This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630303a3a2f34362d3438203d3e20323733313530.roa File: 323830333a636436303a356630303a3a2f34362d3438203d3e20323733313530.roa (raw, json) Hash identifier: yY2l12KxrOY1fEykCCnRvYrQSRg+OPp9nTcrUBUm27A= Subject key identifier: 22:EE:01:70:FC:B9:75:59:0C:08:21:0D:81:A0:DD:EB:60:66:FD:25 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 0265CFB0FC0133014BF2D8CD77DACFEE4A6B4406 Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630303a3a2f34362d3438203d3e20323733313530.roa Signing time: Thu 06 Nov 2025 14:45:00 +0000 ROA not before: Thu 06 Nov 2025 14:40:00 +0000 ROA not after: Thu 05 Nov 2026 14:45:00 +0000 asID: 273150 IP address blocks: 2803:cd60:5f00::/46 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 09:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:65:cf:b0:fc:01:33:01:4b:f2:d8:cd:77:da:cf:ee:4a:6b:44:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Nov 6 14:40:00 2025 GMT Not After : Nov 5 14:45:00 2026 GMT Subject: CN=22EE0170FCB975590C08210D81A0DDEB6066FD25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:9b:0d:21:21:e5:11:ae:34:6f:d7:29:61: 66:76:82:cf:96:dc:08:65:ac:59:29:29:77:3a:84: 4f:d1:e2:a1:d5:85:e9:cc:fc:12:39:e6:d8:62:cf: 91:34:d9:50:3b:ed:c7:ed:49:4e:f9:e7:28:36:ba: 4d:9f:e4:71:d3:07:23:06:44:03:01:63:98:d9:6a: 48:c6:4b:93:20:aa:d0:af:60:a3:e6:a2:2c:71:c1: e1:64:45:a0:b7:c0:0a:73:86:dd:62:e2:f5:67:88: 4f:7d:ce:fe:41:ad:cd:8d:aa:f7:53:96:7e:60:8f: c7:0a:f9:94:bf:bc:9a:f0:08:c7:de:d7:ce:56:29: c4:da:ee:59:6b:47:cc:ed:f2:dd:19:8c:54:ed:57: d0:6b:95:03:c0:ab:01:62:36:fd:7a:90:21:36:7c: ea:3f:f1:18:4a:20:eb:61:12:f9:29:61:3e:5b:f1: 73:0f:67:eb:4b:8c:a8:65:88:66:f3:13:6e:4d:29: 86:70:9f:24:25:dd:13:b7:86:c8:26:b1:2c:95:cb: 52:65:ba:ce:2b:15:0d:f2:20:e8:05:d5:52:e3:91: ad:8d:4c:33:f8:f9:7a:6e:f8:26:7a:1c:a0:40:85: a9:13:07:0d:57:f1:a7:47:e7:e4:04:dd:dd:d5:f6: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:01:70:FC:B9:75:59:0C:08:21:0D:81:A0:DD:EB:60:66:FD:25 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630303a3a2f34362d3438203d3e20323733313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:5f00::/46 Signature Algorithm: sha256WithRSAEncryption 30:99:1f:9f:bd:85:fe:44:a7:c4:60:a5:3f:0f:ae:f6:fa:cc: 66:da:ec:31:3f:a5:3f:e3:2b:8e:3f:5f:0d:74:b3:c7:50:2d: a4:93:a3:4c:b9:73:7a:49:55:ed:d8:2d:90:fd:d1:4b:92:8a: dd:61:f6:e5:e9:22:c2:36:77:0b:df:ef:6b:b7:93:50:0a:25: 67:3f:70:e4:a0:28:70:ae:47:ea:ca:b1:33:dc:bb:2d:ec:ef: b5:be:e2:83:6a:1d:1c:56:fc:35:cd:bd:69:a0:c8:9c:aa:66: 9a:b3:e6:29:1c:86:7d:7f:1a:44:df:81:16:bb:ab:aa:3b:33: cf:a5:c8:9a:9c:24:49:bc:e1:88:55:12:6e:72:28:69:23:aa: 2e:40:76:c4:a8:0a:47:7c:10:47:35:b6:0f:28:94:e2:ab:91: 4e:b0:5b:6e:c9:ce:4c:75:50:cd:31:23:0a:e4:83:d4:64:4f: 0d:92:e9:21:2f:51:1f:16:a0:7a:97:7b:88:07:68:48:b2:7b: 4b:68:5a:10:01:f0:f2:6f:8f:94:79:f0:c4:b3:a0:33:dd:62: 36:e4:1c:03:5a:86:65:5d:63:be:fc:05:0b:01:72:08:2c:72: d3:34:f0:fb:72:67:7f:f9:95:d5:14:ed:ea:44:7d:70:65:10: 5c:b6:ae:9b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUAmXPsPwBMwFL8tjNd9rP7kprRAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNTExMDYxNDQwMDBaFw0yNjExMDUxNDQ1MDBaMDMxMTAvBgNV BAMTKDIyRUUwMTcwRkNCOTc1NTkwQzA4MjEwRDgxQTBEREVCNjA2NkZEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEpsNISHlEa40b9cpYWZ2gs+W 3AhlrFkpKXc6hE/R4qHVhenM/BI55thiz5E02VA77cftSU755yg2uk2f5HHTByMG RAMBY5jZakjGS5MgqtCvYKPmoixxweFkRaC3wApzht1i4vVniE99zv5Brc2NqvdT ln5gj8cK+ZS/vJrwCMfe185WKcTa7llrR8zt8t0ZjFTtV9BrlQPAqwFiNv16kCE2 fOo/8RhKIOthEvkpYT5b8XMPZ+tLjKhliGbzE25NKYZwnyQl3RO3hsgmsSyVy1Jl us4rFQ3yIOgF1VLjka2NTDP4+Xpu+CZ6HKBAhakTBw1X8adH5+QE3d3V9suxAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUIu4BcPy5dVkMCCENgaDd62Bm/SUwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzU2 NjMwMzAzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIoA81gXwAwDQYJKoZIhvcNAQELBQADggEBADCZH5+9hf5Ep8RgpT8Prvb6 zGba7DE/pT/jK44/Xw10s8dQLaSTo0y5c3pJVe3YLZD90UuSit1h9uXpIsI2dwvf 72u3k1AKJWc/cOSgKHCuR+rKsTPcuy3s77W+4oNqHRxW/DXNvWmgyJyqZpqz5ikc hn1/GkTfgRa7q6o7M8+lyJqcJEm84YhVEm5yKGkjqi5AdsSoCkd8EEc1tg8olOKr kU6wW27Jzkx1UM0xIwrkg9RkTw2S6SEvUR8WoHqXe4gHaEiye0toWhAB8PJvj5R5 8MSzoDPdYjbkHANahmVdY778BQsBcggsctM08PtyZ3/5ldUU7epEfXBlEFy2rps= -----END CERTIFICATE-----Generated at Sun Dec 7 09:04:22 2025 by rpki-client