This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/323830333a643835303a3a2f33322d3438203d3e20323733313138.roa File: 323830333a643835303a3a2f33322d3438203d3e20323733313138.roa (raw, json) Hash identifier: Vk5dQOyxye3KHA3x3MvKS5O63/jL9KItFEHccy/7IAQ= Subject key identifier: 13:4E:43:AC:62:03:97:DA:C4:17:75:13:48:44:B7:5E:62:D0:54:26 Certificate issuer: /CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747 Certificate serial: 6FB8974BAD55D2B563B90A8F84FDE9EADAE2FEA4 Authority key identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/323830333a643835303a3a2f33322d3438203d3e20323733313138.roa Signing time: Fri 05 Dec 2025 20:10:00 +0000 ROA not before: Fri 05 Dec 2025 20:05:00 +0000 ROA not after: Fri 04 Dec 2026 20:10:00 +0000 asID: 273118 IP address blocks: 2803:d850::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 04:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b8:97:4b:ad:55:d2:b5:63:b9:0a:8f:84:fd:e9:ea:da:e2:fe:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747 Validity Not Before: Dec 5 20:05:00 2025 GMT Not After : Dec 4 20:10:00 2026 GMT Subject: CN=134E43AC620397DAC41775134844B75E62D05426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:e6:e4:d7:e7:8d:cc:45:d7:92:c7:b6:b5: cf:eb:2f:a3:be:f9:4b:fb:38:9b:24:84:5c:c0:8a: b2:c8:30:0a:56:cf:a2:ad:65:fe:9e:ec:02:5f:a6: b5:ed:d2:1c:3d:b0:97:62:12:32:56:a9:b4:64:93: 0d:3d:6e:f8:fc:22:8c:af:ae:96:80:c1:e3:9b:58: 1c:90:46:bd:49:1a:24:30:fa:a4:55:f5:39:2c:bc: 7e:63:bd:b4:9c:05:d2:6d:38:98:15:bd:5c:0b:1d: ca:be:79:61:75:75:7d:c6:16:17:2d:33:ed:08:4f: 9b:4a:c6:3e:37:03:31:8a:f8:a5:9a:6f:58:7c:44: 41:88:da:db:81:48:b5:6b:34:6f:bb:51:bc:c8:7f: d4:00:a1:5b:4a:b2:f7:74:32:2d:22:38:b7:c3:82: 4e:e1:be:cf:f7:55:fc:98:c0:5e:f2:ea:01:de:5c: 82:2f:d2:49:a9:f2:ff:d9:41:8f:7b:b2:b8:81:df: 04:bb:3f:fb:6a:b6:fc:7e:02:c4:a4:88:47:11:3f: 52:49:b4:55:16:1f:8e:2f:aa:72:a2:2e:c5:c4:29: 3e:70:37:9c:67:e1:e0:75:fc:76:e7:5f:ab:ef:36: 85:3e:a9:3e:ed:8c:b3:df:df:69:e4:b1:6f:18:03: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:43:AC:62:03:97:DA:C4:17:75:13:48:44:B7:5E:62:D0:54:26 X509v3 Authority Key Identifier: keyid:62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/323830333a643835303a3a2f33322d3438203d3e20323733313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d850::/32 Signature Algorithm: sha256WithRSAEncryption 47:fb:8d:bf:45:93:41:a2:47:01:d3:83:9f:88:2a:0b:8a:44: 50:20:df:75:76:c1:96:bc:18:a7:3d:85:49:e6:75:e2:44:b5: b0:a8:91:28:aa:a5:f3:24:2d:f4:45:a5:d0:98:90:09:2b:35: 87:ad:cc:7f:e4:eb:10:03:ee:83:3e:05:62:33:a3:80:3a:fb: 46:f4:f4:b0:79:cc:81:4d:29:35:75:ba:7b:24:2e:70:db:c7: bb:50:9f:73:83:29:df:b1:58:6b:81:01:24:f0:29:81:57:85: b5:6b:02:b5:a0:70:62:7d:0f:87:f6:fc:0f:e1:d8:b0:97:68: 55:55:08:16:89:1b:b9:b9:e9:74:ed:39:dc:c5:84:2a:45:4c: a5:ef:09:b8:cb:7f:ee:a9:3f:10:19:ba:91:6b:16:ce:02:03: b9:2b:23:aa:16:7b:da:38:ef:95:35:b6:c2:32:ea:8f:78:2b: a5:a6:d8:93:ee:07:ae:1f:ae:62:b2:fc:41:7e:dc:60:1d:6c: e6:76:07:83:e3:25:af:e4:33:b1:f2:12:81:4f:47:d1:e5:cb: 0a:52:1c:cd:16:6a:a0:b0:7f:5b:62:0a:4c:23:bf:4f:54:29: c3:fb:0c:61:a3:f3:21:bc:f7:86:29:f5:28:ee:1b:30:31:9a: 22:75:3b:55 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUb7iXS61V0rVjuQqPhP3p6tri/qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIxQjYxOTY3QjVFREVFREQ1QkRGOEJERkQxRUZFRjk3 MEZDMjc0NzAeFw0yNTEyMDUyMDA1MDBaFw0yNjEyMDQyMDEwMDBaMDMxMTAvBgNV BAMTKDEzNEU0M0FDNjIwMzk3REFDNDE3NzUxMzQ4NDRCNzVFNjJEMDU0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldObk1+eNzEXXkse2tc/rL6O+ +Uv7OJskhFzAirLIMApWz6KtZf6e7AJfprXt0hw9sJdiEjJWqbRkkw09bvj8Ioyv rpaAweObWByQRr1JGiQw+qRV9TksvH5jvbScBdJtOJgVvVwLHcq+eWF1dX3GFhct M+0IT5tKxj43AzGK+KWab1h8REGI2tuBSLVrNG+7UbzIf9QAoVtKsvd0Mi0iOLfD gk7hvs/3VfyYwF7y6gHeXIIv0kmp8v/ZQY97sriB3wS7P/tqtvx+AsSkiEcRP1JJ tFUWH44vqnKiLsXEKT5wN5xn4eB1/HbnX6vvNoU+qT7tjLPf32nksW8YA+8nAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUE05DrGIDl9rEF3UTSES3XmLQVCYwHwYDVR0j BBgwFoAUYhthlnte3u3Vvfi9/R7++XD8J0cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNDNEMzVFRjUxQ0Y5RUE5REMwOEMyRjgyODUwMjg3REJG RDI0RUZDNDdBQTMwMzBBNEMzREQ0MDY5MzBBNjVBLzAvNjIxQjYxOTY3QjVFREVF REQ1QkRGOEJERkQxRUZFRjk3MEZDMjc0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjFCNjE5NjdCNUVERUVERDVC REY4QkRGRDFFRkVGOTcwRkMyNzQ3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjQzRDM1RUY1MUNGOUVBOURDMDhDMkY4Mjg1MDI4N0RCRkQyNEVGQzQ3 QUEzMDMwQTRDM0RENDA2OTMwQTY1QS8wLzMyMzgzMDMzM2E2NDM4MzUzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzEzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD2FAw DQYJKoZIhvcNAQELBQADggEBAEf7jb9Fk0GiRwHTg5+IKguKRFAg33V2wZa8GKc9 hUnmdeJEtbCokSiqpfMkLfRFpdCYkAkrNYetzH/k6xAD7oM+BWIzo4A6+0b09LB5 zIFNKTV1unskLnDbx7tQn3ODKd+xWGuBASTwKYFXhbVrArWgcGJ9D4f2/A/h2LCX aFVVCBaJG7m56XTtOdzFhCpFTKXvCbjLf+6pPxAZupFrFs4CA7krI6oWe9o475U1 tsIy6o94K6Wm2JPuB64frmKy/EF+3GAdbOZ2B4PjJa/kM7HyEoFPR9HlywpSHM0W aqCwf1tiCkwjv09UKcP7DGGj8yG894Yp9SjuGzAxmiJ1O1U= -----END CERTIFICATE-----Generated at Sun Dec 7 10:27:38 2025 by rpki-client