ca:2b:b0:93:b0:84:a9:4e:c3:67:f1:c0:ae:f8:20:46:11:53: ad:b7:6d:4b:2a:f8:50:d3:0d:fb:71:23:d9:12:73:15:b3:77: f1:10:02:e7:3f:69:6e:4a:5d:47:c2:ae:4b:28:e1:ca:7b:47: a0:b7:bf:5e:e9:2e:dc:81:ae:ae:ed:da:72:6e:ea:52:e9:51: 9c:f5:2b:37:ef:ae:0e:fc:13:7c:3a:48:42:1a:fe:18:01:16: bd:9b:91:35:f5:7c:63:a1:23:1b:62:a4:e2:36:7a:9d:e0:00: 53:ac:cf:5d:45:56:bb:ae:8b:e9:dd:5c:17:44:ac:0f:88:a2: 14:02:05:d0:fb:d2:0b:5a:fc:45:34:1b:aa:31:3b:25:71:22: 3a:2e:24:05:54:27:09:42:f1:54:7e:36:c3:58:9e:32:83:20: c3:79:b2:06:08:f6:d6:4e:21:56:46:56:ad:9c:34:00:36:bc: 96:df:a4:18:2c:dc:87:af:54:65:49:d8:1b:08:fa:16:c8:53: 44:0d:9b:57:62:c7:12:9e:89:ac:d8:7b:40:dc:28:9f:77:1b: ee:86:dc:4e:e7:3b:63:ca:48:dd:59:3f:61:92:71:3a:55:dd: 5f:78:d2:0c -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUeNPxT+ToljUPJ6WV0Mevj+8tWAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFNzJCOEQ4MTVFOUEzRDNEODdDMTBCMzlFRDQxNjlB ODRBQjY4RjAeFw0yNjAxMDYxOTA4MTFaFw0yNzAxMDUxOTEzMTFaMDMxMTAvBgNV BAMTKEYyMzIxN0M2MTdGQjIyMDBBOEJEQ0IxQzM4RTlGNDk0ODQyQ0VFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFDzEpKppqVHG//Ar7vubGAW9 Yt4vpIE9cX0yfW8gnamxAFWg5S0ggXleYwFDq+Lh6zFWZ8HPXXifOe4ikozUiNfK 97/oyIcyChFw1fIfT1COWy0HIpOD3tR+X7ftBaXIkNXYmbEOGOBQIWDJ8Tn2NCg0 xau7fFoJFE9UM1IC53M19W2ViDWHp3a4jEoNKWJ6VcdzYDMhurLa4lpbPs3ZysAG RexVDxZfb4fV0KVlBVLAinjOsbmGIZSPoPJuMdeY6CDjzN/mrOngP5uZedkWoofh MzvJYE7SiKt2od8GpnvnNPJ4WTMMHoOvemjaMwPKKSZdO6OWhr1tGQCwz5lBAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQU8jIXxhf7IgCovcscOOn0lIQs7t0wHwYDVR0j BBgwFoAUy+crjYFemj09h8ELOe1BaahKto8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTdFMEYyOEQ3QjEwOTY0MzM4MjEzNEE5MjhBREI3RDhD MTMxOTcyNzAyRUE0MkEwNDhDMjc2NEM4MERDN0MxLzAvQ0JFNzJCOEQ4MTVFOUEz RDNEODdDMTBCMzlFRDQxNjlBODRBQjY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkU3MkI4RDgxNUU5QTNEM0Q4 N0MxMEIzOUVENDE2OUE4NEFCNjhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTE3RTBGMjhEN0IxMDk2NDMzODIxMzRBOTI4QURCN0Q4QzEzMTk3Mjcw MkVBNDJBMDQ4QzI3NjRDODBEQzdDMS8wLzMyMzgzMDMzM2E2MjMyNjMzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzkzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7LAMA0G CSqGSIb3DQEBCwUAA4IBAQA+/x8yDTkROJ2j/GCsP3lu87vKK7CTsISpTsNn8cCu +CBGEVOtt21LKvhQ0w37cSPZEnMVs3fxEALnP2luSl1Hwq5LKOHKe0egt79e6S7c ga6u7dpybupS6VGc9Ss3764O/BN8OkhCGv4YARa9m5E19XxjoSMbYqTiNnqd4ABT rM9dRVa7rovp3VwXRKwPiKIUAgXQ+9ILWvxFNBuqMTslcSI6LiQFVCcJQvFUfjbD WJ4ygyDDebIGCPbWTiFWRlatnDQANryW36QYLNyHr1RlSdgbCPoWyFNEDZtXYscS noms2HtA3CifdxvuhtxO5ztjykjdWT9hknE6Vd1feNIM -----END CERTIFICATE-----Generated at Fri Jan 23 16:27:00 2026 by rpki-client