This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323030303a3a2f33372d3430203d3e20323730303335.roa File: 323830333a653565333a323030303a3a2f33372d3430203d3e20323730303335.roa (raw, json) Hash identifier: Og2cOnshbEDtDyiQ+tJxLjB2M9OIcS53dudBZ46CfEU= Subject key identifier: 20:A8:84:03:FB:A8:1C:40:60:A0:F9:85:E3:67:4B:9B:A7:15:48:4C Certificate issuer: /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Certificate serial: 274ADD570FB3D4CF07B55D828F1887438199BE1A Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323030303a3a2f33372d3430203d3e20323730303335.roa Signing time: Wed 28 Jan 2026 15:28:03 +0000 ROA not before: Wed 28 Jan 2026 15:23:03 +0000 ROA not after: Wed 27 Jan 2027 15:28:03 +0000 asID: 270035 IP address blocks: 2803:e5e3:2000::/37 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4a:dd:57:0f:b3:d4:cf:07:b5:5d:82:8f:18:87:43:81:99:be:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Validity Not Before: Jan 28 15:23:03 2026 GMT Not After : Jan 27 15:28:03 2027 GMT Subject: CN=20A88403FBA81C4060A0F985E3674B9BA715484C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:0d:34:86:31:69:84:5e:2b:d0:f0:90:0a: b0:08:f2:6c:a7:93:8c:ff:31:78:9e:f7:3e:d3:b5: a7:8f:10:7f:21:ae:d5:8a:9b:51:59:c2:80:de:c6: e9:6c:d8:2a:5c:bf:b6:b6:5b:f8:74:cb:09:74:7f: e8:f2:82:d3:07:64:f0:99:63:39:e4:7c:dc:6e:4f: 43:97:2f:1d:71:22:e5:b5:71:fc:1a:86:5c:be:a7: ec:da:19:cf:69:a6:22:79:dd:ba:bd:10:3f:fc:4f: 21:7d:e7:32:b7:62:0c:c9:be:ec:08:86:bc:b8:e1: 7f:e7:d0:41:02:4d:ef:e3:0f:29:8d:17:01:6b:d5: d1:0d:dc:ee:d1:53:1c:ba:0e:96:c8:b2:47:8e:8c: c3:aa:e0:30:dd:3d:9b:3c:a2:2b:79:41:ff:0c:f0: 5e:de:b1:87:5a:34:9b:b7:73:28:4f:84:73:2a:dd: 0b:25:bd:07:13:76:a1:7f:de:a3:7b:f9:45:f8:46: 75:9d:91:72:2e:19:ca:5b:15:0c:f1:c2:e1:3a:7a: 4b:ce:8c:0d:11:69:79:b7:3a:d2:9e:ed:c5:b2:e8: b7:45:a7:fc:ed:0e:19:5a:b9:0a:58:e5:bc:0b:6b: 66:55:ca:34:a5:00:0e:6c:1a:cc:7b:f8:9e:29:48: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A8:84:03:FB:A8:1C:40:60:A0:F9:85:E3:67:4B:9B:A7:15:48:4C X509v3 Authority Key Identifier: keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323030303a3a2f33372d3430203d3e20323730303335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e5e3:2000::/37 Signature Algorithm: sha256WithRSAEncryption 86:39:f1:22:b1:37:14:95:07:62:0d:f1:c0:02:a3:c8:87:8e: 68:6c:cf:00:c3:8d:93:5d:e1:68:87:18:f9:62:17:9e:ca:af: 1d:e8:ad:e7:cd:f4:f6:e4:9e:04:78:d6:fc:c4:7f:bb:e9:00: 7b:4c:b8:f4:21:5d:da:b8:af:07:78:3d:85:3f:12:21:1e:34: 9a:55:94:11:f1:b4:e8:db:1b:a7:fe:8e:e2:53:a1:c8:59:31: f7:cb:ef:a1:55:92:a2:67:c8:ef:53:c1:5a:be:94:86:63:58: a6:f0:e9:8c:77:bd:fe:1b:92:c9:6a:3d:b6:71:58:67:ad:c0: 4e:cf:19:a7:42:9a:00:98:0a:75:71:01:6a:de:78:e5:1c:f1: 15:20:30:89:9e:60:90:d6:54:c1:99:87:5b:e0:1b:67:57:ed: 68:8c:93:bf:4e:77:6e:76:54:d2:42:eb:4c:f1:ec:38:ae:0c: 6a:7d:12:66:df:5d:e4:2a:aa:51:8d:93:fc:65:86:7d:98:c3: 52:07:2d:10:17:10:1a:a8:cc:48:25:b3:dd:f0:99:05:db:dd: ad:58:00:ee:56:1b:70:61:f5:45:ed:5f:7f:93:9b:24:0d:5b: c4:70:65:9d:92:aa:1d:bb:31:f0:c4:75:59:a5:10:34:a6:8f: 89:7d:db:b7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUJ0rdVw+z1M8HtV2CjxiHQ4GZvhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ5QjNFQjg1RUJBRUM1QUU3MzczQTYzOThDNDI1MDY4 REU0MjU3QTAeFw0yNjAxMjgxNTIzMDNaFw0yNzAxMjcxNTI4MDNaMDMxMTAvBgNV BAMTKDIwQTg4NDAzRkJBODFDNDA2MEEwRjk4NUUzNjc0QjlCQTcxNTQ4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCg00hjFphF4r0PCQCrAI8myn k4z/MXie9z7TtaePEH8hrtWKm1FZwoDexuls2Cpcv7a2W/h0ywl0f+jygtMHZPCZ YznkfNxuT0OXLx1xIuW1cfwahly+p+zaGc9ppiJ53bq9ED/8TyF95zK3YgzJvuwI hry44X/n0EECTe/jDymNFwFr1dEN3O7RUxy6DpbIskeOjMOq4DDdPZs8oit5Qf8M 8F7esYdaNJu3cyhPhHMq3QslvQcTdqF/3qN7+UX4RnWdkXIuGcpbFQzxwuE6ekvO jA0RaXm3OtKe7cWy6LdFp/ztDhlauQpY5bwLa2ZVyjSlAA5sGsx7+J4pSEK1AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUIKiEA/uoHEBgoPmF42dLm6cVSEwwHwYDVR0j BBgwFoAUxJs+uF667FrnNzpjmMQlBo3kJXowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOTUwOTg4RTVBRUVFRjFGRTg3NkJGRDhCMEYyNEQ1NjAw QzQwRDJCMDUzQTFCRDc4NkZENUE4QUQzRUJBNTZDLzAvQzQ5QjNFQjg1RUJBRUM1 QUU3MzczQTYzOThDNDI1MDY4REU0MjU3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDlCM0VCODVFQkFFQzVBRTcz NzNBNjM5OEM0MjUwNjhERTQyNTdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTk1MDk4OEU1QUVFRUYxRkU4NzZCRkQ4QjBGMjRENTYwMEM0MEQyQjA1 M0ExQkQ3ODZGRDVBOEFEM0VCQTU2Qy8wLzMyMzgzMDMzM2E2NTM1NjUzMzNhMzIz MDMwMzAzYTNhMmYzMzM3MmQzNDMwMjAzZDNlMjAzMjM3MzAzMDMzMzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMoA+XjIDANBgkqhkiG9w0BAQsFAAOCAQEAhjnxIrE3FJUHYg3xwAKjyIeO aGzPAMONk13haIcY+WIXnsqvHeit58309uSeBHjW/MR/u+kAe0y49CFd2rivB3g9 hT8SIR40mlWUEfG06Nsbp/6O4lOhyFkx98vvoVWSomfI71PBWr6UhmNYpvDpjHe9 /huSyWo9tnFYZ63ATs8Zp0KaAJgKdXEBat545RzxFSAwiZ5gkNZUwZmHW+AbZ1ft aIyTv053bnZU0kLrTPHsOK4Man0SZt9d5CqqUY2T/GWGfZjDUgctEBcQGqjMSCWz 3fCZBdvdrVgA7lYbcGH1Re1ff5ObJA1bxHBlnZKqHbsx8MR1WaUQNKaPiX3btw== -----END CERTIFICATE-----Generated at Thu Jan 29 05:17:07 2026 by rpki-client