This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa File: 323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa (raw, json) Hash identifier: Dm8T9AedviCdbX4GN+v2fpr08swYZiVdR0wulIGEckU= Subject key identifier: 9F:CC:FD:90:6A:C0:F0:62:AF:F4:E5:0C:36:2E:30:4A:A6:5D:F8:65 Certificate issuer: /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Certificate serial: 44876B34FCF0A5DDE5120301BE1AA5F1A9DAAB8B Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa Signing time: Wed 28 Jan 2026 15:28:02 +0000 ROA not before: Wed 28 Jan 2026 15:23:02 +0000 ROA not after: Wed 27 Jan 2027 15:28:02 +0000 asID: 270035 IP address blocks: 2803:e5e3:3000::/37 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:87:6b:34:fc:f0:a5:dd:e5:12:03:01:be:1a:a5:f1:a9:da:ab:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Validity Not Before: Jan 28 15:23:02 2026 GMT Not After : Jan 27 15:28:02 2027 GMT Subject: CN=9FCCFD906AC0F062AFF4E50C362E304AA65DF865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:34:0b:30:e2:fd:8e:63:1c:7f:c9:5f:9a: 70:39:04:ab:62:76:c6:2f:0a:03:b9:67:ad:b0:9d: b7:09:ad:0f:61:39:3b:79:cc:ff:38:5b:1b:cb:ab: 48:6d:d8:04:68:e3:eb:ed:87:2b:7f:6b:a3:4b:26: 87:61:07:c9:14:af:a8:48:83:a2:83:70:a3:08:3c: 3f:81:f4:3e:e6:e9:a2:7b:dc:4b:8b:f8:de:0e:25: a9:20:2b:49:cd:32:d1:ac:75:ab:da:de:3f:31:40: 06:66:87:5e:c7:16:f9:9f:7e:59:2a:e9:d0:d9:43: 32:88:fe:a3:df:b5:52:70:50:95:14:53:77:04:4f: 21:c9:6e:f0:bc:31:ef:25:72:c9:94:a2:91:a6:1e: ae:fb:ce:ee:56:d2:3a:c8:2c:65:e2:ad:a2:2c:2a: da:fc:b4:e9:db:31:3b:cb:52:ec:bd:59:f4:76:0a: 27:f6:15:97:d7:53:b5:b4:09:58:e8:65:37:36:bf: 8c:7c:f4:68:ca:cd:14:8a:68:34:f4:49:97:69:ea: 38:9d:37:53:ad:8d:d4:47:6d:3b:fa:8a:85:d9:93: f6:d2:45:79:07:c5:62:34:ef:5f:12:7b:07:12:1e: 17:3d:ae:42:04:02:d2:3d:bb:0b:ac:fb:b7:33:fc: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:FD:90:6A:C0:F0:62:AF:F4:E5:0C:36:2E:30:4A:A6:5D:F8:65 X509v3 Authority Key Identifier: keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e5e3:3000::/37 Signature Algorithm: sha256WithRSAEncryption 30:70:5e:3c:26:16:eb:14:64:c5:29:5f:b7:85:25:60:15:36: 35:a5:f9:5e:a0:01:ef:3f:f4:67:4c:0d:28:c2:a2:a8:ef:e5: 66:c5:b1:da:5d:1b:53:fd:e1:b4:d2:4d:7f:fb:99:46:10:eb: 2e:2c:32:9d:e7:72:4f:a2:25:9d:3f:d9:10:3b:3b:ce:64:7b: 5f:3d:58:0c:67:e8:6b:f0:81:b4:ef:c7:26:ed:ee:dd:77:83: a8:f8:4b:1c:6a:b5:1e:f1:02:7c:41:5d:74:4a:f6:77:93:98: d4:4c:f0:03:1e:2b:8b:53:89:b3:0e:f6:a5:10:82:aa:f8:1c: c5:80:97:6e:6a:f4:c7:c7:30:54:8c:2a:2d:49:2b:fe:f7:9c: af:70:24:5c:c5:62:2e:ce:c4:69:fe:fb:6d:d2:a1:aa:8d:0a: d0:a1:2e:c9:99:ba:6b:c4:9b:39:87:76:a3:1b:73:e0:56:00: bb:c5:e4:c4:b5:a8:c1:c8:56:99:54:ce:10:7c:72:5b:cd:71: ca:d7:47:e8:fa:aa:0e:45:c4:0f:81:b4:ef:eb:63:be:d9:83: 1a:06:18:ba:6e:c0:69:2e:be:36:43:7a:43:c6:e5:cc:3c:a1: 08:93:48:39:03:6a:db:09:e8:11:6c:48:f2:04:5f:71:27:2e: b5:81:9a:71 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIURIdrNPzwpd3lEgMBvhql8anaq4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ5QjNFQjg1RUJBRUM1QUU3MzczQTYzOThDNDI1MDY4 REU0MjU3QTAeFw0yNjAxMjgxNTIzMDJaFw0yNzAxMjcxNTI4MDJaMDMxMTAvBgNV BAMTKDlGQ0NGRDkwNkFDMEYwNjJBRkY0RTUwQzM2MkUzMDRBQTY1REY4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP2zQLMOL9jmMcf8lfmnA5BKti dsYvCgO5Z62wnbcJrQ9hOTt5zP84WxvLq0ht2ARo4+vthyt/a6NLJodhB8kUr6hI g6KDcKMIPD+B9D7m6aJ73EuL+N4OJakgK0nNMtGsdava3j8xQAZmh17HFvmfflkq 6dDZQzKI/qPftVJwUJUUU3cETyHJbvC8Me8lcsmUopGmHq77zu5W0jrILGXiraIs Ktr8tOnbMTvLUuy9WfR2Cif2FZfXU7W0CVjoZTc2v4x89GjKzRSKaDT0SZdp6jid N1OtjdRHbTv6ioXZk/bSRXkHxWI0718SewcSHhc9rkIEAtI9uwus+7cz/CFjAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUn8z9kGrA8GKv9OUMNi4wSqZd+GUwHwYDVR0j BBgwFoAUxJs+uF667FrnNzpjmMQlBo3kJXowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOTUwOTg4RTVBRUVFRjFGRTg3NkJGRDhCMEYyNEQ1NjAw QzQwRDJCMDUzQTFCRDc4NkZENUE4QUQzRUJBNTZDLzAvQzQ5QjNFQjg1RUJBRUM1 QUU3MzczQTYzOThDNDI1MDY4REU0MjU3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDlCM0VCODVFQkFFQzVBRTcz NzNBNjM5OEM0MjUwNjhERTQyNTdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTk1MDk4OEU1QUVFRUYxRkU4NzZCRkQ4QjBGMjRENTYwMEM0MEQyQjA1 M0ExQkQ3ODZGRDVBOEFEM0VCQTU2Qy8wLzMyMzgzMDMzM2E2NTM1NjUzMzNhMzMz MDMwMzAzYTNhMmYzMzM3MmQzNDMwMjAzZDNlMjAzMjM3MzAzMDMzMzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMoA+XjMDANBgkqhkiG9w0BAQsFAAOCAQEAMHBePCYW6xRkxSlft4UlYBU2 NaX5XqAB7z/0Z0wNKMKiqO/lZsWx2l0bU/3htNJNf/uZRhDrLiwynedyT6IlnT/Z EDs7zmR7Xz1YDGfoa/CBtO/HJu3u3XeDqPhLHGq1HvECfEFddEr2d5OY1EzwAx4r i1OJsw72pRCCqvgcxYCXbmr0x8cwVIwqLUkr/vecr3AkXMViLs7Eaf77bdKhqo0K 0KEuyZm6a8SbOYd2oxtz4FYAu8XkxLWowchWmVTOEHxyW81xytdH6PqqDkXED4G0 7+tjvtmDGgYYum7AaS6+NkN6Q8blzDyhCJNIOQNq2wnoEWxI8gRfcScutYGacQ== -----END CERTIFICATE-----Generated at Thu Jan 29 05:17:07 2026 by rpki-client