This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130383a3a2f34362d3438203d3e20323733313530.roa File: 323830333a636436303a353130383a3a2f34362d3438203d3e20323733313530.roa (raw, json) Hash identifier: KD/SRg4L0WnFdffCB5icjk9J6DFOm4I+DfnGeeVqaVs= Subject key identifier: 4D:18:46:28:88:F8:CC:D8:E0:1D:E9:0F:37:6C:15:0B:BA:AA:EA:F7 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 650BB3CB206B407445B9178F63BEE3DE944DE1EE Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130383a3a2f34362d3438203d3e20323733313530.roa Signing time: Thu 06 Nov 2025 14:20:00 +0000 ROA not before: Thu 06 Nov 2025 14:15:00 +0000 ROA not after: Thu 05 Nov 2026 14:20:00 +0000 asID: 273150 IP address blocks: 2803:cd60:5108::/46 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 09:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0b:b3:cb:20:6b:40:74:45:b9:17:8f:63:be:e3:de:94:4d:e1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Nov 6 14:15:00 2025 GMT Not After : Nov 5 14:20:00 2026 GMT Subject: CN=4D18462888F8CCD8E01DE90F376C150BBAAAEAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:ce:c1:b7:18:ed:c9:64:41:30:90:3f:01: 83:29:cd:33:33:2a:b9:25:02:7b:eb:69:31:7c:2d: 28:89:89:39:fb:f4:e2:99:c0:3a:75:35:ff:cb:16: b9:18:24:a1:59:53:2b:c9:9d:3a:98:fc:f2:b6:5a: 38:0d:ba:79:4b:c4:97:e3:26:23:56:ac:d7:b8:04: 6b:c7:b4:ac:e7:64:1b:74:22:51:68:07:77:55:8a: f0:13:02:93:f7:ef:e9:17:fd:5d:9b:e7:39:c0:9a: dd:ad:83:bd:99:70:65:3c:d4:ac:59:96:94:7a:0b: 5e:58:02:2b:09:3c:57:48:7d:cd:7a:07:69:23:c9: 75:06:b5:49:62:18:17:82:e1:48:81:52:dd:28:bc: 0e:3d:bd:d9:de:aa:8f:a9:6f:77:df:4e:d5:68:24: c2:a8:16:56:38:12:df:af:20:7a:8c:e5:89:60:e6: fd:fe:33:91:03:92:ba:a0:86:12:27:5a:e4:67:ff: 2e:ab:5c:53:08:67:fc:5d:9d:30:ae:1b:9a:12:4e: 01:be:c3:36:5f:de:a7:38:49:4e:dc:4a:ae:8f:48: d6:43:4b:1b:f9:d0:17:fa:31:3b:38:cf:36:b0:7b: a9:7d:01:ed:14:78:dd:0c:1c:e3:b6:f0:2e:9d:4b: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:46:28:88:F8:CC:D8:E0:1D:E9:0F:37:6C:15:0B:BA:AA:EA:F7 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353130383a3a2f34362d3438203d3e20323733313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:5108::/46 Signature Algorithm: sha256WithRSAEncryption 0e:72:c7:39:db:db:18:99:fe:29:c6:39:9e:b3:85:d9:25:a0: f8:70:d8:15:00:3e:05:11:65:55:ae:f7:96:f8:15:3f:f7:0e: 69:06:95:9e:59:f2:2d:17:a6:e2:73:20:a5:d7:1e:37:0e:79: 2e:b7:b5:17:56:4e:d5:57:d6:c6:64:b0:85:60:24:3d:3c:de: ba:46:c1:4e:a8:04:e5:f8:44:71:16:88:a8:95:c9:89:dc:58: f3:4e:f6:3e:ea:0e:c5:74:7b:06:7c:5b:f1:74:57:5e:7e:87: e5:c4:ad:9f:04:e8:e0:d0:42:1f:65:eb:cf:a5:95:fd:22:4f: 42:9f:9c:57:f8:56:29:14:dd:28:8f:7a:c2:4c:92:02:c7:a8: 07:3d:0b:96:ed:68:af:e5:c6:0b:d8:c1:5e:5a:d7:f6:e2:3b: 82:de:a8:ed:23:2b:87:13:a4:28:04:c3:54:71:b3:a3:ae:df: cc:de:7e:3b:b0:c9:ea:90:59:7f:5a:ef:e6:65:84:58:5c:fd: 45:7f:96:cd:15:b2:b4:8d:1e:aa:32:40:e0:b4:18:06:13:8a: 0b:75:5b:4e:3b:76:7e:ac:53:6b:97:51:a7:f5:5d:eb:23:03: 64:bf:ad:fa:31:35:d3:b9:78:6f:b7:4a:5b:ff:1e:b7:23:aa: ab:5e:09:67 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUZQuzyyBrQHRFuRePY77j3pRN4e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNTExMDYxNDE1MDBaFw0yNjExMDUxNDIwMDBaMDMxMTAvBgNV BAMTKDREMTg0NjI4ODhGOENDRDhFMDFERTkwRjM3NkMxNTBCQkFBQUVBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SM7BtxjtyWRBMJA/AYMpzTMz KrklAnvraTF8LSiJiTn79OKZwDp1Nf/LFrkYJKFZUyvJnTqY/PK2WjgNunlLxJfj JiNWrNe4BGvHtKznZBt0IlFoB3dVivATApP37+kX/V2b5znAmt2tg72ZcGU81KxZ lpR6C15YAisJPFdIfc16B2kjyXUGtUliGBeC4UiBUt0ovA49vdneqo+pb3ffTtVo JMKoFlY4Et+vIHqM5Ylg5v3+M5EDkrqghhInWuRn/y6rXFMIZ/xdnTCuG5oSTgG+ wzZf3qc4SU7cSq6PSNZDSxv50Bf6MTs4zzawe6l9Ae0UeN0MHOO28C6dS11BAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUTRhGKIj4zNjgHekPN2wVC7qq6vcwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzUz MTMwMzgzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIoA81gUQgwDQYJKoZIhvcNAQELBQADggEBAA5yxznb2xiZ/inGOZ6zhdkl oPhw2BUAPgURZVWu95b4FT/3DmkGlZ5Z8i0XpuJzIKXXHjcOeS63tRdWTtVX1sZk sIVgJD083rpGwU6oBOX4RHEWiKiVyYncWPNO9j7qDsV0ewZ8W/F0V15+h+XErZ8E 6ODQQh9l68+llf0iT0KfnFf4VikU3SiPesJMkgLHqAc9C5btaK/lxgvYwV5a1/bi O4LeqO0jK4cTpCgEw1Rxs6Ou38zefjuwyeqQWX9a7+ZlhFhc/UV/ls0VsrSNHqoy QOC0GAYTigt1W047dn6sU2uXUaf1XesjA2S/rfoxNdO5eG+3Slv/HrcjqqteCWc= -----END CERTIFICATE-----Generated at Sun Dec 7 09:04:23 2025 by rpki-client