This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323830303a3a2f33372d3430203d3e20323730303335.roa File: 323830333a653565333a323830303a3a2f33372d3430203d3e20323730303335.roa (raw, json) Hash identifier: E9D1mxonX8kegIT1wFshh+rOV9x1EjUlGpGJDE2BkK0= Subject key identifier: 23:4C:09:38:24:0E:4D:D1:24:FD:E0:BE:D1:1B:27:9C:1F:A4:A4:D7 Certificate issuer: /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Certificate serial: 699ABEA9B3B02C6CAD6F179B6A75A0265E3C76DC Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323830303a3a2f33372d3430203d3e20323730303335.roa Signing time: Wed 28 Jan 2026 15:28:04 +0000 ROA not before: Wed 28 Jan 2026 15:23:04 +0000 ROA not after: Wed 27 Jan 2027 15:28:04 +0000 asID: 270035 IP address blocks: 2803:e5e3:2800::/37 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9a:be:a9:b3:b0:2c:6c:ad:6f:17:9b:6a:75:a0:26:5e:3c:76:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Validity Not Before: Jan 28 15:23:04 2026 GMT Not After : Jan 27 15:28:04 2027 GMT Subject: CN=234C0938240E4DD124FDE0BED11B279C1FA4A4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:81:35:78:31:bb:ae:41:67:49:0b:d8:97: 14:03:e5:b1:06:9b:45:d5:83:84:ea:06:72:52:50: 6e:9e:3d:59:12:c7:21:1b:01:7b:28:1a:ee:94:35: 75:2c:29:57:9d:0f:e5:06:c8:38:a0:4d:a0:c1:e3: b9:cb:74:1f:38:7b:7b:88:42:4a:b6:71:f8:e7:dc: 29:dd:2f:06:e4:80:83:48:43:be:cc:f5:dc:59:3c: d5:46:cd:b0:ae:67:c4:dd:e5:e8:4a:dc:77:b4:df: 15:a4:c7:43:6a:fb:21:ac:03:13:f1:8b:8e:e4:d2: 5d:68:18:61:2c:00:0e:61:12:49:00:d5:b6:40:7a: 44:7a:6f:39:7c:7d:73:83:d2:0d:e7:51:c9:f4:17: dc:f2:e0:9d:5f:c6:d0:ad:ce:73:71:af:97:ea:b7: f3:b9:f2:00:aa:b3:42:ea:ba:eb:ec:4d:91:15:a1: fb:46:00:ba:f5:29:c9:00:48:e3:61:d1:e9:a5:d2: 6e:bb:21:80:e1:3f:3f:46:73:16:5a:63:ec:a3:27: f2:29:59:9a:52:fe:d8:83:17:ff:b0:f2:77:f9:7c: 65:72:f7:83:72:35:23:b6:e2:54:a8:64:b1:d2:e7: f1:6b:11:da:e4:53:4a:01:71:a7:52:62:9e:ab:7e: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:09:38:24:0E:4D:D1:24:FD:E0:BE:D1:1B:27:9C:1F:A4:A4:D7 X509v3 Authority Key Identifier: keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a323830303a3a2f33372d3430203d3e20323730303335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e5e3:2800::/37 Signature Algorithm: sha256WithRSAEncryption 9a:fa:b4:c5:ed:3c:86:74:23:1a:cd:1c:3a:07:ba:17:41:8f: 96:20:ff:f4:2d:3a:ec:80:9f:0b:f2:d9:f3:44:2d:1c:b9:b0: 82:f5:fc:ce:2a:39:5c:85:f1:c2:0e:5f:f4:a3:42:f1:58:67: e8:19:18:e2:a6:51:12:47:81:a4:17:83:55:9e:72:a4:0c:44: 35:b2:94:d6:eb:49:9e:85:23:97:0a:ec:7f:32:32:e7:51:7d: 47:82:0a:db:03:1b:8f:b0:e4:61:9c:85:e1:74:4c:f4:b9:40: 3d:59:cc:18:b6:79:5e:e5:25:84:4a:b9:d8:2f:cc:e8:cf:c4: 45:d3:0d:5e:5c:52:6c:92:71:2b:fb:24:8c:af:96:36:bb:79: bd:8c:96:c9:b6:5d:ad:cc:2a:9d:04:3d:7c:da:6f:87:d3:e3: f8:13:2d:4c:b3:80:55:77:04:00:44:9f:32:e1:b3:af:42:68: 36:b3:b5:92:e4:82:eb:0b:6c:06:31:12:e4:72:45:32:d2:a0: 01:b9:4e:91:17:c8:05:2d:11:63:d2:aa:8d:cf:fb:6d:fe:a7: d9:8b:b3:f3:f3:12:09:97:ef:42:bd:ff:8e:8e:e4:40:5b:24: c6:d0:83:e6:50:8d:e4:94:7f:85:43:9f:27:56:be:23:87:b4: 72:4d:3f:3b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUaZq+qbOwLGytbxebanWgJl48dtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ5QjNFQjg1RUJBRUM1QUU3MzczQTYzOThDNDI1MDY4 REU0MjU3QTAeFw0yNjAxMjgxNTIzMDRaFw0yNzAxMjcxNTI4MDRaMDMxMTAvBgNV BAMTKDIzNEMwOTM4MjQwRTRERDEyNEZERTBCRUQxMUIyNzlDMUZBNEE0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEYE1eDG7rkFnSQvYlxQD5bEG m0XVg4TqBnJSUG6ePVkSxyEbAXsoGu6UNXUsKVedD+UGyDigTaDB47nLdB84e3uI Qkq2cfjn3CndLwbkgINIQ77M9dxZPNVGzbCuZ8Td5ehK3He03xWkx0Nq+yGsAxPx i47k0l1oGGEsAA5hEkkA1bZAekR6bzl8fXOD0g3nUcn0F9zy4J1fxtCtznNxr5fq t/O58gCqs0LquuvsTZEVoftGALr1KckASONh0eml0m67IYDhPz9GcxZaY+yjJ/Ip WZpS/tiDF/+w8nf5fGVy94NyNSO24lSoZLHS5/FrEdrkU0oBcadSYp6rftphAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUI0wJOCQOTdEk/eC+0RsnnB+kpNcwHwYDVR0j BBgwFoAUxJs+uF667FrnNzpjmMQlBo3kJXowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOTUwOTg4RTVBRUVFRjFGRTg3NkJGRDhCMEYyNEQ1NjAw QzQwRDJCMDUzQTFCRDc4NkZENUE4QUQzRUJBNTZDLzAvQzQ5QjNFQjg1RUJBRUM1 QUU3MzczQTYzOThDNDI1MDY4REU0MjU3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDlCM0VCODVFQkFFQzVBRTcz NzNBNjM5OEM0MjUwNjhERTQyNTdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTk1MDk4OEU1QUVFRUYxRkU4NzZCRkQ4QjBGMjRENTYwMEM0MEQyQjA1 M0ExQkQ3ODZGRDVBOEFEM0VCQTU2Qy8wLzMyMzgzMDMzM2E2NTM1NjUzMzNhMzIz ODMwMzAzYTNhMmYzMzM3MmQzNDMwMjAzZDNlMjAzMjM3MzAzMDMzMzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMoA+XjKDANBgkqhkiG9w0BAQsFAAOCAQEAmvq0xe08hnQjGs0cOge6F0GP liD/9C067ICfC/LZ80QtHLmwgvX8zio5XIXxwg5f9KNC8Vhn6BkY4qZREkeBpBeD VZ5ypAxENbKU1utJnoUjlwrsfzIy51F9R4IK2wMbj7DkYZyF4XRM9LlAPVnMGLZ5 XuUlhEq52C/M6M/ERdMNXlxSbJJxK/skjK+WNrt5vYyWybZdrcwqnQQ9fNpvh9Pj +BMtTLOAVXcEAESfMuGzr0JoNrO1kuSC6wtsBjES5HJFMtKgAblOkRfIBS0RY9Kq jc/7bf6n2Yuz8/MSCZfvQr3/jo7kQFskxtCD5lCN5JR/hUOfJ1a+I4e0ck0/Ow== -----END CERTIFICATE-----Generated at Thu Jan 29 05:17:07 2026 by rpki-client