This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa File: 323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa (raw, json) Hash identifier: CcsNdr5FVgSJvhp0jQBholaoQ8SQZnyS07cai8tyaiA= Subject key identifier: 6C:4F:F0:75:11:64:E1:09:53:7D:A3:0F:0E:3D:E1:3F:5C:6B:20:97 Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6 Certificate serial: 0B6BC0F3B2CBFDF8B059C22FE63A824F17F611A9 Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa Signing time: Tue 06 Jan 2026 20:52:18 +0000 ROA not before: Tue 06 Jan 2026 20:47:18 +0000 ROA not after: Tue 05 Jan 2027 20:52:18 +0000 asID: 263681 IP address blocks: 2803:c240:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 23 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6b:c0:f3:b2:cb:fd:f8:b0:59:c2:2f:e6:3a:82:4f:17:f6:11:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6 Validity Not Before: Jan 6 20:47:18 2026 GMT Not After : Jan 5 20:52:18 2027 GMT Subject: CN=6C4FF0751164E109537DA30F0E3DE13F5C6B2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:3c:63:e7:f3:b5:b7:ba:0a:03:ba:d8:e9: 83:9a:b5:d0:af:2e:17:42:b4:ee:8e:03:4e:87:55: 57:6e:89:ad:bb:f2:3a:e9:8e:0b:0e:15:e3:a4:e2: 51:a2:14:08:dc:e1:da:e4:93:0e:19:42:85:51:62: 60:cd:d7:9d:c6:2a:47:8f:b7:3b:02:c4:14:ce:ad: c4:42:18:b3:55:1f:0f:b8:87:9a:81:ae:50:7c:22: 21:3e:ac:dc:5c:8b:eb:2c:d7:ac:8f:1d:d2:6c:73: 9c:a5:9f:f2:fd:fd:fb:86:5a:8c:24:95:70:2e:40: 11:dd:91:d6:c5:c6:9d:30:52:55:ca:76:ad:e4:57: cf:eb:37:98:2b:fe:b4:82:a3:dc:b8:73:b9:af:89: a0:7f:1f:6f:64:a5:25:52:d1:55:d2:0e:34:f9:12: 7f:ab:83:41:8f:5f:9d:77:da:3b:9f:9f:bd:1f:ac: fa:15:02:77:e8:e1:2e:da:e3:65:88:05:24:f0:09: 90:a9:c9:ab:38:91:69:dd:49:0f:18:8e:ec:94:2c: 58:30:36:bc:52:89:3a:99:22:7e:06:c4:46:e2:ed: 6f:2b:a6:2c:73:e1:41:36:fa:d4:7c:45:68:41:eb: e8:6a:7c:0f:d7:6b:b0:c7:b6:5f:c4:ac:9e:ed:85: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:F0:75:11:64:E1:09:53:7D:A3:0F:0E:3D:E1:3F:5C:6B:20:97 X509v3 Authority Key Identifier: keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c240:1002::/48 Signature Algorithm: sha256WithRSAEncryption 61:e3:55:ad:94:40:41:ec:59:b4:97:42:16:7e:d9:0d:22:7b: c3:7a:04:98:48:53:6d:5c:de:fa:0c:cf:65:ba:5e:fc:84:5b: 2e:80:0c:fe:11:cd:c7:c3:12:3f:59:26:8a:86:61:98:35:04: b8:4b:d6:e5:0c:98:99:b8:fb:89:75:54:64:5b:4b:16:93:ce: 93:61:7d:27:db:f6:82:73:6d:97:36:8a:29:cc:42:3e:9a:d5: 16:82:6f:da:d8:dc:e0:43:5a:36:32:fa:c4:42:59:97:eb:c6: 46:d4:78:a6:85:68:1f:a6:28:c1:fc:4f:35:07:72:40:4c:bc: 26:bd:78:01:1d:da:53:2e:91:cc:e9:44:d3:35:1d:63:1c:f8: 7e:7e:19:0e:00:dc:da:6e:8d:9a:92:56:52:ed:2e:58:9e:a4: d3:8c:4c:c5:78:aa:45:39:18:60:1e:01:c5:90:9a:8d:6d:95: e1:8a:d4:29:c4:6c:e9:7e:94:d4:a2:80:29:c8:0f:50:ab:03: 33:42:9a:2b:e0:06:62:0d:1d:2d:36:9d:8e:9a:63:fb:d4:e2: 1c:56:77:b0:1c:b2:03:74:0c:bf:47:30:54:10:10:6d:ba:b6: 6e:f1:d2:2b:b3:f5:27:1b:87:0c:51:7e:a5:31:bb:10:86:c1: 8d:c1:32:a9 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUC2vA87LL/fiwWcIv5jqCTxf2EakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG MkQzNTVDNjAeFw0yNjAxMDYyMDQ3MThaFw0yNzAxMDUyMDUyMThaMDMxMTAvBgNV BAMTKDZDNEZGMDc1MTE2NEUxMDk1MzdEQTMwRjBFM0RFMTNGNUM2QjIwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kzxj5/O1t7oKA7rY6YOatdCv LhdCtO6OA06HVVduia278jrpjgsOFeOk4lGiFAjc4drkkw4ZQoVRYmDN153GKkeP tzsCxBTOrcRCGLNVHw+4h5qBrlB8IiE+rNxci+ss16yPHdJsc5yln/L9/fuGWowk lXAuQBHdkdbFxp0wUlXKdq3kV8/rN5gr/rSCo9y4c7mviaB/H29kpSVS0VXSDjT5 En+rg0GPX5132jufn70frPoVAnfo4S7a42WIBSTwCZCpyas4kWndSQ8YjuyULFgw NrxSiTqZIn4GxEbi7W8rpixz4UE2+tR8RWhB6+hqfA/Xa7DHtl/ErJ7thYi9AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUbE/wdRFk4QlTfaMPDj3hP1xrIJcwHwYDVR0j BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1 QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4 NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4 REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzMyMzgzMDMzM2E2MzMyMzQzMDNhMzEz MDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzMzNjM4MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8JAEAIwDQYJKoZIhvcNAQELBQADggEBAGHjVa2UQEHsWbSXQhZ+2Q0i e8N6BJhIU21c3voMz2W6XvyEWy6ADP4RzcfDEj9ZJoqGYZg1BLhL1uUMmJm4+4l1 VGRbSxaTzpNhfSfb9oJzbZc2iinMQj6a1RaCb9rY3OBDWjYy+sRCWZfrxkbUeKaF aB+mKMH8TzUHckBMvCa9eAEd2lMukczpRNM1HWMc+H5+GQ4A3NpujZqSVlLtLlie pNOMTMV4qkU5GGAeAcWQmo1tleGK1CnEbOl+lNSigCnID1CrAzNCmivgBmINHS02 nY6aY/vU4hxWd7AcsgN0DL9HMFQQEG26tm7x0iuz9ScbhwxRfqUxuxCGwY3BMqk= -----END CERTIFICATE-----Generated at Mon Jan 19 20:03:06 2026 by rpki-client