This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: fzu8ZUtpEHaXRDMAdhpWZe83N7yPaTF65JFqKUH2/Sc= Subject key identifier: D6:BF:AE:17:22:84:1F:F5:26:32:15:AE:A3:EC:70:84:81:25:3B:8C Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 1D61D5871FD07FB6D0ED62A98EA78E0F0F36628C Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:47 +0000 ROA not before: Tue 06 Jan 2026 19:39:47 +0000 ROA not after: Tue 05 Jan 2027 19:44:47 +0000 asID: 263762 IP address blocks: 2803:5180:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Feb 2026 02:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:61:d5:87:1f:d0:7f:b6:d0:ed:62:a9:8e:a7:8e:0f:0f:36:62:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:47 2026 GMT Not After : Jan 5 19:44:47 2027 GMT Subject: CN=D6BFAE1722841FF5263215AEA3EC708481253B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:bf:11:91:f2:59:61:68:84:54:87:08:00: 04:98:d9:3a:41:c8:84:37:19:49:92:77:15:8d:62: 78:7d:8b:a1:34:ad:3b:4c:ef:74:1d:4d:86:07:ce: 57:09:49:12:af:94:9d:95:38:25:a4:a4:3d:d6:5e: 02:9f:2e:b7:c8:a4:dc:21:80:0f:31:2e:36:48:a1: 0e:f2:fe:99:d0:16:4b:d8:45:f3:8d:84:b3:3b:c9: b1:50:ff:88:35:2c:cd:a0:f9:86:0e:e7:a6:50:bc: be:95:8d:90:55:c4:0b:a4:82:03:21:93:36:38:29: 3c:a4:55:ce:6d:b8:a5:a6:01:d8:39:b0:b6:7b:49: 18:c0:c5:2e:db:0b:8f:0e:fa:b7:5d:37:af:cb:47: f7:ae:dc:8b:92:a0:de:4e:dd:65:08:d4:8b:b3:51: 2d:c8:05:3b:75:a5:4f:c8:9e:ba:99:2f:e6:97:ca: 34:63:ba:70:00:7c:3d:c6:32:f7:b1:79:5b:5d:97: 51:81:01:e0:0f:09:bf:1a:13:15:cc:bf:c6:ea:d6: f8:ce:89:c2:92:9d:d1:1d:d7:3d:36:96:31:0e:55: 6a:69:1a:11:95:63:6e:6b:57:93:96:c1:ad:75:f0: 35:b6:fc:f8:63:23:93:63:e6:62:01:e2:b9:06:1b: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:AE:17:22:84:1F:F5:26:32:15:AE:A3:EC:70:84:81:25:3B:8C X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a313030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:1000::/36 Signature Algorithm: sha256WithRSAEncryption d7:19:d4:2a:01:ed:e4:cc:5b:28:2e:1d:98:96:9c:58:61:a0: ff:84:cc:29:fc:d1:b1:33:91:60:70:cc:21:50:38:34:ff:da: ed:35:22:01:df:11:02:48:4e:15:15:d1:27:50:9c:da:9a:e1: e9:93:a4:27:36:58:a5:58:b9:8c:f7:de:3e:44:33:86:18:44: 4f:9e:92:a8:7e:3a:ff:9f:a4:74:13:00:8c:2b:f9:e1:66:de: a6:b0:4e:4f:30:03:3e:fb:6d:5f:8c:9b:a1:40:3d:7e:5f:be: fe:46:86:a7:fe:ab:ae:f6:b4:49:f9:69:2b:51:cc:c6:52:ea: bd:38:b9:40:43:c5:ee:ac:a4:ae:c4:55:7c:c8:52:24:63:28: 15:6c:eb:e2:ab:12:ec:94:e1:8a:ab:a8:5c:f0:5e:43:a2:55: f3:0f:2a:fc:e1:a2:09:c8:e2:8c:17:a1:e1:27:93:cc:6d:a8: 7b:2c:f1:07:69:b2:cd:e0:b4:2e:fc:fb:a9:72:bb:3a:bc:86: 41:47:26:cf:28:c7:c2:37:fd:63:45:ae:bf:0d:2a:cc:7c:4d: cc:20:13:36:9f:76:4b:93:80:bc:55:fc:4e:84:4c:ef:7e:8f: 0c:08:43:1c:02:7f:61:f0:bd:39:64:a4:ab:db:60:20:0d:1b: 00:24:08:86 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHWHVhx/Qf7bQ7WKpjqeODw82YowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDdaFw0yNzAxMDUxOTQ0NDdaMDMxMTAvBgNV BAMTKEQ2QkZBRTE3MjI4NDFGRjUyNjMyMTVBRUEzRUM3MDg0ODEyNTNCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHb8RkfJZYWiEVIcIAASY2TpB yIQ3GUmSdxWNYnh9i6E0rTtM73QdTYYHzlcJSRKvlJ2VOCWkpD3WXgKfLrfIpNwh gA8xLjZIoQ7y/pnQFkvYRfONhLM7ybFQ/4g1LM2g+YYO56ZQvL6VjZBVxAukggMh kzY4KTykVc5tuKWmAdg5sLZ7SRjAxS7bC48O+rddN6/LR/eu3IuSoN5O3WUI1Iuz US3IBTt1pU/InrqZL+aXyjRjunAAfD3GMvexeVtdl1GBAeAPCb8aExXMv8bq1vjO icKSndEd1z02ljEOVWppGhGVY25rV5OWwa118DW2/PhjI5Nj5mIB4rkGGzWxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU1r+uFyKEH/UmMhWuo+xwhIElO4wwHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAEDANBgkqhkiG9w0BAQsFAAOCAQEA1xnUKgHt5MxbKC4dmJacWGGg /4TMKfzRsTORYHDMIVA4NP/a7TUiAd8RAkhOFRXRJ1Cc2prh6ZOkJzZYpVi5jPfe PkQzhhhET56SqH46/5+kdBMAjCv54WbeprBOTzADPvttX4yboUA9fl++/kaGp/6r rva0SflpK1HMxlLqvTi5QEPF7qykrsRVfMhSJGMoFWzr4qsS7JThiquoXPBeQ6JV 8w8q/OGiCcjijBeh4SeTzG2oeyzxB2myzeC0Lvz7qXK7OryGQUcmzyjHwjf9Y0Wu vw0qzHxNzCATNp92S5OAvFX8ToRM736PDAhDHAJ/YfC9OWSkq9tgIA0bACQIhg== -----END CERTIFICATE-----Generated at Fri Feb 6 23:03:37 2026 by rpki-client