This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230323a3a2f34382d3438203d3e20323637383233.roa File: 323830333a313836303a323230323a3a2f34382d3438203d3e20323637383233.roa (raw, json) Hash identifier: RXDJdmYPyzEMVdlsOFeCCoKbj7buBGMNnZ/wJp6fcNg= Subject key identifier: 24:3B:96:EF:7B:E1:A2:A0:E6:CE:56:FD:0D:DF:55:5F:FE:99:8A:06 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 33F8ABAD964C33A4A60468877DF1AB893FEA49E8 Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230323a3a2f34382d3438203d3e20323637383233.roa Signing time: Sat 15 Nov 2025 14:55:00 +0000 ROA not before: Sat 15 Nov 2025 14:50:00 +0000 ROA not after: Sat 14 Nov 2026 14:55:00 +0000 asID: 267823 IP address blocks: 2803:1860:2202::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f8:ab:ad:96:4c:33:a4:a6:04:68:87:7d:f1:ab:89:3f:ea:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 15 14:50:00 2025 GMT Not After : Nov 14 14:55:00 2026 GMT Subject: CN=243B96EF7BE1A2A0E6CE56FD0DDF555FFE998A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:bc:35:ea:d6:15:ed:86:d9:69:ba:71:6e: 23:69:93:98:9d:a9:61:ed:0e:30:70:d5:36:9f:c4: ca:75:6a:0b:f0:c1:35:6d:aa:69:2d:d4:2f:4f:4b: 47:e4:92:83:70:8f:24:8e:c1:ef:d6:28:da:47:78: e1:41:29:7e:ac:aa:5f:bc:d9:05:58:68:f9:35:36: ce:ea:4c:7a:84:cd:9d:1f:4f:a9:ff:7c:98:37:93: c0:e7:c7:54:6f:ac:9e:3a:7c:20:7b:cd:af:4a:aa: eb:ec:25:18:08:44:12:b6:9c:12:d4:95:be:6a:f7: 8b:58:0e:9a:be:e8:af:b9:b9:64:13:bd:2a:a1:33: 45:12:83:7f:ea:49:b1:b8:1b:e0:40:9b:63:a8:35: 09:52:8f:d5:3d:db:b8:1c:5a:ae:3e:3b:c5:23:7c: 68:0b:0b:16:d4:b2:e0:06:c6:9b:7f:0a:61:41:ee: bd:1d:5d:5b:57:19:48:c7:67:c6:b5:8c:8e:04:12: 84:a8:50:db:3b:42:92:51:2c:15:32:0d:c6:8a:00: 26:11:6d:ea:72:41:08:b3:28:87:76:01:6b:bd:71: 67:a4:af:4b:d0:dd:45:30:05:6d:b5:a7:7d:5e:fb: 46:1e:18:65:c3:08:5c:6a:d8:49:a2:ff:ea:0f:ec: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:96:EF:7B:E1:A2:A0:E6:CE:56:FD:0D:DF:55:5F:FE:99:8A:06 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230323a3a2f34382d3438203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2202::/48 Signature Algorithm: sha256WithRSAEncryption 1c:ad:57:4f:56:9a:20:cc:25:36:2c:29:ce:2e:1a:fd:e7:23: 6a:ab:a9:b2:13:08:11:f9:1a:22:f1:88:2c:c5:6e:fe:3f:f2: dd:f9:92:50:74:66:66:ab:40:ab:1d:26:57:97:c4:e9:40:d2: 0b:4e:e2:e8:05:1a:35:91:82:44:99:01:75:a1:a4:13:c2:86: 97:d6:57:32:c4:f0:f5:43:73:d5:52:06:61:42:1a:a7:84:ab: 56:d5:33:ba:58:78:05:ff:99:ba:2b:b8:d6:68:b1:74:54:38: 5f:da:ab:0f:e3:81:c3:08:31:0e:26:05:13:96:64:87:7d:b0: 09:4e:72:07:6b:08:0c:b0:c1:0d:39:85:2d:db:e5:f6:c3:56: ef:12:6d:03:97:2a:2a:5c:95:84:d9:2b:0c:d8:f1:23:ea:cf: a7:fa:9a:37:77:12:4d:9f:6f:ce:22:be:a5:c1:df:b2:b1:5f: ed:ee:1f:79:43:a9:db:66:88:f4:0d:60:98:c4:d2:5c:e7:c2: 0b:cb:ba:07:46:22:06:d9:7b:f0:d3:37:c2:59:1c:49:4c:73: 27:2f:19:2c:47:7c:1d:fb:db:20:7c:f9:ce:24:40:31:9d:f7: f2:be:37:8a:3d:c3:94:c1:e4:4b:c7:e3:b6:b3:ab:f5:c1:61: 72:2f:3a:2b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUM/irrZZMM6SmBGiHffGriT/qSegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTUxNDUwMDBaFw0yNjExMTQxNDU1MDBaMDMxMTAvBgNV BAMTKDI0M0I5NkVGN0JFMUEyQTBFNkNFNTZGRDBEREY1NTVGRkU5OThBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqLw16tYV7YbZabpxbiNpk5id qWHtDjBw1TafxMp1agvwwTVtqmkt1C9PS0fkkoNwjySOwe/WKNpHeOFBKX6sql+8 2QVYaPk1Ns7qTHqEzZ0fT6n/fJg3k8Dnx1RvrJ46fCB7za9KquvsJRgIRBK2nBLU lb5q94tYDpq+6K+5uWQTvSqhM0USg3/qSbG4G+BAm2OoNQlSj9U927gcWq4+O8Uj fGgLCxbUsuAGxpt/CmFB7r0dXVtXGUjHZ8a1jI4EEoSoUNs7QpJRLBUyDcaKACYR bepyQQizKId2AWu9cWekr0vQ3UUwBW21p31e+0YeGGXDCFxq2Emi/+oP7IDhAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUJDuW73vhoqDmzlb9Dd9VX/6ZigYwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIgIwDQYJKoZIhvcNAQELBQADggEBABytV09WmiDMJTYsKc4uGv3n I2qrqbITCBH5GiLxiCzFbv4/8t35klB0ZmarQKsdJleXxOlA0gtO4ugFGjWRgkSZ AXWhpBPChpfWVzLE8PVDc9VSBmFCGqeEq1bVM7pYeAX/mboruNZosXRUOF/aqw/j gcMIMQ4mBROWZId9sAlOcgdrCAywwQ05hS3b5fbDVu8SbQOXKipclYTZKwzY8SPq z6f6mjd3Ek2fb84ivqXB37KxX+3uH3lDqdtmiPQNYJjE0lznwgvLugdGIgbZe/DT N8JZHElMcycvGSxHfB372yB8+c4kQDGd9/K+N4o9w5TB5EvH47azq/XBYXIvOis= -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client