This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa File: 323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa (raw, json) Hash identifier: xP/VW0eL1HvrF9N3PTJsWrdQ7504jvtM1W1y1GYldPQ= Subject key identifier: E9:0C:8B:3D:4D:AC:26:7E:62:34:90:15:A3:A2:39:B8:50:19:D5:7F Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Certificate serial: 4E5BA933ACB8479DA604ABABD9D263E4A2719346 Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa Signing time: Tue 06 Jan 2026 19:44:48 +0000 ROA not before: Tue 06 Jan 2026 19:39:48 +0000 ROA not after: Tue 05 Jan 2027 19:44:48 +0000 asID: 263762 IP address blocks: 2803:5180:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 20:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5b:a9:33:ac:b8:47:9d:a6:04:ab:ab:d9:d2:63:e4:a2:71:93:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48 Validity Not Before: Jan 6 19:39:48 2026 GMT Not After : Jan 5 19:44:48 2027 GMT Subject: CN=E90C8B3D4DAC267E62349015A3A239B85019D57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:bd:04:a8:69:d0:f2:b9:e2:55:3f:37:10: bc:17:ce:72:be:d8:4a:ea:a4:ff:8e:f2:cd:87:ce: f0:96:74:88:3a:11:2f:3f:3e:3f:5d:0d:a4:1f:d6: dd:d1:53:dc:7d:4a:93:8e:05:74:ff:b2:04:c2:26: 18:bd:85:b8:b4:26:eb:99:f9:72:11:a7:9a:e9:b4: 48:58:3e:c9:45:a5:f9:c6:ae:a0:3e:66:e2:03:da: e1:7a:4b:a8:6c:b0:85:00:c5:25:97:9f:06:99:67: da:5f:4c:dc:6a:5e:93:25:60:48:2e:11:29:06:cf: ca:18:10:93:af:5e:e8:a8:4c:8a:d1:80:b1:31:bc: bf:95:a7:25:34:cd:b1:57:c0:ef:fb:1e:0b:bc:a2: db:e0:90:1b:58:71:f5:ff:ef:2d:fa:4e:90:01:e9: b7:1f:5e:e7:b6:c8:a2:8d:7b:c9:67:cc:f0:cd:f5: eb:4a:03:92:92:a1:46:57:f0:c8:9f:74:de:43:39: 36:26:26:2f:8d:e9:6d:0d:74:70:07:ce:12:f4:04: a8:dd:22:df:fd:49:b6:88:4c:54:18:05:75:92:bc: 5a:b0:1e:0d:31:7f:9f:7c:bd:31:74:36:1f:ee:14: c3:76:c2:a5:cc:7f:c0:69:27:5e:4a:69:b1:5b:33: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0C:8B:3D:4D:AC:26:7E:62:34:90:15:A3:A2:39:B8:50:19:D5:7F X509v3 Authority Key Identifier: keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5180:5000::/36 Signature Algorithm: sha256WithRSAEncryption a0:50:17:9a:89:75:57:10:af:9f:57:4d:eb:01:f5:15:13:3a: aa:9c:e1:64:30:14:d0:45:98:05:79:52:10:01:04:2b:31:5b: 88:6f:6e:e3:81:01:49:6e:26:a7:6b:f9:1b:d0:09:b1:0d:db: d3:8c:12:d8:e3:cf:02:15:5f:a3:84:45:28:0b:3c:53:18:16: 55:ed:8d:23:70:f9:e6:e9:3c:ac:48:50:c1:66:51:aa:49:18: 02:a3:03:02:0c:9e:1a:fc:10:5f:48:9b:73:97:5d:d1:ce:44: ae:19:32:05:05:3c:d9:50:2c:cc:f5:7c:b3:02:d5:5c:55:c5: d4:64:91:94:35:9a:a6:05:87:5c:b7:0e:f0:5d:63:65:03:4f: be:1c:2a:4e:dd:4d:17:5a:23:69:49:f3:55:99:ae:74:5d:30: 0f:9f:3a:5d:80:b2:94:f6:3a:49:37:e9:3d:ca:f6:85:e9:d4: 61:d2:9f:b7:38:ee:41:15:db:ca:fd:40:c3:4c:c9:8e:9d:d5: 79:e2:d5:ea:67:fe:af:21:24:fb:ce:49:0a:d9:e0:3b:97:80: 13:6a:c0:ee:ca:54:ce:05:6d:8e:0f:23:89:d7:e1:77:9f:a2: 00:ae:12:f1:4f:5c:9f:04:84:6a:8a:8d:8e:1e:56:34:84:cd: 5c:8e:4f:d7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTlupM6y4R52mBKur2dJj5KJxk0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG QzJDREI0ODAeFw0yNjAxMDYxOTM5NDhaFw0yNzAxMDUxOTQ0NDhaMDMxMTAvBgNV BAMTKEU5MEM4QjNENERBQzI2N0U2MjM0OTAxNUEzQTIzOUI4NTAxOUQ1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMQr0EqGnQ8rniVT83ELwXznK+ 2ErqpP+O8s2HzvCWdIg6ES8/Pj9dDaQf1t3RU9x9SpOOBXT/sgTCJhi9hbi0JuuZ +XIRp5rptEhYPslFpfnGrqA+ZuID2uF6S6hssIUAxSWXnwaZZ9pfTNxqXpMlYEgu ESkGz8oYEJOvXuioTIrRgLExvL+VpyU0zbFXwO/7Hgu8otvgkBtYcfX/7y36TpAB 6bcfXue2yKKNe8lnzPDN9etKA5KSoUZX8MifdN5DOTYmJi+N6W0NdHAHzhL0BKjd It/9SbaITFQYBXWSvFqwHg0xf598vTF0Nh/uFMN2wqXMf8BpJ15KabFbM7+nAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU6QyLPU2sJn5iNJAVo6I5uFAZ1X8wHwYDVR0j BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3 MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1 QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA1GAUDANBgkqhkiG9w0BAQsFAAOCAQEAoFAXmol1VxCvn1dN6wH1FRM6 qpzhZDAU0EWYBXlSEAEEKzFbiG9u44EBSW4mp2v5G9AJsQ3b04wS2OPPAhVfo4RF KAs8UxgWVe2NI3D55uk8rEhQwWZRqkkYAqMDAgyeGvwQX0ibc5dd0c5ErhkyBQU8 2VAszPV8swLVXFXF1GSRlDWapgWHXLcO8F1jZQNPvhwqTt1NF1ojaUnzVZmudF0w D586XYCylPY6STfpPcr2henUYdKftzjuQRXbyv1Aw0zJjp3VeeLV6mf+ryEk+85J CtngO5eAE2rA7spUzgVtjg8jidfhd5+iAK4S8U9cnwSEaoqNjh5WNITNXI5P1w== -----END CERTIFICATE-----Generated at Fri Jan 9 08:21:51 2026 by rpki-client