This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: FULxq8MkFqlarjpsYULCZF2au1S1+XeguUvzpvJwPNQ= Subject key identifier: 5B:C9:B1:33:02:61:36:44:8A:7C:72:E8:C8:80:A4:94:07:CC:0C:91 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 1080E8A5AEB3C20C1432FB75BA69031018E5CBE8 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:26 +0000 ROA not before: Tue 06 Jan 2026 19:07:26 +0000 ROA not after: Tue 05 Jan 2027 19:12:26 +0000 asID: 269782 IP address blocks: 2803:2360:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 03:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:80:e8:a5:ae:b3:c2:0c:14:32:fb:75:ba:69:03:10:18:e5:cb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:26 2026 GMT Not After : Jan 5 19:12:26 2027 GMT Subject: CN=5BC9B133026136448A7C72E8C880A49407CC0C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:30:45:ed:42:55:25:a3:aa:39:95:25:bd: 77:56:7a:78:dc:82:b3:7f:cf:68:db:1c:f8:82:38: 41:86:d7:6c:6b:8c:eb:67:58:52:59:d6:9b:87:23: b2:65:ef:d5:d4:a5:55:51:99:f4:f1:37:1d:be:d2: b8:29:8c:82:90:62:16:6d:3c:5e:f9:b0:70:4b:a0: c7:db:d5:39:84:77:bb:df:23:ca:b9:57:bf:d7:06: d7:bf:6c:f0:33:30:1d:1d:ae:c0:db:65:14:6b:28: 47:ef:28:cc:b2:6a:5b:2b:90:e3:13:43:70:ec:b8: 99:d5:c8:90:d1:32:b4:34:f6:cc:8a:17:db:6f:6c: 17:63:21:77:cc:e2:e9:ff:25:f1:9e:23:ce:f8:e4: cd:55:38:27:f4:14:e5:98:3f:f4:da:21:e4:0b:ce: e6:f1:b7:27:e7:ae:41:e3:98:77:3f:5e:b4:2d:78: 00:3b:80:3f:be:ed:44:f0:cd:27:84:54:74:a3:d1: da:32:a9:b0:76:bc:4e:5f:0c:e6:37:3b:99:e1:9a: e2:87:3b:6e:4d:b4:d9:d2:67:64:41:83:9d:5d:84: 19:87:ad:58:26:04:2f:fd:07:9e:ed:55:8f:71:ab: 2f:64:0a:43:14:81:11:94:b5:9c:19:52:b6:29:0f: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C9:B1:33:02:61:36:44:8A:7C:72:E8:C8:80:A4:94:07:CC:0C:91 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a353030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:5000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:35:3f:d6:16:01:fa:c4:ba:51:73:43:2e:2a:66:8f:64:79: 2e:47:06:25:a0:4e:9c:43:e5:17:ff:80:57:9a:39:90:9c:ea: 04:1d:7a:58:b2:51:52:ae:74:6d:22:0e:20:cc:4f:c3:dd:43: 47:67:ac:59:1d:bb:da:7e:b8:18:09:af:23:63:c0:c1:e3:10: 44:88:4b:39:a8:3c:58:bc:a7:62:fd:da:bf:71:ec:a1:d6:11: 97:a8:ad:f7:4c:8f:b4:5c:1c:9e:64:df:37:c7:c7:ca:73:25: bb:3b:af:7e:c7:d7:c6:26:30:ff:d4:80:f9:51:f9:c3:60:35: a3:5d:0b:3c:5e:5a:d4:e4:8d:d1:37:40:12:54:dd:27:29:10: 1d:c5:4b:6b:0f:a4:f4:19:56:51:39:43:76:c6:79:8e:66:fe: e6:87:86:fa:b3:8c:9c:ed:7e:ce:53:65:09:bf:d0:c5:ab:66: 5b:cc:58:e5:84:52:dd:a0:c8:62:f1:3d:2f:91:64:db:67:4c: c1:09:24:4f:c9:30:be:f9:82:6f:4c:8f:97:b1:a9:ab:a1:9a: de:b9:a8:04:3b:48:54:e8:02:5c:5e:79:cb:29:64:b0:13:90: 4b:2f:66:2d:22:e6:4a:4b:21:d9:18:6c:72:f2:b4:2c:03:17: 3b:f3:fb:89 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEIDopa6zwgwUMvt1umkDEBjly+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjZaFw0yNzAxMDUxOTEyMjZaMDMxMTAvBgNV BAMTKDVCQzlCMTMzMDI2MTM2NDQ4QTdDNzJFOEM4ODBBNDk0MDdDQzBDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYDBF7UJVJaOqOZUlvXdWenjc grN/z2jbHPiCOEGG12xrjOtnWFJZ1puHI7Jl79XUpVVRmfTxNx2+0rgpjIKQYhZt PF75sHBLoMfb1TmEd7vfI8q5V7/XBte/bPAzMB0drsDbZRRrKEfvKMyyalsrkOMT Q3DsuJnVyJDRMrQ09syKF9tvbBdjIXfM4un/JfGeI8745M1VOCf0FOWYP/TaIeQL zubxtyfnrkHjmHc/XrQteAA7gD++7UTwzSeEVHSj0doyqbB2vE5fDOY3O5nhmuKH O25NtNnSZ2RBg51dhBmHrVgmBC/9B57tVY9xqy9kCkMUgRGUtZwZUrYpD5bdAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUW8mxMwJhNkSKfHLoyICklAfMDJEwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgUDANBgkqhkiG9w0BAQsFAAOCAQEAbTU/1hYB+sS6UXNDLipmj2R5 LkcGJaBOnEPlF/+AV5o5kJzqBB16WLJRUq50bSIOIMxPw91DR2esWR272n64GAmv I2PAweMQRIhLOag8WLynYv3av3HsodYRl6it90yPtFwcnmTfN8fHynMluzuvfsfX xiYw/9SA+VH5w2A1o10LPF5a1OSN0TdAElTdJykQHcVLaw+k9BlWUTlDdsZ5jmb+ 5oeG+rOMnO1+zlNlCb/QxatmW8xY5YRS3aDIYvE9L5Fk22dMwQkkT8kwvvmCb0yP l7Gpq6Ga3rmoBDtIVOgCXF55yylksBOQSy9mLSLmSksh2RhscvK0LAMXO/P7iQ== -----END CERTIFICATE-----Generated at Sun Jan 25 01:52:45 2026 by rpki-client