This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34302d3430203d3e20323637383233.roa File: 323830333a313836303a323230303a3a2f34302d3430203d3e20323637383233.roa (raw, json) Hash identifier: t3R6rNU2968vWwAAZVYrWoc+9ydS2VwjpBXKbGYt+pU= Subject key identifier: 09:AB:07:EC:45:E3:70:A1:AD:51:1E:A2:0E:2F:D6:46:57:DF:57:77 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 2ACE58E94E4615B5B734116225F9FA1580857E59 Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34302d3430203d3e20323637383233.roa Signing time: Mon 17 Nov 2025 21:55:00 +0000 ROA not before: Mon 17 Nov 2025 21:50:00 +0000 ROA not after: Mon 16 Nov 2026 21:55:00 +0000 asID: 267823 IP address blocks: 2803:1860:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ce:58:e9:4e:46:15:b5:b7:34:11:62:25:f9:fa:15:80:85:7e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 17 21:50:00 2025 GMT Not After : Nov 16 21:55:00 2026 GMT Subject: CN=09AB07EC45E370A1AD511EA20E2FD64657DF5777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:aa:f7:6e:32:46:60:e8:90:c7:98:23:4b: f1:6d:94:ef:b1:ed:4c:ef:57:c6:ab:f1:e8:c5:ff: a9:9a:10:07:ed:d9:b6:5e:af:aa:00:91:7e:f5:a3: 1e:33:28:3b:f3:53:9b:96:90:7e:5d:b8:ff:e3:00: fd:ad:48:b8:e3:00:ef:70:08:3c:2f:9d:c4:93:15: 00:34:b9:c9:ac:93:eb:ac:4e:0f:3f:ff:e9:16:69: fe:2c:ae:42:03:73:29:ea:83:28:8e:b2:63:08:a9: c1:a3:94:cc:7d:8e:7e:8e:de:a8:41:20:29:eb:4e: bd:dd:99:fe:90:fd:5f:fe:38:d9:5a:8e:a3:e3:b6: c2:49:00:79:4a:64:53:ab:2f:3b:c1:e8:2a:48:2a: f1:38:1c:ae:21:bd:ee:d3:db:59:11:a3:0d:f3:bf: cb:1f:57:0b:09:c5:eb:79:c4:7b:4a:61:03:04:69: 58:cc:47:3f:97:09:4b:3d:14:99:e8:ee:3a:eb:95: 76:54:58:ee:c1:e6:f1:f4:b5:b7:c3:2c:43:56:b8: 1c:16:e4:b2:75:12:a5:83:da:84:9f:11:bb:4e:cb: 54:fc:5c:36:4e:7c:d4:2f:5b:45:3b:17:73:8f:7c: 13:63:8d:e5:2c:e7:d2:49:49:25:fb:40:86:0c:d8: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:07:EC:45:E3:70:A1:AD:51:1E:A2:0E:2F:D6:46:57:DF:57:77 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230303a3a2f34302d3430203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2200::/40 Signature Algorithm: sha256WithRSAEncryption 13:81:c3:0a:fe:9a:a4:da:28:e9:07:0f:b6:35:8e:cb:31:c8: 9d:c1:e3:29:60:d2:5e:33:99:c1:f9:da:ae:2e:c1:9f:11:be: 7c:02:08:28:1a:b6:d5:c5:f4:1f:29:4e:b2:37:37:a2:32:4e: 59:8b:35:bd:47:53:a0:9d:d6:43:d2:5c:ba:fb:9a:83:31:27: 03:cf:b1:ed:8a:7a:12:a2:3f:08:23:1e:a6:fe:c1:0b:84:07: 8f:dd:7d:63:b9:78:e2:12:d3:85:02:1d:ff:2a:52:d3:e7:1a: 37:ec:80:34:9b:0c:4e:bc:50:0e:d2:21:9d:f4:4e:43:0e:10: ac:d7:c3:7f:d7:a3:43:b3:ca:f5:91:ec:95:86:26:c0:3f:0b: 03:63:5a:58:63:fd:1e:77:ef:b1:28:e5:e2:5e:39:f1:31:01: da:60:c0:54:a5:d1:2a:fb:79:bd:c6:a8:b6:09:74:2d:f7:14: 0b:1d:2b:d5:a0:49:f1:6d:e8:f6:6a:3c:d7:c2:74:53:c4:8d: f0:0d:c0:bb:b6:14:49:89:08:49:7b:72:fc:22:86:81:5a:e1: 72:71:36:28:68:03:df:eb:d1:cb:28:7f:bb:d1:02:97:f2:d0: bc:b2:7c:c1:cd:8d:f5:2b:4c:e5:19:81:b9:e3:f0:79:37:ec: 0c:88:a1:2b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUKs5Y6U5GFbW3NBFiJfn6FYCFflkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTcyMTUwMDBaFw0yNjExMTYyMTU1MDBaMDMxMTAvBgNV BAMTKDA5QUIwN0VDNDVFMzcwQTFBRDUxMUVBMjBFMkZENjQ2NTdERjU3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2var3bjJGYOiQx5gjS/FtlO+x 7UzvV8ar8ejF/6maEAft2bZer6oAkX71ox4zKDvzU5uWkH5duP/jAP2tSLjjAO9w CDwvncSTFQA0ucmsk+usTg8//+kWaf4srkIDcynqgyiOsmMIqcGjlMx9jn6O3qhB ICnrTr3dmf6Q/V/+ONlajqPjtsJJAHlKZFOrLzvB6CpIKvE4HK4hve7T21kRow3z v8sfVwsJxet5xHtKYQMEaVjMRz+XCUs9FJno7jrrlXZUWO7B5vH0tbfDLENWuBwW 5LJ1EqWD2oSfEbtOy1T8XDZOfNQvW0U7F3OPfBNjjeUs59JJSSX7QIYM2K09AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUCasH7EXjcKGtUR6iDi/WRlffV3cwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoAxhgIjANBgkqhkiG9w0BAQsFAAOCAQEAE4HDCv6apNoo6QcPtjWOyzHI ncHjKWDSXjOZwfnari7BnxG+fAIIKBq21cX0HylOsjc3ojJOWYs1vUdToJ3WQ9Jc uvuagzEnA8+x7Yp6EqI/CCMepv7BC4QHj919Y7l44hLThQId/ypS0+caN+yANJsM TrxQDtIhnfROQw4QrNfDf9ejQ7PK9ZHslYYmwD8LA2NaWGP9HnfvsSjl4l458TEB 2mDAVKXRKvt5vcaotgl0LfcUCx0r1aBJ8W3o9mo818J0U8SN8A3Au7YUSYkISXty /CKGgVrhcnE2KGgD3+vRyyh/u9ECl/LQvLJ8wc2N9StM5RmBuePweTfsDIihKw== -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client