This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa File: 323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa (raw, json) Hash identifier: 5+uBW2llwymRV6jila/L71jhNrm1Otd680U/DWNUNhE= Subject key identifier: 8F:57:C1:D0:4E:0A:C1:55:64:7B:F9:7A:84:A3:B2:29:10:B1:B9:8C Certificate issuer: /CN=906C41A68E3475138AF53A5B55627EDE35432068 Certificate serial: 4A01BC90855E86E15ADCC2EA1F62290C3A0A17A7 Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa Signing time: Tue 20 Jan 2026 02:26:11 +0000 ROA not before: Tue 20 Jan 2026 02:21:11 +0000 ROA not after: Tue 19 Jan 2027 02:26:11 +0000 asID: 271975 IP address blocks: 2803:c310:fd00::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 13:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:01:bc:90:85:5e:86:e1:5a:dc:c2:ea:1f:62:29:0c:3a:0a:17:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068 Validity Not Before: Jan 20 02:21:11 2026 GMT Not After : Jan 19 02:26:11 2027 GMT Subject: CN=8F57C1D04E0AC155647BF97A84A3B22910B1B98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:29:00:4c:f8:53:78:c1:82:3f:e8:9a:58: 0c:74:01:bb:6c:2f:7e:76:4a:3c:9a:3f:c7:4d:6d: 80:e3:51:9c:ca:d2:2f:f1:cc:a3:ca:5f:5f:54:1a: bc:2e:66:66:f1:3a:bf:82:20:d6:2d:cb:53:5a:19: c4:e0:d4:cc:7f:64:8f:2e:56:3d:8e:c4:7e:1f:73: 00:eb:8e:75:5c:8b:c4:cf:5d:e2:f1:ea:b7:9a:85: 85:ec:fb:51:e9:1f:32:e8:7e:82:7f:09:f3:f6:70: 3b:0b:1a:6d:56:20:a8:b6:84:c7:91:07:15:e1:3a: 9a:17:75:e2:cb:6c:a0:9b:94:8c:cd:db:0c:cc:a5: e3:e4:1a:50:a6:cb:87:7e:72:e8:80:f9:27:41:98: fa:d7:59:67:03:7d:60:9d:02:fc:01:f1:33:f4:ae: 93:a7:5b:40:11:3c:38:02:15:4c:95:01:ac:46:f7: 54:01:e9:b6:24:9b:52:23:f7:20:52:6c:b4:6a:be: 47:91:8f:87:2e:11:e0:fd:f9:02:4c:d4:69:d7:2b: 45:9e:8b:52:4c:13:6f:e1:e0:7d:bf:0e:34:d9:72: 91:2c:d4:48:b6:36:93:07:05:57:42:4c:e5:58:02: ce:5f:4b:54:74:58:5f:a4:bc:4c:16:25:41:95:5d: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:57:C1:D0:4E:0A:C1:55:64:7B:F9:7A:84:A3:B2:29:10:B1:B9:8C X509v3 Authority Key Identifier: keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c310:fd00::/40 Signature Algorithm: sha256WithRSAEncryption 61:d5:05:ec:4a:66:66:b6:d9:51:da:4d:5e:0a:46:fa:d8:63: f2:a6:06:58:8c:56:82:98:01:d2:7d:fd:b1:4b:d7:06:63:01: a2:f5:c4:ca:a3:82:ea:87:18:43:30:2b:85:cc:d2:93:27:9b: 86:63:ee:1f:b9:b3:66:8d:21:ea:68:85:ac:15:a0:61:fc:16: f8:da:c7:2e:c6:00:7a:40:89:23:c9:bd:9f:7c:f7:79:e3:d3: 92:6c:de:e0:1a:7c:01:49:10:63:a4:2d:1d:90:2b:8e:ea:c8: 3d:6c:db:64:87:af:61:62:64:c5:d7:9f:34:55:ae:94:2f:60: 93:29:e2:4a:d2:a1:16:9e:7a:5d:cf:4d:48:9c:5f:3f:65:a7: 08:e5:96:02:6d:52:99:21:fd:a3:c3:52:00:32:64:37:fd:d0: 70:fc:eb:02:64:c1:03:64:c3:02:6f:5b:e9:92:63:0b:41:f7: c0:a8:26:a9:37:1a:c6:5d:7e:c9:4f:1e:04:14:c9:0a:82:ac: 7a:a9:f7:f9:03:41:f2:7d:50:94:ba:94:0a:58:e1:fd:6d:7e: 16:5f:70:91:16:72:87:54:8f:4d:ce:31:27:f2:be:f3:b8:50: a8:e8:b8:92:a8:2c:0a:e5:90:33:c2:0d:9e:6d:8c:ca:20:bf: 22:54:16:1b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSgG8kIVehuFa3MLqH2IpDDoKF6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz NTQzMjA2ODAeFw0yNjAxMjAwMjIxMTFaFw0yNzAxMTkwMjI2MTFaMDMxMTAvBgNV BAMTKDhGNTdDMUQwNEUwQUMxNTU2NDdCRjk3QTg0QTNCMjI5MTBCMUI5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyykATPhTeMGCP+iaWAx0Abts L352SjyaP8dNbYDjUZzK0i/xzKPKX19UGrwuZmbxOr+CINYty1NaGcTg1Mx/ZI8u Vj2OxH4fcwDrjnVci8TPXeLx6reahYXs+1HpHzLofoJ/CfP2cDsLGm1WIKi2hMeR BxXhOpoXdeLLbKCblIzN2wzMpePkGlCmy4d+cuiA+SdBmPrXWWcDfWCdAvwB8TP0 rpOnW0ARPDgCFUyVAaxG91QB6bYkm1Ij9yBSbLRqvkeRj4cuEeD9+QJM1GnXK0We i1JME2/h4H2/DjTZcpEs1Ei2NpMHBVdCTOVYAs5fS1R0WF+kvEwWJUGVXVddAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUj1fB0E4KwVVke/l6hKOyKRCxuYwwHwYDVR0j BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMyMzgzMDMzM2E2MzMzMzEzMDNhNjY2 NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzEzOTM3MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8MQ/TANBgkqhkiG9w0BAQsFAAOCAQEAYdUF7EpmZrbZUdpNXgpG+thj 8qYGWIxWgpgB0n39sUvXBmMBovXEyqOC6ocYQzArhczSkyebhmPuH7mzZo0h6miF rBWgYfwW+NrHLsYAekCJI8m9n3z3eePTkmze4Bp8AUkQY6QtHZArjurIPWzbZIev YWJkxdefNFWulC9gkyniStKhFp56Xc9NSJxfP2WnCOWWAm1SmSH9o8NSADJkN/3Q cPzrAmTBA2TDAm9b6ZJjC0H3wKgmqTcaxl1+yU8eBBTJCoKseqn3+QNB8n1QlLqU Cljh/W1+Fl9wkRZyh1SPTc4xJ/K+87hQqOi4kqgsCuWQM8INnm2MyiC/IlQWGw== -----END CERTIFICATE-----Generated at Sat Jan 24 13:14:05 2026 by rpki-client