This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3438203d3e20323637383233.roa File: 323830333a313836303a323230383a3a2f34382d3438203d3e20323637383233.roa (raw, json) Hash identifier: EjXluD1gDMg6TxjY1CK1k1iQqS3Zk4Y7RueazuKHJss= Subject key identifier: CD:38:9C:FB:B4:E4:D4:28:20:34:15:8B:FF:CC:27:AD:2B:80:B7:18 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 13F78A5A8EA096B4C56FA6620C785645804E9ABC Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3438203d3e20323637383233.roa Signing time: Wed 19 Nov 2025 23:00:00 +0000 ROA not before: Wed 19 Nov 2025 22:55:00 +0000 ROA not after: Wed 18 Nov 2026 23:00:00 +0000 asID: 267823 IP address blocks: 2803:1860:2208::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f7:8a:5a:8e:a0:96:b4:c5:6f:a6:62:0c:78:56:45:80:4e:9a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Nov 19 22:55:00 2025 GMT Not After : Nov 18 23:00:00 2026 GMT Subject: CN=CD389CFBB4E4D4282034158BFFCC27AD2B80B718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:e8:6f:2c:39:a9:60:69:ed:f3:d4:9b:5f: ce:7b:f7:c3:6e:82:e0:9f:49:12:40:1d:e9:53:b1: d6:82:fe:fd:52:c9:5c:c8:b2:e8:bb:27:19:8d:85: f0:a2:58:6a:80:cf:cf:e5:ba:bb:ad:0b:8f:b0:6f: 0c:09:8f:07:21:44:57:f9:e5:40:e2:c4:c1:c2:03: 23:65:db:5f:55:74:34:b6:31:7a:af:29:48:22:28: 05:4c:fb:e6:3d:e4:1b:2e:3e:7f:d5:e2:63:55:b0: 61:97:34:64:19:ea:0a:18:03:49:df:83:bf:d6:6c: 40:19:ac:e8:0b:81:07:f2:2e:76:a4:1e:67:d4:a3: 2f:7c:80:f7:65:16:34:fd:38:1f:04:21:43:ae:b6: 32:e9:99:32:14:20:0d:d0:68:03:ab:55:0d:d5:4c: 5d:8c:2e:9f:89:a9:7d:cf:8f:e6:2d:fd:6e:f1:3b: 52:91:90:a2:51:be:29:13:44:4f:30:a7:c5:89:96: 96:15:77:a5:86:ee:8a:c9:64:5f:33:40:2a:1f:23: a0:24:8d:a6:69:27:2a:96:48:e1:44:e6:9b:b0:d6: fb:9f:19:cb:14:7d:65:43:35:9d:07:8a:bb:da:5d: 03:63:63:ed:d6:ce:1e:ee:c3:f7:14:cf:ca:8a:bc: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:9C:FB:B4:E4:D4:28:20:34:15:8B:FF:CC:27:AD:2B:80:B7:18 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3438203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2208::/48 Signature Algorithm: sha256WithRSAEncryption 41:d3:a3:38:2a:68:be:ea:14:ef:3b:8f:d1:68:02:a2:f5:70: f4:7b:08:6c:c2:a0:a2:db:dc:ec:80:de:54:31:00:bf:dd:a8: ae:38:6a:d5:15:75:b2:5b:1f:56:63:28:8e:46:14:92:34:aa: 11:e8:45:9a:a6:6f:61:fc:9c:74:20:87:d0:99:b4:c4:d8:4d: 76:32:69:2a:05:d4:97:7f:d4:10:e9:41:c1:ca:e1:af:72:c5: 1e:c7:cf:b3:bf:f8:23:57:06:83:e9:b3:84:27:04:11:e7:53: 97:67:0f:f3:76:ee:b3:a4:21:8a:b3:7a:0f:39:48:7e:17:b4: e1:08:2c:0e:62:d0:d3:af:e8:0c:27:8b:0b:4f:2c:c5:dd:ff: 8e:97:4b:b0:57:fd:dc:ee:a9:e6:4a:31:d6:b1:0c:c6:51:51: 2b:9f:f4:bb:11:b6:02:63:f0:50:7f:cc:ce:9a:73:6c:4f:d2: be:32:fb:30:86:6a:b2:35:59:c7:de:f1:2e:91:6c:19:cb:9e: 52:dc:34:96:ea:ac:4e:aa:ad:ef:04:99:2e:35:df:e8:04:2e: d5:4d:fa:03:9f:d2:12:58:53:f7:5f:a3:c5:31:7a:9e:cd:f7: 36:13:bd:b4:5b:98:08:94:71:44:66:47:e4:58:e2:07:69:65: 1a:c2:66:15 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUE/eKWo6glrTFb6ZiDHhWRYBOmrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNTExMTkyMjU1MDBaFw0yNjExMTgyMzAwMDBaMDMxMTAvBgNV BAMTKENEMzg5Q0ZCQjRFNEQ0MjgyMDM0MTU4QkZGQ0MyN0FEMkI4MEI3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbehvLDmpYGnt89SbX85798Nu guCfSRJAHelTsdaC/v1SyVzIsui7JxmNhfCiWGqAz8/lurutC4+wbwwJjwchRFf5 5UDixMHCAyNl219VdDS2MXqvKUgiKAVM++Y95BsuPn/V4mNVsGGXNGQZ6goYA0nf g7/WbEAZrOgLgQfyLnakHmfUoy98gPdlFjT9OB8EIUOutjLpmTIUIA3QaAOrVQ3V TF2MLp+JqX3Pj+Yt/W7xO1KRkKJRvikTRE8wp8WJlpYVd6WG7orJZF8zQCofI6Ak jaZpJyqWSOFE5puw1vufGcsUfWVDNZ0HirvaXQNjY+3Wzh7uw/cUz8qKvNZnAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUzTic+7Tk1CggNBWL/8wnrSuAtxgwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MjMwMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIggwDQYJKoZIhvcNAQELBQADggEBAEHTozgqaL7qFO87j9FoAqL1 cPR7CGzCoKLb3OyA3lQxAL/dqK44atUVdbJbH1ZjKI5GFJI0qhHoRZqmb2H8nHQg h9CZtMTYTXYyaSoF1Jd/1BDpQcHK4a9yxR7Hz7O/+CNXBoPps4QnBBHnU5dnD/N2 7rOkIYqzeg85SH4XtOEILA5i0NOv6AwniwtPLMXd/46XS7BX/dzuqeZKMdaxDMZR USuf9LsRtgJj8FB/zM6ac2xP0r4y+zCGarI1Wcfe8S6RbBnLnlLcNJbqrE6qre8E mS413+gELtVN+gOf0hJYU/dfo8Uxep7N9zYTvbRbmAiUcURmR+RY4gdpZRrCZhU= -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:04 2025 by rpki-client