This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31303a3a2f34382d3438203d3e203432.roa File: 323830313a3134303a31303a3a2f34382d3438203d3e203432.roa (raw, json) Hash identifier: vZzE/Awvwc4o6XplZ9YTfzOc4ab6SByY2wZ5FfWh3TE= Subject key identifier: C7:D4:65:2B:88:0C:4A:72:F5:49:5B:7D:C9:21:9E:BF:71:B1:54:07 Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600 Certificate serial: 205C6B171D73A46E73084BD5F2A57545D1184D1C Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31303a3a2f34382d3438203d3e203432.roa Signing time: Mon 17 Nov 2025 11:52:45 +0000 ROA not before: Mon 17 Nov 2025 11:47:45 +0000 ROA not after: Mon 16 Nov 2026 11:52:45 +0000 asID: 42 IP address blocks: 2801:140:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 03:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5c:6b:17:1d:73:a4:6e:73:08:4b:d5:f2:a5:75:45:d1:18:4d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600 Validity Not Before: Nov 17 11:47:45 2025 GMT Not After : Nov 16 11:52:45 2026 GMT Subject: CN=C7D4652B880C4A72F5495B7DC9219EBF71B15407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:0e:fd:df:b5:10:db:da:88:1d:d0:93:66: f2:c3:c4:93:12:f5:7b:3f:81:44:b1:4c:55:e6:40: b1:6a:69:ee:dd:d2:03:0a:c9:db:e8:e4:ba:a7:40: fa:68:de:02:e5:03:76:8f:36:b9:c7:67:3b:b9:bf: ad:59:5d:0f:2a:81:1a:f0:1a:d6:92:88:79:17:a7: fc:2e:6f:45:46:c7:40:34:cf:b6:9c:28:a8:d1:c5: 6c:79:60:0f:b7:61:15:1b:da:d7:54:5d:4f:f6:ee: 34:c0:eb:c7:af:d9:ed:07:5d:a8:84:18:59:8f:ff: 2c:f9:1c:57:22:40:b6:58:8c:27:59:be:22:07:08: e2:76:90:97:23:dd:16:94:6a:00:4d:e7:cc:55:30: 45:4e:62:62:2a:f1:9b:87:a0:ec:85:f3:e6:3e:96: 25:31:eb:56:45:87:fa:1c:a1:9f:94:db:18:4d:68: a9:d7:f6:ff:0b:08:52:12:6e:4d:9d:3f:92:7d:4d: df:3d:c4:2a:bc:ad:d1:99:16:5d:49:53:8c:c5:a3: 99:4d:30:d3:27:37:72:00:33:78:78:31:9b:2a:6b: 29:b5:9b:cf:a7:21:c1:00:6e:38:81:32:32:17:db: 8f:e5:5b:30:40:30:21:0c:30:e0:ae:98:6e:5c:a9: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:65:2B:88:0C:4A:72:F5:49:5B:7D:C9:21:9E:BF:71:B1:54:07 X509v3 Authority Key Identifier: keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31303a3a2f34382d3438203d3e203432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:140:10::/48 Signature Algorithm: sha256WithRSAEncryption a6:0e:02:5b:cb:6d:ac:11:4d:dd:05:72:01:03:a6:b2:77:87: b3:0b:06:ed:78:f1:2d:fa:cc:e1:2b:15:66:f4:67:87:a8:33: 73:81:57:3f:23:47:d3:a5:b8:80:23:a4:57:4f:40:01:f0:fe: f0:d3:64:25:e1:8d:e0:5c:19:c8:5e:ca:e9:b5:ee:86:7c:b1: d1:cd:83:2a:b4:ef:fc:12:61:b3:8b:43:82:99:8f:53:9e:fd: 06:c8:97:a2:d2:13:d8:d1:df:a7:d2:86:2a:1b:84:13:6d:41: e0:6b:33:18:c7:e5:aa:8d:a1:a7:35:03:af:29:fa:01:84:84: 22:37:9d:f1:40:71:47:2b:81:9d:55:46:de:ae:93:ba:73:7d: aa:de:4d:97:9b:df:d3:61:c1:77:69:51:d9:dc:bc:86:6c:46: e0:5c:50:aa:44:57:af:1a:b5:57:61:37:43:da:32:a9:61:ca: 68:ed:98:08:6c:26:b9:09:0d:8f:fe:64:ac:78:f3:ca:9e:9c: 57:cc:5b:49:64:d1:31:44:1a:31:94:cd:7d:b6:35:14:ba:37: db:8a:1d:28:3b:14:d9:78:85:b1:68:36:cf:a4:84:55:2e:ae: e7:5a:bb:4e:be:2f:67:59:48:a1:21:c6:4d:cd:13:1c:82:14: 76:fb:bf:55 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUIFxrFx1zpG5zCEvV8qV1RdEYTRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD MUE3RDYwMDAeFw0yNTExMTcxMTQ3NDVaFw0yNjExMTYxMTUyNDVaMDMxMTAvBgNV BAMTKEM3RDQ2NTJCODgwQzRBNzJGNTQ5NUI3REM5MjE5RUJGNzFCMTU0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvA7937UQ29qIHdCTZvLDxJMS 9Xs/gUSxTFXmQLFqae7d0gMKydvo5LqnQPpo3gLlA3aPNrnHZzu5v61ZXQ8qgRrw GtaSiHkXp/wub0VGx0A0z7acKKjRxWx5YA+3YRUb2tdUXU/27jTA68ev2e0HXaiE GFmP/yz5HFciQLZYjCdZviIHCOJ2kJcj3RaUagBN58xVMEVOYmIq8ZuHoOyF8+Y+ liUx61ZFh/ocoZ+U2xhNaKnX9v8LCFISbk2dP5J9Td89xCq8rdGZFl1JU4zFo5lN MNMnN3IAM3h4MZsqaym1m8+nIcEAbjiBMjIX24/lWzBAMCEMMOCumG5cqeLHAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUx9RlK4gMSnL1SVt9ySGev3GxVAcwHwYDVR0j BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5 MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzgzMDMxM2EzMTM0MzAzYTMxMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBQAAQMA0G CSqGSIb3DQEBCwUAA4IBAQCmDgJby22sEU3dBXIBA6ayd4ezCwbtePEt+szhKxVm 9GeHqDNzgVc/I0fTpbiAI6RXT0AB8P7w02Ql4Y3gXBnIXsrpte6GfLHRzYMqtO/8 EmGzi0OCmY9Tnv0GyJei0hPY0d+n0oYqG4QTbUHgazMYx+WqjaGnNQOvKfoBhIQi N53xQHFHK4GdVUberpO6c32q3k2Xm9/TYcF3aVHZ3LyGbEbgXFCqRFevGrVXYTdD 2jKpYcpo7ZgIbCa5CQ2P/mSsePPKnpxXzFtJZNExRBoxlM19tjUUujfbih0oOxTZ eIWxaDbPpIRVLq7nWrtOvi9nWUihIcZNzRMcghR2+79V -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:21 2025 by rpki-client