This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa File: 323830333a643232303a3a2f33322d3438203d3e20323636383830.roa (raw, json) Hash identifier: niJ9ejR+JzA5skyb7F0TlpkGPMPsP4sbc2ZZPYLKFKA= Subject key identifier: E0:60:C1:EE:15:A7:54:B3:4E:B4:AD:27:11:C6:7B:02:9E:28:01:0F Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66 Certificate serial: 708B87DD06EEAEB5A11BF9C7AA85BC4D35CF910C Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa Signing time: Tue 06 Jan 2026 19:46:36 +0000 ROA not before: Tue 06 Jan 2026 19:41:36 +0000 ROA not after: Tue 05 Jan 2027 19:46:36 +0000 asID: 266880 IP address blocks: 2803:d220::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 08:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:87:dd:06:ee:ae:b5:a1:1b:f9:c7:aa:85:bc:4d:35:cf:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66 Validity Not Before: Jan 6 19:41:36 2026 GMT Not After : Jan 5 19:46:36 2027 GMT Subject: CN=E060C1EE15A754B34EB4AD2711C67B029E28010F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:ef:74:92:c9:03:5d:94:e0:de:05:df:40: 07:64:07:be:24:65:e7:24:29:ac:0e:14:e9:ec:b3: cf:85:63:56:46:9c:ad:ee:e7:b5:84:d0:90:8c:bd: 4e:74:ef:f9:b2:f2:02:ef:12:1f:cc:07:ff:5b:4d: f3:bb:1e:be:d1:62:31:f7:33:9b:02:de:ec:da:d3: 91:f6:61:da:4b:37:d2:e6:30:ac:db:d0:82:c7:26: 48:33:66:22:1c:95:30:5b:d8:20:af:18:87:90:30: ce:ed:f8:23:72:5f:05:f0:c0:47:3a:42:4f:79:1f: 40:d9:12:a7:2c:22:ae:c5:f4:0e:17:e1:25:b2:1d: b9:3b:ab:b5:37:e7:ab:5a:da:f7:0a:ea:73:3c:c3: a2:4e:81:ac:b8:30:06:07:29:6f:67:48:91:72:65: db:24:b8:9f:36:26:45:36:54:0d:78:f1:82:5c:45: c5:1d:4b:5d:6a:26:2c:e5:0a:4d:07:95:d3:58:4c: e3:6c:0d:60:0a:b1:47:83:9d:3f:3a:91:56:9a:05: 31:37:4f:9c:72:d0:6e:17:02:ea:ae:22:e7:87:85: e2:8b:fd:7b:6f:74:fe:86:ec:37:bf:1e:18:02:bf: 24:16:35:91:de:8b:aa:7d:1e:74:b2:99:d6:f9:3e: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:60:C1:EE:15:A7:54:B3:4E:B4:AD:27:11:C6:7B:02:9E:28:01:0F X509v3 Authority Key Identifier: keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323636383830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d220::/32 Signature Algorithm: sha256WithRSAEncryption c4:93:0e:9f:0f:90:9e:9b:ee:21:07:45:02:a3:df:0a:ea:53: fb:aa:3a:be:48:e5:05:33:6b:95:22:17:26:2d:ae:21:eb:e0: 6a:64:5b:45:c5:86:e2:7b:ed:ad:a1:3b:0d:ab:51:5e:50:a0: 00:a3:77:33:8b:08:e3:c0:91:3c:08:0d:09:fc:04:c8:76:7c: 0d:44:79:54:ba:53:f5:ee:9b:06:7d:ab:be:20:6b:c8:31:c0: 6f:fa:81:ec:3e:83:d2:cb:61:eb:d7:cf:f0:38:06:ba:a5:9e: 39:b9:c4:70:c0:78:cf:73:f2:5e:33:6e:33:04:6a:0b:7c:eb: b0:21:03:ad:35:1a:7f:40:2a:07:19:cf:85:51:bc:fe:91:0e: 26:7d:72:d7:14:88:d0:07:6a:22:2a:58:09:9f:d4:2f:bf:d2: 94:60:2d:7c:f6:a5:72:d2:e1:17:e9:b1:24:30:d0:5f:8f:63: b8:ca:4f:12:66:3b:32:b4:da:a0:12:9a:64:0b:1d:8d:f3:c5: ab:b7:73:ab:a2:a7:8b:97:97:79:f7:9a:d6:89:45:b5:d9:23: d8:d5:62:b1:96:cf:57:aa:2c:25:38:7e:23:a9:84:ac:92:a9: 4b:41:83:8b:59:af:ed:da:19:cf:50:a6:37:b7:c0:92:d7:13: 2d:e7:8e:c6 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUcIuH3QburrWhG/nHqoW8TTXPkQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVFRkZFMENCRDcw N0ZDQUU2NjAeFw0yNjAxMDYxOTQxMzZaFw0yNzAxMDUxOTQ2MzZaMDMxMTAvBgNV BAMTKEUwNjBDMUVFMTVBNzU0QjM0RUI0QUQyNzExQzY3QjAyOUUyODAxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEe90kskDXZTg3gXfQAdkB74k ZeckKawOFOnss8+FY1ZGnK3u57WE0JCMvU507/my8gLvEh/MB/9bTfO7Hr7RYjH3 M5sC3uza05H2YdpLN9LmMKzb0ILHJkgzZiIclTBb2CCvGIeQMM7t+CNyXwXwwEc6 Qk95H0DZEqcsIq7F9A4X4SWyHbk7q7U356ta2vcK6nM8w6JOgay4MAYHKW9nSJFy ZdskuJ82JkU2VA148YJcRcUdS11qJizlCk0HldNYTONsDWAKsUeDnT86kVaaBTE3 T5xy0G4XAuquIueHheKL/XtvdP6G7De/HhgCvyQWNZHei6p9HnSymdb5PraDAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU4GDB7hWnVLNOtK0nEcZ7Ap4oAQ8wHwYDVR0j BBgwFoAUsa+K0OvTB3cpeK5e/+DL1wf8rmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVB RjE2NDJGQzQxNzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3 NzI5NzhBRTVFRkZFMENCRDcwN0ZDQUU2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFGOEFEMEVCRDMwNzc3Mjk3 OEFFNUVGRkUwQ0JENzA3RkNBRTY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIwMTU1NTA4RDQ1QUYxNjQyRkM0 MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wLzMyMzgzMDMzM2E2NDMyMzIzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM4MzgzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0iAw DQYJKoZIhvcNAQELBQADggEBAMSTDp8PkJ6b7iEHRQKj3wrqU/uqOr5I5QUza5Ui FyYtriHr4GpkW0XFhuJ77a2hOw2rUV5QoACjdzOLCOPAkTwIDQn8BMh2fA1EeVS6 U/XumwZ9q74ga8gxwG/6gew+g9LLYevXz/A4Brqlnjm5xHDAeM9z8l4zbjMEagt8 67AhA601Gn9AKgcZz4VRvP6RDiZ9ctcUiNAHaiIqWAmf1C+/0pRgLXz2pXLS4Rfp sSQw0F+PY7jKTxJmOzK02qASmmQLHY3zxau3c6uip4uXl3n3mtaJRbXZI9jVYrGW z1eqLCU4fiOphKySqUtBg4tZr+3aGc9Qpje3wJLXEy3njsY= -----END CERTIFICATE-----Generated at Sun Jan 11 20:19:36 2026 by rpki-client