This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343730303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343730303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: qkp3MshjBygWA1Hpard+2Ff/8Bku72pnK26JFEtS7dU= Subject key identifier: 33:4C:4D:29:DC:BA:C4:D8:22:14:B8:66:96:4A:78:68:19:FF:FB:D8 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 053A26F63213AF222D3D96059E6C616E62D36E7D Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343730303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:02 +0000 ROA not before: Tue 06 Jan 2026 20:44:02 +0000 ROA not after: Tue 05 Jan 2027 20:49:02 +0000 asID: 273072 IP address blocks: 2803:cf90:4700::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3a:26:f6:32:13:af:22:2d:3d:96:05:9e:6c:61:6e:62:d3:6e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:02 2026 GMT Not After : Jan 5 20:49:02 2027 GMT Subject: CN=334C4D29DCBAC4D82214B866964A786819FFFBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:28:68:7a:b3:ef:63:36:04:3d:94:6a:27: de:8d:f3:c8:11:f9:df:2d:27:f5:dc:27:fa:0c:00: a1:26:1d:65:a8:f3:2f:e5:cf:da:1f:3d:4a:c5:5e: 11:29:b6:af:4d:1f:8c:9f:f1:97:a2:9d:09:b4:12: 76:a2:eb:48:0e:a0:3e:31:62:5e:3e:98:55:87:48: 52:30:c6:9f:0d:19:15:59:9f:ed:a9:61:75:00:b9: ea:15:d6:ff:bb:c5:68:d1:8f:e6:d3:f7:f8:2e:76: 97:b6:10:6e:66:d9:17:ff:73:77:bc:d4:da:52:39: bf:77:14:5d:b9:9b:4f:4b:49:aa:31:97:91:c1:73: b2:80:3c:1d:3b:1f:51:ba:64:9e:9e:7f:bb:ca:ae: ce:85:d1:e5:3e:b6:1c:22:d4:fe:57:e5:dd:8b:71: 34:cf:8b:63:0c:5d:25:18:2b:82:7c:00:c9:9b:03: ee:3e:a1:ab:c7:7a:9c:ab:55:f4:64:74:21:90:44: cf:7c:9f:01:32:e3:c0:eb:42:85:5c:cf:21:06:e4: fa:70:39:14:5d:74:0c:1d:31:40:4e:ce:41:f6:74: 4a:a0:93:63:a4:b4:f2:92:53:f0:bc:41:e4:64:0b: 2b:70:ad:96:ae:c5:51:9a:ad:10:b4:53:54:01:01: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4C:4D:29:DC:BA:C4:D8:22:14:B8:66:96:4A:78:68:19:FF:FB:D8 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343730303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4700::/40 Signature Algorithm: sha256WithRSAEncryption 19:5f:1f:81:e4:f4:4e:c8:22:05:40:5e:32:b6:fb:33:71:ed: 30:6d:bf:14:50:62:92:72:64:80:54:4b:77:b7:fd:40:38:a0: 95:bd:9e:dd:2d:f2:7f:c1:ed:d9:95:79:56:12:26:59:27:c8: 00:c1:90:b9:bb:28:20:db:ee:a9:1c:f9:e0:0c:1d:83:c8:92: 97:05:be:6c:8d:12:9e:f0:71:7d:47:b2:65:74:be:f2:5f:d1: 02:f2:7f:90:b4:82:e9:1c:35:ce:4e:d5:74:a3:45:77:08:77: b0:14:e7:c1:f7:cf:c8:3c:27:ef:d1:82:4c:19:48:9f:d1:cf: cf:f7:7d:12:7a:23:91:60:77:d2:54:cb:4d:53:f1:35:84:b2: 17:37:1f:d2:f3:9b:f1:40:d4:c8:b8:54:ea:3f:fc:20:31:81: e2:cd:df:a3:08:d4:53:da:cf:d8:f2:d9:52:a2:d3:8b:1e:fc: 0b:90:98:e9:e5:8c:b7:84:9f:77:6c:e1:52:e5:ba:b5:16:0c: 07:27:c3:36:f6:2f:bf:0a:8f:14:05:9b:27:76:6c:85:33:d4: 9e:ce:5f:fb:2c:f8:c6:08:63:3c:f5:ed:f1:4c:10:7d:58:97: 83:ad:2c:d9:22:4a:03:8a:7c:5c:d8:16:f0:6c:1e:29:fc:d8: 6f:97:f7:69 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUBTom9jITryItPZYFnmxhbmLTbn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDJaFw0yNzAxMDUyMDQ5MDJaMDMxMTAvBgNV BAMTKDMzNEM0RDI5RENCQUM0RDgyMjE0Qjg2Njk2NEE3ODY4MTlGRkZCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjihoerPvYzYEPZRqJ96N88gR +d8tJ/XcJ/oMAKEmHWWo8y/lz9ofPUrFXhEptq9NH4yf8ZeinQm0Enai60gOoD4x Yl4+mFWHSFIwxp8NGRVZn+2pYXUAueoV1v+7xWjRj+bT9/gudpe2EG5m2Rf/c3e8 1NpSOb93FF25m09LSaoxl5HBc7KAPB07H1G6ZJ6ef7vKrs6F0eU+thwi1P5X5d2L cTTPi2MMXSUYK4J8AMmbA+4+oavHepyrVfRkdCGQRM98nwEy48DrQoVczyEG5Ppw ORRddAwdMUBOzkH2dEqgk2OktPKSU/C8QeRkCytwrZauxVGarRC0U1QBASGvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUM0xNKdy6xNgiFLhmlkp4aBn/+9gwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz NzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QRzANBgkqhkiG9w0BAQsFAAOCAQEAGV8fgeT0TsgiBUBeMrb7M3Ht MG2/FFBiknJkgFRLd7f9QDiglb2e3S3yf8Ht2ZV5VhImWSfIAMGQubsoINvuqRz5 4Awdg8iSlwW+bI0SnvBxfUeyZXS+8l/RAvJ/kLSC6Rw1zk7VdKNFdwh3sBTnwffP yDwn79GCTBlIn9HPz/d9EnojkWB30lTLTVPxNYSyFzcf0vOb8UDUyLhU6j/8IDGB 4s3fowjUU9rP2PLZUqLTix78C5CY6eWMt4Sfd2zhUuW6tRYMByfDNvYvvwqPFAWb J3ZshTPUns5f+yz4xghjPPXt8UwQfViXg60s2SJKA4p8XNgW8GweKfzYb5f3aQ== -----END CERTIFICATE-----Generated at Thu Jan 29 05:12:36 2026 by rpki-client