This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa File: 323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa (raw, json) Hash identifier: sqOS7zKGYgGRSWT6Kp2/kKZg2ic/cbWND4JzYLFGt3g= Subject key identifier: D5:D6:35:1F:2A:EC:97:C0:29:38:11:4B:62:94:1D:75:25:27:34:29 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 0AAAD7114AEC4F38F8830F040FDD57B31440DAED Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa Signing time: Thu 06 Nov 2025 14:45:00 +0000 ROA not before: Thu 06 Nov 2025 14:40:00 +0000 ROA not after: Thu 05 Nov 2026 14:45:00 +0000 asID: 273150 IP address blocks: 2803:cd60:5f04::/46 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 09:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:aa:d7:11:4a:ec:4f:38:f8:83:0f:04:0f:dd:57:b3:14:40:da:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Nov 6 14:40:00 2025 GMT Not After : Nov 5 14:45:00 2026 GMT Subject: CN=D5D6351F2AEC97C02938114B62941D7525273429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:ca:51:c8:e5:a1:74:b4:a6:f9:4c:88:00: 60:8d:ed:79:06:f6:a4:73:f6:5e:1f:cf:a5:14:91: b0:93:e3:c8:e6:15:fb:3e:36:38:7a:e0:23:4b:cc: bc:66:26:2a:e0:d3:06:33:e4:fd:03:2c:33:dc:b5: fe:f1:0a:ae:2e:00:4f:26:a3:4a:0d:65:47:a1:bc: 3e:2f:68:a8:ed:ac:24:11:98:d5:c5:37:29:de:0e: 3c:c6:38:94:89:bf:05:66:b6:d5:95:c8:d3:de:2f: 2d:b9:3b:c2:3b:7e:80:ef:4f:1c:75:b7:f3:01:1c: a1:37:1f:23:c5:ea:6f:9a:01:85:9c:1a:de:ee:80: 62:b6:eb:72:7d:84:a2:8e:9e:50:28:6c:e3:33:ea: ec:bf:e9:2d:b1:45:eb:eb:59:87:e4:4a:d6:de:4c: 62:1f:46:51:e7:18:41:d9:38:42:7c:5f:a2:9c:9c: d7:8d:85:fb:21:5c:24:fa:06:fd:d4:df:c4:20:1d: ae:de:68:25:1b:6f:b2:43:ca:d7:2b:c4:ad:9c:e6: 4d:1c:bb:f2:ad:00:02:58:97:af:27:44:67:8f:ab: ba:39:8a:c1:aa:89:b5:bc:97:2d:d4:77:63:33:d4: c8:c8:30:f6:47:1d:4f:01:0a:8a:b4:2d:5e:2c:29: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D6:35:1F:2A:EC:97:C0:29:38:11:4B:62:94:1D:75:25:27:34:29 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a356630343a3a2f34362d3438203d3e20323733313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:5f04::/46 Signature Algorithm: sha256WithRSAEncryption 3a:dc:28:88:78:ac:3d:44:11:ef:95:35:6f:22:2e:0e:2a:f9: 6b:86:a4:a2:81:ab:ee:0d:16:50:0b:cb:c2:18:72:ec:68:07: 93:59:88:5f:c1:a7:0e:6d:17:a5:fa:6c:cb:ed:f9:a4:f5:4c: 1b:e1:f8:d5:4e:7b:09:24:ca:d6:af:e9:7a:e1:fa:ad:e7:d7: 8b:1c:79:f1:b0:ea:90:6b:1a:4c:af:19:4e:87:76:fb:1f:90: c3:85:dd:30:fc:2d:93:bd:cd:32:23:2f:86:a8:ad:db:19:74: c3:da:b0:da:39:7c:a9:28:21:6f:13:ec:4b:86:06:1a:27:fc: 25:a5:9a:d4:f9:32:de:11:bc:12:d6:ae:19:57:82:cc:01:91: 07:51:49:52:c7:38:22:06:49:32:95:42:30:86:17:e5:0a:37: 9c:fe:9d:c9:49:da:52:53:74:3f:0b:87:de:32:3f:04:2f:a3: 9e:cd:fd:00:82:55:4b:d5:b3:57:9b:17:3e:c9:d0:c4:2b:50: 13:61:cf:8e:2c:10:45:a9:af:b9:96:55:cd:d2:51:b1:b0:a4: 58:a2:85:59:12:f2:c4:4f:27:d6:87:4c:2d:b7:55:8b:f9:eb: 5a:a0:11:f6:d2:64:2f:a7:f7:5e:b2:74:36:1f:5b:0a:84:ca: 16:a0:0a:83 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUCqrXEUrsTzj4gw8ED91XsxRA2u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNTExMDYxNDQwMDBaFw0yNjExMDUxNDQ1MDBaMDMxMTAvBgNV BAMTKEQ1RDYzNTFGMkFFQzk3QzAyOTM4MTE0QjYyOTQxRDc1MjUyNzM0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9spRyOWhdLSm+UyIAGCN7XkG 9qRz9l4fz6UUkbCT48jmFfs+Njh64CNLzLxmJirg0wYz5P0DLDPctf7xCq4uAE8m o0oNZUehvD4vaKjtrCQRmNXFNyneDjzGOJSJvwVmttWVyNPeLy25O8I7foDvTxx1 t/MBHKE3HyPF6m+aAYWcGt7ugGK263J9hKKOnlAobOMz6uy/6S2xRevrWYfkStbe TGIfRlHnGEHZOEJ8X6KcnNeNhfshXCT6Bv3U38QgHa7eaCUbb7JDytcrxK2c5k0c u/KtAAJYl68nRGePq7o5isGqibW8ly3Ud2Mz1MjIMPZHHU8BCoq0LV4sKW7HAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU1dY1Hyrsl8ApOBFLYpQddSUnNCkwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzU2 NjMwMzQzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIoA81gXwQwDQYJKoZIhvcNAQELBQADggEBADrcKIh4rD1EEe+VNW8iLg4q +WuGpKKBq+4NFlALy8IYcuxoB5NZiF/Bpw5tF6X6bMvt+aT1TBvh+NVOewkkytav 6Xrh+q3n14scefGw6pBrGkyvGU6HdvsfkMOF3TD8LZO9zTIjL4aordsZdMPasNo5 fKkoIW8T7EuGBhon/CWlmtT5Mt4RvBLWrhlXgswBkQdRSVLHOCIGSTKVQjCGF+UK N5z+nclJ2lJTdD8Lh94yPwQvo57N/QCCVUvVs1ebFz7J0MQrUBNhz44sEEWpr7mW Vc3SUbGwpFiihVkS8sRPJ9aHTC23VYv561qgEfbSZC+n916ydDYfWwqEyhagCoM= -----END CERTIFICATE-----Generated at Sun Dec 7 09:04:22 2025 by rpki-client