This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa File: 323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (raw, json) Hash identifier: TfWo+j9xXCL/GKCkAxbT74nLngBoDHoQbEqlsetvkzg= Subject key identifier: 35:6C:96:8F:9B:55:2A:1E:D8:B4:B8:D3:33:41:CC:79:11:EF:86:D6 Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Certificate serial: 0CA5EE8BB2B49061F1CCAE63C017513D7FAA6B9D Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa Signing time: Tue 06 Jan 2026 19:34:21 +0000 ROA not before: Tue 06 Jan 2026 19:29:21 +0000 ROA not after: Tue 05 Jan 2027 19:34:21 +0000 asID: 27951 IP address blocks: 2801:1a9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a5:ee:8b:b2:b4:90:61:f1:cc:ae:63:c0:17:51:3d:7f:aa:6b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131 Validity Not Before: Jan 6 19:29:21 2026 GMT Not After : Jan 5 19:34:21 2027 GMT Subject: CN=356C968F9B552A1ED8B4B8D33341CC7911EF86D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:e6:0a:3e:13:1b:4b:64:53:70:5a:ef:4c: 8f:40:e1:6d:c4:94:79:13:72:4d:50:5c:fe:42:da: 3f:f2:bb:39:d2:33:c4:05:76:7b:d6:a1:42:2f:77: a7:80:35:f9:67:5f:20:26:b1:f9:1c:e3:53:89:ed: b4:cc:15:96:95:82:a4:92:94:43:26:bc:5b:d4:31: d6:25:e1:6d:9d:5a:3a:9f:87:da:fc:c3:21:da:a8: 90:02:73:77:6a:84:6c:0f:25:d4:03:39:07:c2:a6: 5d:cd:80:d9:d5:df:75:6e:ed:76:22:a7:9b:97:d2: 35:a6:7e:5f:fb:29:6a:52:34:40:d4:22:4c:55:a0: 23:29:44:47:0a:2f:c9:06:c3:7f:13:3b:7b:65:0e: f6:f5:56:cd:1c:d7:c2:dd:43:b6:db:93:c0:b1:99: f7:74:5c:ee:73:72:a7:51:d2:20:48:64:0d:b1:f1: 42:a6:ab:01:a6:39:b1:ea:fc:af:df:9a:94:88:fe: e7:27:18:4f:02:eb:17:f6:35:3d:be:3a:98:54:e9: 18:08:7b:05:dd:f1:0a:94:de:3b:3b:ad:cb:9a:80: e4:d4:ac:fa:fb:be:eb:8a:c5:8e:63:5d:02:24:e5: 48:a7:66:a5:0b:91:68:08:9f:a5:6d:b2:01:b8:31: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6C:96:8F:9B:55:2A:1E:D8:B4:B8:D3:33:41:CC:79:11:EF:86:D6 X509v3 Authority Key Identifier: keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a9:1::/48 Signature Algorithm: sha256WithRSAEncryption 83:67:68:f6:ab:bc:a8:0a:fa:bf:0d:c6:54:4c:f5:1c:88:b0: 03:be:20:b7:13:5a:59:36:06:76:97:f0:0b:28:74:11:f7:7f: b1:ba:14:ae:39:29:f1:37:35:09:3b:3a:69:a7:33:b7:39:9c: 70:76:b8:07:0e:7c:5a:72:a2:0b:ae:4d:4b:8b:93:13:a4:ba: 1c:ec:cd:38:2d:59:b6:29:d0:64:74:59:40:14:d8:f2:58:4c: 68:0e:cf:b2:4c:47:03:58:24:34:8f:6d:34:1f:7a:92:11:c2: 93:17:34:64:b1:8f:df:09:27:48:8d:fb:d5:77:a2:8f:2c:c8: 1d:4e:7d:ed:a3:20:22:ff:c2:e4:45:da:4c:7f:04:84:31:ad: 99:5a:b6:da:28:20:7c:ea:bc:b3:72:11:2f:4d:ff:5f:c1:c3: 0e:28:22:fa:28:e7:ec:d6:3a:f3:54:01:71:aa:c2:17:58:bd: f6:88:c7:04:7d:c8:c0:5f:75:3f:bb:d0:0c:2b:1c:1a:4f:55: 99:48:16:61:c8:4b:a9:db:44:72:3d:55:cb:f6:17:20:4c:99: 24:0e:36:99:5a:fe:2a:4e:f0:e2:09:2e:5a:b4:d6:fb:1f:5d: 45:f3:94:62:a5:5e:b5:3a:8b:57:6c:fc:c9:46:3c:59:6a:e6: 3f:f8:ad:1e -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUDKXui7K0kGHxzK5jwBdRPX+qa50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzNCRjdGQ0EzQjA4NkE3RTMyNzYwQTEyRDZENjAw MzZDQzEzMTAeFw0yNjAxMDYxOTI5MjFaFw0yNzAxMDUxOTM0MjFaMDMxMTAvBgNV BAMTKDM1NkM5NjhGOUI1NTJBMUVEOEI0QjhEMzMzNDFDQzc5MTFFRjg2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIeYKPhMbS2RTcFrvTI9A4W3E lHkTck1QXP5C2j/yuznSM8QFdnvWoUIvd6eANflnXyAmsfkc41OJ7bTMFZaVgqSS lEMmvFvUMdYl4W2dWjqfh9r8wyHaqJACc3dqhGwPJdQDOQfCpl3NgNnV33Vu7XYi p5uX0jWmfl/7KWpSNEDUIkxVoCMpREcKL8kGw38TO3tlDvb1Vs0c18LdQ7bbk8Cx mfd0XO5zcqdR0iBIZA2x8UKmqwGmObHq/K/fmpSI/ucnGE8C6xf2NT2+OphU6RgI ewXd8QqU3js7rcuagOTUrPr7vuuKxY5jXQIk5UinZqULkWgIn6VtsgG4MXpXAgMB AAGjggLLMIICxzAdBgNVHQ4EFgQUNWyWj5tVKh7YtLjTM0HMeRHvhtYwHwYDVR0j BBgwFoAUvdw79/yjsIan4ydgoS1tYANswTEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REYzNzk5RTlGQzQ5MURCM0FGRTcwQjVFQzZBQzcyMkVG MzQxNzY5NDM4RDA0QUQ1ODBFRkNENzZBOEQwM0YyLzAvQkREQzNCRjdGQ0EzQjA4 NkE3RTMyNzYwQTEyRDZENjAwMzZDQzEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRERDM0JGN0ZDQTNCMDg2QTdF MzI3NjBBMTJENkQ2MDAzNkNDMTMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERGMzc5OUU5RkM0OTFEQjNBRkU3MEI1RUM2QUM3MjJFRjM0MTc2OTQz OEQwNEFENTgwRUZDRDc2QThEMDNGMi8wLzMyMzgzMDMxM2EzMTYxMzkzYTMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAakA ATANBgkqhkiG9w0BAQsFAAOCAQEAg2do9qu8qAr6vw3GVEz1HIiwA74gtxNaWTYG dpfwCyh0Efd/sboUrjkp8Tc1CTs6aacztzmccHa4Bw58WnKiC65NS4uTE6S6HOzN OC1ZtinQZHRZQBTY8lhMaA7PskxHA1gkNI9tNB96khHCkxc0ZLGP3wknSI371Xei jyzIHU597aMgIv/C5EXaTH8EhDGtmVq22iggfOq8s3IRL03/X8HDDigi+ijn7NY6 81QBcarCF1i99ojHBH3IwF91P7vQDCscGk9VmUgWYchLqdtEcj1Vy/YXIEyZJA42 mVr+Kk7w4gkuWrTW+x9dRfOUYqVetTqLV2z8yUY8WWrmP/itHg== -----END CERTIFICATE-----Generated at Thu Jan 29 05:07:56 2026 by rpki-client