This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa File: 323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa (raw, json) Hash identifier: yweeKX4EqowYc7+GYeTi52XJhcpz+2tIayhJlJIGNqg= Subject key identifier: DD:B9:88:29:1C:8D:01:86:A5:4E:ED:C8:08:7C:AA:A6:7C:9B:70:26 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 5C5DF7732CFED6C4095C8951B6DBBA40BCBCD4F0 Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa Signing time: Fri 02 Jan 2026 16:57:05 +0000 ROA not before: Fri 02 Jan 2026 16:52:05 +0000 ROA not after: Fri 01 Jan 2027 16:57:05 +0000 asID: 272806 IP address blocks: 2803:cd60:8710::/44 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Jan 2026 00:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5d:f7:73:2c:fe:d6:c4:09:5c:89:51:b6:db:ba:40:bc:bc:d4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Jan 2 16:52:05 2026 GMT Not After : Jan 1 16:57:05 2027 GMT Subject: CN=DDB988291C8D0186A54EEDC8087CAAA67C9B7026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:86:ae:33:3d:f7:5e:c6:1b:08:bc:c6:36: 77:ae:97:4c:d8:d9:a7:c0:98:36:7f:ab:46:e8:3a: 2a:b6:53:71:78:d4:6c:59:5d:94:d0:03:a0:1b:a2: 94:27:da:cd:b7:11:cd:18:57:55:ac:fa:4f:2d:56: cd:71:17:05:4b:7a:79:40:43:f8:13:10:ea:22:b5: f0:d8:8d:bd:01:bb:f4:aa:c2:88:ab:ff:63:7d:6e: fb:91:66:3a:a8:fb:31:f8:68:e9:ae:fe:11:57:2a: 33:5f:dc:30:cc:e8:bc:6e:82:8d:fc:7f:63:12:05: db:3c:20:a1:7c:ac:44:fc:3a:b4:d5:b5:ad:a8:e9: 41:8b:3a:b8:21:ab:e7:a4:23:cc:32:1a:8e:0b:5f: c6:87:3d:58:6d:49:a8:12:25:95:c0:20:ff:53:2a: 65:39:a7:d9:d1:e7:68:be:1b:de:9e:b7:9e:e2:66: 28:8b:27:a6:1e:88:f8:24:6f:2f:b3:22:9a:4c:f9: e7:0f:8c:1b:77:58:fb:50:60:12:81:45:fb:1d:d6: f3:4b:3a:00:2c:11:73:2a:f7:64:c9:99:43:fc:d7: fa:ce:db:20:f8:3b:4a:7a:f8:4d:33:ca:82:a8:5f: cc:01:d3:ef:a8:c7:34:3f:1c:51:c2:31:42:be:d6: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:88:29:1C:8D:01:86:A5:4E:ED:C8:08:7C:AA:A6:7C:9B:70:26 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:8710::/44 Signature Algorithm: sha256WithRSAEncryption 58:3f:10:a9:4c:a3:c2:02:ff:8a:1f:6c:e5:27:1b:e3:e5:d6: 7a:6c:76:78:36:ae:98:87:95:2a:5a:0b:2c:8e:3f:81:c1:16: 5f:10:7f:d7:91:5c:56:c4:3c:dd:bb:11:a8:fa:57:d6:cd:f3: 43:44:1d:07:73:02:d9:2a:cf:83:9d:94:3d:b4:cc:76:f6:1b: c0:59:e3:13:56:2a:42:ac:75:c5:09:8c:3b:31:3f:bc:e7:74: 7a:c0:84:a1:6b:7f:5d:ae:7c:fa:85:61:bb:72:de:cd:14:38: 26:c6:62:36:66:a0:dc:71:30:5c:1f:75:ec:13:4a:ed:17:43: c7:06:9b:51:60:92:0a:d6:15:80:38:3a:c3:27:dd:c7:b9:a1: 5a:60:04:51:69:27:7d:02:8c:30:53:89:a3:be:5d:64:16:14: 7d:89:6d:9e:ed:aa:7c:11:89:b7:29:d9:fc:16:e6:93:37:58: b2:e6:14:a6:6b:1c:79:19:ba:29:26:ff:18:b6:da:0d:d0:c6: 2f:31:ef:b3:bf:51:f4:cb:67:1d:9e:4d:83:7d:c1:04:3e:c0: 25:0f:a0:07:43:3e:59:1e:ce:83:a0:25:e3:c5:d1:bf:3e:b4: b8:75:96:c9:5b:fc:fb:9e:93:4c:01:1c:05:5b:68:d2:70:0d: e4:b9:af:7d -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUXF33cyz+1sQJXIlRttu6QLy81PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNjAxMDIxNjUyMDVaFw0yNzAxMDExNjU3MDVaMDMxMTAvBgNV BAMTKEREQjk4ODI5MUM4RDAxODZBNTRFRURDODA4N0NBQUE2N0M5QjcwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMIauMz33XsYbCLzGNneul0zY 2afAmDZ/q0boOiq2U3F41GxZXZTQA6AbopQn2s23Ec0YV1Ws+k8tVs1xFwVLenlA Q/gTEOoitfDYjb0Bu/Sqwoir/2N9bvuRZjqo+zH4aOmu/hFXKjNf3DDM6Lxugo38 f2MSBds8IKF8rET8OrTVta2o6UGLOrghq+ekI8wyGo4LX8aHPVhtSagSJZXAIP9T KmU5p9nR52i+G96et57iZiiLJ6YeiPgkby+zIppM+ecPjBt3WPtQYBKBRfsd1vNL OgAsEXMq92TJmUP81/rO2yD4O0p6+E0zyoKoX8wB0++oxzQ/HFHCMUK+1uFrAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU3bmIKRyNAYalTu3ICHyqpnybcCYwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzgz NzMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzODMwMzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQoA81ghxAwDQYJKoZIhvcNAQELBQADggEBAFg/EKlMo8IC/4ofbOUnG+Pl 1npsdng2rpiHlSpaCyyOP4HBFl8Qf9eRXFbEPN27Eaj6V9bN80NEHQdzAtkqz4Od lD20zHb2G8BZ4xNWKkKsdcUJjDsxP7zndHrAhKFrf12ufPqFYbty3s0UOCbGYjZm oNxxMFwfdewTSu0XQ8cGm1FgkgrWFYA4OsMn3ce5oVpgBFFpJ30CjDBTiaO+XWQW FH2JbZ7tqnwRibcp2fwW5pM3WLLmFKZrHHkZuikm/xi22g3Qxi8x77O/UfTLZx2e TYN9wQQ+wCUPoAdDPlkezoOgJePF0b8+tLh1lslb/Puek0wBHAVbaNJwDeS5r30= -----END CERTIFICATE-----Generated at Tue Jan 27 08:38:10 2026 by rpki-client