This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230373a3a2f34382d3438203d3e20323637383233.roa File: 323830333a313836303a323230373a3a2f34382d3438203d3e20323637383233.roa (raw, json) Hash identifier: JsFCPf/vzSUMxG0iTxCJdN65tEBIkNjKAh8tP7AZHRk= Subject key identifier: 6C:AA:E8:E8:05:61:39:CB:8C:5D:D0:39:BE:70:AC:23:22:6A:34:F4 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 6099EB850C989F4B4F640F376E6E54B1394BCA7B Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230373a3a2f34382d3438203d3e20323637383233.roa Signing time: Sat 15 Nov 2025 14:55:00 +0000 ROA not before: Sat 15 Nov 2025 14:50:00 +0000 ROA not after: Sat 14 Nov 2026 14:55:00 +0000 asID: 267823 IP address blocks: 2803:1860:2207::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:eb:85:0c:98:9f:4b:4f:64:0f:37:6e:6e:54:b1:39:4b:ca:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 15 14:50:00 2025 GMT Not After : Nov 14 14:55:00 2026 GMT Subject: CN=6CAAE8E8056139CB8C5DD039BE70AC23226A34F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:6f:b9:07:c4:c6:c7:5e:33:89:20:14:87: 93:75:8c:b9:1a:80:e5:22:56:4c:7a:a3:85:0e:4a: bc:81:00:a6:76:c6:48:ff:fe:ba:74:2e:dd:d6:dc: 67:99:3e:c6:a3:30:24:f9:a5:b5:ee:d6:29:50:93: 8c:05:f7:57:ad:f8:af:bb:e2:50:25:64:1b:47:fe: 42:20:3e:a2:f0:54:7c:a4:0a:41:0d:0b:10:5e:c0: 23:b6:2e:c9:80:a1:4f:83:69:3c:52:bc:42:f1:a9: 16:e2:f5:48:1b:1f:0a:a7:67:c3:24:52:32:ed:34: a1:e1:57:bf:79:50:a1:07:f0:d9:e9:7c:2c:c6:73: be:7e:fe:a2:75:45:ec:32:c8:37:5f:2a:82:41:25: 5b:4d:fb:05:c8:8a:a3:74:32:ba:ea:b2:d1:5d:3b: 24:ee:b5:88:5c:a1:c4:b6:b7:7e:6e:52:f8:fa:d0: 24:03:f1:d6:e2:17:97:14:3a:6f:c5:ae:8c:da:e1: 8c:a9:94:e2:9f:01:bb:3c:77:f3:f2:d2:4b:50:cc: a1:c5:44:c2:a6:16:42:57:45:7a:8d:30:94:cc:ce: a7:63:9b:f9:e0:6c:60:04:b0:64:72:80:0c:b9:8d: 14:1e:07:19:22:b9:b7:a0:50:c6:a5:0b:fb:c0:89: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AA:E8:E8:05:61:39:CB:8C:5D:D0:39:BE:70:AC:23:22:6A:34:F4 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230373a3a2f34382d3438203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2207::/48 Signature Algorithm: sha256WithRSAEncryption 39:d9:a3:05:67:89:9c:57:d3:30:aa:6b:8d:5d:19:fb:29:ab: 3d:f0:15:72:c7:2a:95:30:31:0e:5f:83:e0:99:03:a1:2c:3e: 23:96:a5:ea:ae:02:56:29:22:67:2f:2f:d9:e9:53:bb:fb:16: c9:f8:48:02:5d:6b:0e:e0:95:f1:eb:ed:b7:92:46:e1:ee:5c: 98:56:f6:8c:a3:b6:7b:19:1f:56:0e:59:3c:dd:bc:7d:05:dd: eb:c4:70:7d:47:98:44:4e:5d:a4:a6:e2:dc:8a:2a:13:6b:7a: 13:c5:00:5c:bd:c6:0d:4f:b7:f8:64:df:b3:4c:5d:54:ce:aa: 01:47:00:a7:cc:7e:44:e5:27:41:60:fa:d8:d5:55:ad:f3:5d: 88:fd:fd:70:62:60:c1:05:25:c9:ac:0d:f0:6d:0a:ce:2f:65: 6f:c5:f0:8f:89:96:b1:7d:e7:ca:57:4a:c2:00:1a:37:ae:a9: a0:47:28:8e:7d:96:cc:cc:ac:66:b0:b0:31:78:a7:9a:69:20: ff:70:31:b1:d3:f9:c6:09:5d:f6:4c:ee:6a:0f:43:2c:3d:6e: 3a:f5:ed:05:ee:fa:51:4c:6e:4a:a5:93:5c:db:8b:0c:1c:64: eb:1c:70:6f:ad:53:ea:e6:b9:7e:b8:39:ff:4d:9f:f6:1e:e1: 79:7a:30:0c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYJnrhQyYn0tPZA83bm5UsTlLynswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTUxNDUwMDBaFw0yNjExMTQxNDU1MDBaMDMxMTAvBgNV BAMTKDZDQUFFOEU4MDU2MTM5Q0I4QzVERDAzOUJFNzBBQzIzMjI2QTM0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qG+5B8TGx14ziSAUh5N1jLka gOUiVkx6o4UOSryBAKZ2xkj//rp0Lt3W3GeZPsajMCT5pbXu1ilQk4wF91et+K+7 4lAlZBtH/kIgPqLwVHykCkENCxBewCO2LsmAoU+DaTxSvELxqRbi9UgbHwqnZ8Mk UjLtNKHhV795UKEH8NnpfCzGc75+/qJ1RewyyDdfKoJBJVtN+wXIiqN0MrrqstFd OyTutYhcocS2t35uUvj60CQD8dbiF5cUOm/Froza4YyplOKfAbs8d/Py0ktQzKHF RMKmFkJXRXqNMJTMzqdjm/ngbGAEsGRygAy5jRQeBxkiubegUMalC/vAiTpZAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUbKro6AVhOcuMXdA5vnCsIyJqNPQwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIgcwDQYJKoZIhvcNAQELBQADggEBADnZowVniZxX0zCqa41dGfsp qz3wFXLHKpUwMQ5fg+CZA6EsPiOWpequAlYpImcvL9npU7v7Fsn4SAJdaw7glfHr 7beSRuHuXJhW9oyjtnsZH1YOWTzdvH0F3evEcH1HmEROXaSm4tyKKhNrehPFAFy9 xg1Pt/hk37NMXVTOqgFHAKfMfkTlJ0Fg+tjVVa3zXYj9/XBiYMEFJcmsDfBtCs4v ZW/F8I+JlrF958pXSsIAGjeuqaBHKI59lszMrGawsDF4p5ppIP9wMbHT+cYJXfZM 7moPQyw9bjr17QXu+lFMbkqlk1zbiwwcZOsccG+tU+rmuX64Of9Nn/Ye4Xl6MAw= -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client