This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3438203d3e20323637383233.roa File: 323830333a313836303a323230353a3a2f34382d3438203d3e20323637383233.roa (raw, json) Hash identifier: I602nZo0nRyDT+vgE5N9ZHwX/gM1YipwXoWEnBTUW+Y= Subject key identifier: 81:0E:E1:01:59:30:68:38:78:8F:EB:9F:B2:2C:CE:C3:71:99:EA:C2 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 3537E1490EB461950467CE9B81CC48667B6B84CA Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3438203d3e20323637383233.roa Signing time: Sat 15 Nov 2025 14:55:01 +0000 ROA not before: Sat 15 Nov 2025 14:50:01 +0000 ROA not after: Sat 14 Nov 2026 14:55:01 +0000 asID: 267823 IP address blocks: 2803:1860:2205::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:37:e1:49:0e:b4:61:95:04:67:ce:9b:81:cc:48:66:7b:6b:84:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 15 14:50:01 2025 GMT Not After : Nov 14 14:55:01 2026 GMT Subject: CN=810EE10159306838788FEB9FB22CCEC37199EAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:16:e8:21:11:6b:43:a6:8f:5d:a9:22:24: 01:63:f6:27:46:09:03:a8:e4:27:14:81:26:5d:1c: 94:10:15:d9:ea:1e:99:ad:fe:b8:1d:c7:1a:8d:ce: 56:cb:f1:70:93:3f:ae:a8:68:89:b0:fe:ce:86:8a: 26:71:02:5d:f6:32:67:52:0c:ad:63:6a:92:66:b4: 66:c6:ed:4d:51:5d:4f:41:75:17:b2:51:42:0a:16: d0:28:bd:75:d5:0b:a4:a9:15:da:d3:d8:1c:f9:8e: c1:29:e5:35:09:3c:b6:bb:f7:e1:cc:ad:a6:ca:d5: 71:77:09:d7:41:79:49:99:92:83:88:e2:ea:76:cb: cc:92:6d:89:dc:d0:c9:a2:98:5c:95:b9:cd:f7:d5: 0f:d2:79:38:04:0a:9d:d5:54:56:bb:19:d9:cd:4a: 40:a9:49:69:f7:17:c9:1a:9a:dd:76:8c:97:e2:f5: 77:64:44:da:42:39:e2:e6:01:ba:fc:27:dc:03:2d: ef:b3:89:31:ee:49:d6:76:9e:01:ba:bd:af:7a:97: 98:c8:0d:2b:38:2e:39:a6:68:df:74:89:5d:de:8c: da:0f:42:ed:79:f1:1e:d9:0c:47:a3:31:60:13:9b: b5:59:1f:53:de:e5:83:59:9d:75:c9:8c:65:80:10: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:E1:01:59:30:68:38:78:8F:EB:9F:B2:2C:CE:C3:71:99:EA:C2 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230353a3a2f34382d3438203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2205::/48 Signature Algorithm: sha256WithRSAEncryption 00:69:7e:4b:40:24:2f:6b:1c:4b:92:fc:2e:c9:2f:6e:1d:49: d6:ba:85:84:4d:b4:14:1b:d3:5e:d9:af:a4:98:22:9a:b7:df: 12:de:1a:64:17:76:37:e1:4a:d8:e2:bd:f6:37:b2:73:02:96: f6:44:d0:61:2a:3f:3c:f6:97:05:df:15:70:43:ae:1c:87:e6: bf:a3:0c:5f:9a:59:4e:fb:22:99:c0:c5:e1:98:bb:37:4a:5e: 65:7f:83:8d:b4:c3:1a:2e:6c:99:d6:74:41:69:f0:a6:81:0a: bd:25:5a:b5:5b:9d:54:24:b4:a7:6d:3e:1f:ab:e5:51:35:09: 4d:13:b7:3a:97:05:f1:a1:d6:f8:f8:7c:ac:b9:fb:6d:09:5d: f1:ba:d0:11:c8:53:5c:5c:bd:4a:b8:39:9f:a9:35:63:01:44: 8c:fe:7c:bf:a4:10:0c:a3:07:72:4a:57:a3:d2:de:6d:4b:de: 05:ea:5d:38:82:01:5e:c9:e9:c5:94:85:3e:60:8f:b6:c7:08: e4:02:ea:de:86:f2:f3:94:61:d6:ff:a6:c9:ca:47:d2:2f:b7: 8d:57:d7:c1:1d:00:41:2c:12:5a:7a:31:64:3c:21:bc:14:19: b0:b8:39:56:a1:f9:1d:f0:2b:71:48:b3:00:9a:cb:3d:a7:59: cd:7c:ee:f5 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUNTfhSQ60YZUEZ86bgcxIZntrhMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTUxNDUwMDFaFw0yNjExMTQxNDU1MDFaMDMxMTAvBgNV BAMTKDgxMEVFMTAxNTkzMDY4Mzg3ODhGRUI5RkIyMkNDRUMzNzE5OUVBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiBboIRFrQ6aPXakiJAFj9idG CQOo5CcUgSZdHJQQFdnqHpmt/rgdxxqNzlbL8XCTP66oaImw/s6GiiZxAl32MmdS DK1japJmtGbG7U1RXU9BdReyUUIKFtAovXXVC6SpFdrT2Bz5jsEp5TUJPLa79+HM rabK1XF3CddBeUmZkoOI4up2y8ySbYnc0MmimFyVuc331Q/SeTgECp3VVFa7GdnN SkCpSWn3F8kamt12jJfi9XdkRNpCOeLmAbr8J9wDLe+ziTHuSdZ2ngG6va96l5jI DSs4LjmmaN90iV3ejNoPQu158R7ZDEejMWATm7VZH1Pe5YNZnXXJjGWAEF8lAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUgQ7hAVkwaDh4j+ufsizOw3GZ6sIwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIgUwDQYJKoZIhvcNAQELBQADggEBAABpfktAJC9rHEuS/C7JL24d Sda6hYRNtBQb017Zr6SYIpq33xLeGmQXdjfhStjivfY3snMClvZE0GEqPzz2lwXf FXBDrhyH5r+jDF+aWU77IpnAxeGYuzdKXmV/g420wxoubJnWdEFp8KaBCr0lWrVb nVQktKdtPh+r5VE1CU0TtzqXBfGh1vj4fKy5+20JXfG60BHIU1xcvUq4OZ+pNWMB RIz+fL+kEAyjB3JKV6PS3m1L3gXqXTiCAV7J6cWUhT5gj7bHCOQC6t6G8vOUYdb/ psnKR9Ivt41X18EdAEEsElp6MWQ8IbwUGbC4OVah+R3wK3FIswCayz2nWc187vU= -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client