This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230333a3a2f34382d3438203d3e20323637383233.roa File: 323830333a313836303a323230333a3a2f34382d3438203d3e20323637383233.roa (raw, json) Hash identifier: wOTLBrSB6RaCqLZJBdNO43SyUu1XHMM52ic7xioZ+ro= Subject key identifier: 3D:D7:4C:09:A4:C8:31:74:DE:DF:02:35:49:EB:0F:AD:F6:8E:40:71 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 635BA71B8199A23BF78917E85C936AF4950623A2 Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230333a3a2f34382d3438203d3e20323637383233.roa Signing time: Sat 15 Nov 2025 14:55:01 +0000 ROA not before: Sat 15 Nov 2025 14:50:01 +0000 ROA not after: Sat 14 Nov 2026 14:55:01 +0000 asID: 267823 IP address blocks: 2803:1860:2203::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5b:a7:1b:81:99:a2:3b:f7:89:17:e8:5c:93:6a:f4:95:06:23:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 15 14:50:01 2025 GMT Not After : Nov 14 14:55:01 2026 GMT Subject: CN=3DD74C09A4C83174DEDF023549EB0FADF68E4071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:7e:f0:99:b1:cb:98:d2:00:ce:d6:41:d6: 26:78:f6:70:1d:b9:f1:4a:3b:1c:96:a3:66:ca:e4: 24:e1:c0:97:88:2a:fe:1c:9a:16:d0:4b:22:8b:7b: e0:07:25:a9:aa:de:a7:90:02:a2:31:2e:33:61:b5: 8b:f7:b7:32:4f:b3:01:f3:40:2a:24:44:fc:87:62: c4:4e:94:35:3e:8c:fa:fc:7a:72:3c:83:44:f3:77: 0c:47:f3:ae:5c:cc:c5:69:25:45:8e:5a:09:64:36: d9:d8:66:4b:c8:a0:19:e5:da:25:b8:4b:a4:ae:84: 88:bf:23:aa:16:9e:ce:0c:96:d8:bb:60:cb:ea:71: b6:81:2c:4d:1e:d9:6e:4b:29:a0:bd:cb:64:7a:15: 38:0b:6a:50:23:7e:dc:c3:2f:5d:26:e7:d3:69:82: 12:4c:d3:5b:78:b3:4c:c3:bd:04:c4:98:c6:c6:80: c7:2b:54:47:5c:32:62:2b:b9:a6:a1:6c:47:74:b6: 28:3a:a4:8c:f9:1f:6b:88:bf:4b:88:16:a4:d4:a2: 00:78:f3:c0:16:0f:36:b5:21:52:e6:6f:fe:89:6a: 36:9d:a1:cc:01:fe:75:d6:4c:f2:b6:3c:60:8a:3b: 6a:a5:70:d0:fd:9d:e4:20:8b:20:71:0b:e0:90:4a: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D7:4C:09:A4:C8:31:74:DE:DF:02:35:49:EB:0F:AD:F6:8E:40:71 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230333a3a2f34382d3438203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2203::/48 Signature Algorithm: sha256WithRSAEncryption 01:09:58:ff:fb:58:81:c8:3b:3f:61:d9:7d:21:55:bd:ef:32: 76:29:5a:a6:79:c3:37:9a:09:0d:13:69:c6:84:bd:ce:45:5f: 10:6f:c1:85:f0:35:39:97:01:7e:61:9b:c2:a1:b2:64:a4:30: bf:98:bc:b3:e0:48:ac:12:dc:a2:34:7e:ab:c2:52:4b:f8:72: 06:55:bd:db:23:d9:f2:66:15:80:aa:91:78:e3:f3:a6:15:4b: 7f:06:3e:3a:61:a3:f9:ea:5a:99:e7:15:c8:ee:ab:5d:a6:25: 2a:cb:4f:f7:ca:80:02:20:d2:85:ad:a8:d2:8c:45:e2:97:08: 3c:51:0a:d7:97:d2:00:13:f4:c6:ca:87:6f:d8:ae:57:e0:1b: bf:f7:34:a8:c4:3d:63:c2:2a:a1:38:23:34:69:ee:dd:c3:72: 2a:17:ae:25:4b:11:16:22:d3:11:15:8e:55:c4:e2:ae:4b:68: d8:22:1b:b9:aa:e3:15:d9:de:ec:99:66:fb:05:a9:b8:db:f7: ac:6d:40:a8:86:14:4e:a6:ca:c4:7d:8c:91:4a:95:fd:3d:a8: 43:bf:4b:4a:db:01:47:ab:ba:bd:26:62:f7:4c:d5:9a:0c:56: ed:c2:5d:e2:48:d4:50:1d:15:3a:a6:ec:8e:ba:d2:8e:7f:18: 80:26:24:81 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUY1unG4GZojv3iRfoXJNq9JUGI6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTUxNDUwMDFaFw0yNjExMTQxNDU1MDFaMDMxMTAvBgNV BAMTKDNERDc0QzA5QTRDODMxNzRERURGMDIzNTQ5RUIwRkFERjY4RTQwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggn7wmbHLmNIAztZB1iZ49nAd ufFKOxyWo2bK5CThwJeIKv4cmhbQSyKLe+AHJamq3qeQAqIxLjNhtYv3tzJPswHz QCokRPyHYsROlDU+jPr8enI8g0TzdwxH865czMVpJUWOWglkNtnYZkvIoBnl2iW4 S6SuhIi/I6oWns4Mlti7YMvqcbaBLE0e2W5LKaC9y2R6FTgLalAjftzDL10m59Np ghJM01t4s0zDvQTEmMbGgMcrVEdcMmIruaahbEd0tig6pIz5H2uIv0uIFqTUogB4 88AWDza1IVLmb/6JajadocwB/nXWTPK2PGCKO2qlcND9neQgiyBxC+CQSt21AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUPddMCaTIMXTe3wI1SesPrfaOQHEwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIgMwDQYJKoZIhvcNAQELBQADggEBAAEJWP/7WIHIOz9h2X0hVb3v MnYpWqZ5wzeaCQ0TacaEvc5FXxBvwYXwNTmXAX5hm8KhsmSkML+YvLPgSKwS3KI0 fqvCUkv4cgZVvdsj2fJmFYCqkXjj86YVS38GPjpho/nqWpnnFcjuq12mJSrLT/fK gAIg0oWtqNKMReKXCDxRCteX0gAT9MbKh2/YrlfgG7/3NKjEPWPCKqE4IzRp7t3D cioXriVLERYi0xEVjlXE4q5LaNgiG7mq4xXZ3uyZZvsFqbjb96xtQKiGFE6mysR9 jJFKlf09qEO/S0rbAUerur0mYvdM1ZoMVu3CXeJI1FAdFTqm7I660o5/GIAmJIE= -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client