This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa File: 323830333a636439303a3a2f33322d3332203d3e20323731383039.roa (raw, json) Hash identifier: XKbfFx2iC5k1sWksSzHeVePwsboWtrFm2ODA+RxpMFY= Subject key identifier: F3:3F:E2:DE:AC:70:CE:AF:D8:C9:03:39:59:93:03:60:DC:AD:5D:47 Certificate issuer: /CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F Certificate serial: 09E8097CF7C92F9C1153E36456471A88261023EA Authority key identifier: A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa Signing time: Tue 06 Jan 2026 19:19:28 +0000 ROA not before: Tue 06 Jan 2026 19:14:28 +0000 ROA not after: Tue 05 Jan 2027 19:19:28 +0000 asID: 271809 IP address blocks: 2803:cd90::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e8:09:7c:f7:c9:2f:9c:11:53:e3:64:56:47:1a:88:26:10:23:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F Validity Not Before: Jan 6 19:14:28 2026 GMT Not After : Jan 5 19:19:28 2027 GMT Subject: CN=F33FE2DEAC70CEAFD8C9033959930360DCAD5D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:cc:fa:55:82:b8:60:1b:8c:bb:a8:94:22: a5:c9:92:a3:8a:53:14:c5:eb:7b:07:de:52:87:87: b6:f7:f0:dc:0b:4d:ee:70:9d:32:e6:fb:60:d2:ed: b5:72:a6:1e:c0:82:31:c5:ce:32:60:28:80:81:08: 60:e3:af:0c:dc:c7:60:ca:9b:ed:c4:f4:8c:f9:df: 7f:19:b8:e5:11:2e:b3:44:02:27:43:df:54:86:72: a1:de:bf:5a:66:0b:a6:25:69:b7:84:3d:e6:41:48: a9:a5:28:ac:1c:e4:ee:98:15:02:a9:ae:d7:88:01: 2f:0e:3f:73:d6:4e:39:7d:6c:de:88:73:81:28:cb: b8:1f:ce:36:01:16:2a:f2:76:b1:22:7b:fd:a6:13: 1c:35:90:c5:69:db:45:4e:82:55:44:7d:76:32:d0: 62:16:33:4b:21:fa:7a:9d:f6:1d:3e:d3:dd:3c:73: 0f:24:0f:83:b2:0a:e6:ae:91:ce:3b:2c:eb:34:07: a9:85:63:b9:1b:14:54:5e:87:be:5d:35:72:2b:e0: 4e:26:a3:a1:97:2d:f9:15:7a:55:9a:51:51:2e:7c: 1e:71:91:57:1c:bf:20:79:70:34:72:8d:58:33:01: 41:62:d5:a6:18:c3:a7:6b:e8:f6:6f:d2:d3:41:50: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:E2:DE:AC:70:CE:AF:D8:C9:03:39:59:93:03:60:DC:AD:5D:47 X509v3 Authority Key Identifier: keyid:A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd90::/32 Signature Algorithm: sha256WithRSAEncryption 98:15:32:d2:c6:87:4f:8c:c0:94:a5:9b:73:02:32:15:44:50: 9e:2b:0c:aa:3a:5c:39:a2:f4:7c:9f:f9:13:0c:02:24:a7:33: 3a:3f:3b:2f:aa:e8:60:05:11:e8:c8:9e:c3:04:69:d3:e2:f9: 0a:43:4e:32:84:b0:70:6b:6d:26:35:7d:b6:2d:72:92:0d:63: 0b:13:2b:67:c3:64:16:28:00:64:21:dc:fb:a5:3e:ec:79:e3: f3:bc:b8:6f:82:20:3d:9c:ad:31:72:55:f0:0f:ba:8b:2d:cd: 3f:2a:45:e3:5e:15:bb:db:71:2d:6d:ea:d3:a1:fd:3f:f8:cb: 5c:79:ef:c6:27:31:45:54:30:87:04:fe:71:7b:04:58:07:33: be:06:06:2d:16:b6:de:e4:12:37:85:ee:05:29:5e:f3:37:47: 00:8e:6b:92:5b:f2:b1:53:ea:84:69:06:6e:6b:3d:59:e6:0f: 33:4a:7b:61:c6:b1:21:c1:fe:2a:16:40:81:7b:01:a7:54:7e: 4c:63:c9:fc:e6:2a:6d:e1:4e:c9:15:4b:1c:00:6a:65:2f:e1: 19:4d:ea:1b:0a:a0:7b:45:d4:cf:71:44:dc:3f:7b:05:37:bb: 52:7f:db:8e:fc:cd:9e:d2:6e:4e:f3:65:07:05:73:fe:d7:34: 50:d4:fb:5c -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUCegJfPfJL5wRU+NkVkcaiCYQI+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2QTdFQzBCRjk2MDYxNTlDQkExRDYxQzNBNTFDQ0NC QTU0MUE0RjAeFw0yNjAxMDYxOTE0MjhaFw0yNzAxMDUxOTE5MjhaMDMxMTAvBgNV BAMTKEYzM0ZFMkRFQUM3MENFQUZEOEM5MDMzOTU5OTMwMzYwRENBRDVENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKu8z6VYK4YBuMu6iUIqXJkqOK UxTF63sH3lKHh7b38NwLTe5wnTLm+2DS7bVyph7AgjHFzjJgKICBCGDjrwzcx2DK m+3E9Iz5338ZuOURLrNEAidD31SGcqHev1pmC6YlabeEPeZBSKmlKKwc5O6YFQKp rteIAS8OP3PWTjl9bN6Ic4Eoy7gfzjYBFirydrEie/2mExw1kMVp20VOglVEfXYy 0GIWM0sh+nqd9h0+0908cw8kD4OyCuaukc47LOs0B6mFY7kbFFReh75dNXIr4E4m o6GXLfkVelWaUVEufB5xkVccvyB5cDRyjVgzAUFi1aYYw6dr6PZv0tNBUKdXAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU8z/i3qxwzq/YyQM5WZMDYNytXUcwHwYDVR0j BBgwFoAUoGp+wL+WBhWcuh1hw6UczLpUGk8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkQ1M0ZFNUEwRDkxMkYyNEMxNjNFQUVDMzhFMjA2Njg4 NkFFQjEzMkQ3Q0M5OEI3MzJBNjE0Q0UyRUQ0QjI4LzAvQTA2QTdFQzBCRjk2MDYx NTlDQkExRDYxQzNBNTFDQ0NCQTU0MUE0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDZBN0VDMEJGOTYwNjE1OUNC QTFENjFDM0E1MUNDQ0JBNTQxQTRGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZENTNGRTVBMEQ5MTJGMjRDMTYzRUFFQzM4RTIwNjY4ODZBRUIxMzJE N0NDOThCNzMyQTYxNENFMkVENEIyOC8wLzMyMzgzMDMzM2E2MzY0MzkzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzAzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDzZAw DQYJKoZIhvcNAQELBQADggEBAJgVMtLGh0+MwJSlm3MCMhVEUJ4rDKo6XDmi9Hyf +RMMAiSnMzo/Oy+q6GAFEejInsMEadPi+QpDTjKEsHBrbSY1fbYtcpINYwsTK2fD ZBYoAGQh3PulPux54/O8uG+CID2crTFyVfAPuostzT8qReNeFbvbcS1t6tOh/T/4 y1x578YnMUVUMIcE/nF7BFgHM74GBi0Wtt7kEjeF7gUpXvM3RwCOa5Jb8rFT6oRp Bm5rPVnmDzNKe2HGsSHB/ioWQIF7AadUfkxjyfzmKm3hTskVSxwAamUv4RlN6hsK oHtF1M9xRNw/ewU3u1J/2478zZ7Sbk7zZQcFc/7XNFDU+1w= -----END CERTIFICATE-----Generated at Thu Jan 29 05:29:58 2026 by rpki-client