This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa File: 323830303a3331303a3a2f33332d3438203d3e203138363738.roa (raw, json) Hash identifier: EFkoEkaz128CTIze3Z1xEejFRFjjidAPvcJiGn4fETQ= Subject key identifier: 9D:B3:88:B9:50:58:05:77:1A:26:1B:B1:D7:5D:77:EC:89:66:BA:75 Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5 Certificate serial: 5B1B20E2B4A01002BE0349273436618F18760631 Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa Signing time: Tue 02 Dec 2025 12:35:00 +0000 ROA not before: Tue 02 Dec 2025 12:30:00 +0000 ROA not after: Tue 01 Dec 2026 12:35:00 +0000 asID: 18678 IP address blocks: 2800:310::/33 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 04:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1b:20:e2:b4:a0:10:02:be:03:49:27:34:36:61:8f:18:76:06:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5 Validity Not Before: Dec 2 12:30:00 2025 GMT Not After : Dec 1 12:35:00 2026 GMT Subject: CN=9DB388B9505805771A261BB1D75D77EC8966BA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:0c:13:2d:3a:5a:be:6f:20:50:f7:64:e4: 63:1e:b2:f8:cf:80:a6:10:77:a6:15:c3:68:4c:5f: b8:3a:55:0b:88:d2:63:ad:90:eb:1e:e8:db:4b:bd: 22:9d:aa:75:bb:a2:93:55:b1:33:eb:6e:01:36:4a: 2a:77:79:89:13:92:37:73:01:2c:3c:c1:50:b1:0b: 63:d1:1f:bc:0c:51:7c:ac:5f:3c:68:ff:85:5f:cc: 1b:74:2c:7f:6d:6c:8b:9d:19:12:27:4d:43:b7:9d: f7:a1:e1:c2:f2:0c:90:78:86:f2:2f:9d:16:de:dd: bf:a5:cd:f9:59:96:ae:52:05:ed:4f:1d:c4:2e:e4: 81:71:29:7a:43:a5:31:54:a3:e3:d1:33:b0:e9:40: 22:c2:8b:2f:76:39:4d:bf:0c:80:9d:fc:42:28:52: e6:db:92:3b:45:78:b4:20:18:60:7a:3a:1d:6a:68: 5c:48:78:cd:d7:ad:4d:52:8c:74:48:5e:db:c8:53: f0:1f:7d:1e:1b:71:44:d7:44:57:39:8b:37:3b:f5: 4f:bb:0f:7c:5e:26:f1:8b:94:e8:13:1d:03:e6:db: 36:9e:6a:25:4c:da:6c:d1:04:3e:37:87:67:88:2c: 14:68:d7:fb:74:5f:e0:a4:16:08:76:04:10:1a:2b: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:88:B9:50:58:05:77:1A:26:1B:B1:D7:5D:77:EC:89:66:BA:75 X509v3 Authority Key Identifier: keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:310::/33 Signature Algorithm: sha256WithRSAEncryption 3e:6f:2f:90:6d:c7:bd:2e:21:59:7e:d7:79:b5:09:0e:4a:ba: ff:08:8d:fd:4e:5c:2b:93:ea:67:1e:8e:d7:ca:38:75:a0:b6: 7d:d6:61:59:71:1c:89:e6:27:d4:91:73:3a:67:10:73:6e:f2: f6:43:b1:c4:7f:25:2a:4f:53:65:8d:49:6d:95:89:bd:fc:3b: 71:2b:f7:18:c2:b7:c6:98:e0:75:53:7f:57:63:19:f8:08:8c: 45:a4:e3:e1:d0:17:97:17:92:6c:42:7b:75:81:86:c5:d4:de: 27:39:47:de:08:b7:16:66:6c:bd:ef:0d:d0:d3:d0:76:02:68: 7f:3c:15:c0:26:bc:46:01:17:d0:b8:76:28:c9:01:de:07:a7: a5:af:aa:b1:d0:7f:0f:49:0d:9d:93:7a:2b:ea:8a:01:6f:aa: 7d:23:e5:d0:93:05:91:b2:6c:22:95:75:3a:de:b6:25:1c:ff: 7d:93:0f:b1:0f:76:3e:ff:4e:09:95:cd:5b:53:43:4f:63:d1: 40:27:68:84:53:82:6e:91:78:e3:c4:af:75:36:e3:c2:08:04: cc:02:b1:7e:1d:9f:77:18:db:c2:fe:ba:b3:b5:4f:b4:5f:27: 7a:7a:82:41:0b:de:2c:0a:f7:66:e3:fc:1b:9b:66:67:65:e4: 05:9d:3a:e2 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUWxsg4rSgEAK+A0knNDZhjxh2BjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz NUU4N0NDNTAeFw0yNTEyMDIxMjMwMDBaFw0yNjEyMDExMjM1MDBaMDMxMTAvBgNV BAMTKDlEQjM4OEI5NTA1ODA1NzcxQTI2MUJCMUQ3NUQ3N0VDODk2NkJBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XwwTLTpavm8gUPdk5GMesvjP gKYQd6YVw2hMX7g6VQuI0mOtkOse6NtLvSKdqnW7opNVsTPrbgE2Sip3eYkTkjdz ASw8wVCxC2PRH7wMUXysXzxo/4VfzBt0LH9tbIudGRInTUO3nfeh4cLyDJB4hvIv nRbe3b+lzflZlq5SBe1PHcQu5IFxKXpDpTFUo+PRM7DpQCLCiy92OU2/DICd/EIo UubbkjtFeLQgGGB6Oh1qaFxIeM3XrU1SjHRIXtvIU/AffR4bcUTXRFc5izc79U+7 D3xeJvGLlOgTHQPm2zaeaiVM2mzRBD43h2eILBRo1/t0X+CkFgh2BBAaK5aJAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUnbOIuVBYBXcaJhux11137IlmunUwHwYDVR0j BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMyMzgzMDMwM2EzMzMxMzAzYTNhMmYz MzMzMmQzNDM4MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAADEAAwDQYJ KoZIhvcNAQELBQADggEBAD5vL5Btx70uIVl+13m1CQ5Kuv8Ijf1OXCuT6mcejtfK OHWgtn3WYVlxHInmJ9SRczpnEHNu8vZDscR/JSpPU2WNSW2Vib38O3Er9xjCt8aY 4HVTf1djGfgIjEWk4+HQF5cXkmxCe3WBhsXU3ic5R94ItxZmbL3vDdDT0HYCaH88 FcAmvEYBF9C4dijJAd4Hp6WvqrHQfw9JDZ2TeivqigFvqn0j5dCTBZGybCKVdTre tiUc/32TD7EPdj7/TgmVzVtTQ09j0UAnaIRTgm6ReOPEr3U248IIBMwCsX4dn3cY 28L+urO1T7RfJ3p6gkEL3iwK92bj/BubZmdl5AWdOuI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:03:32 2025 by rpki-client