This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a313030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: TpHUJTqYkK9lXgwjM5CC6j/ufHlXMBffHW65unHNksc= Subject key identifier: 27:40:96:35:98:49:76:0B:5D:EC:1A:DF:35:0C:CF:01:44:7F:62:2F Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 64CA90BB001D3A71092BC6E9FB88C58CB7791968 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:14 +0000 ROA not before: Fri 07 Nov 2025 14:45:14 +0000 ROA not after: Fri 06 Nov 2026 14:50:14 +0000 asID: 267832 IP address blocks: 2803:2310:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ca:90:bb:00:1d:3a:71:09:2b:c6:e9:fb:88:c5:8c:b7:79:19:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:14 2025 GMT Not After : Nov 6 14:50:14 2026 GMT Subject: CN=274096359849760B5DEC1ADF350CCF01447F622F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:00:c9:1c:a4:a8:9a:ef:8c:da:0a:71:aa: cb:24:b2:30:64:cd:e6:7f:fc:14:b6:23:35:86:d4: d4:b1:42:68:aa:a9:9b:61:95:ba:a1:2d:07:2c:ea: 62:b2:95:7f:7c:dc:e7:cb:1f:89:fd:f3:56:6f:57: d9:27:3d:89:b3:a4:49:fd:43:68:80:4a:19:60:3f: 06:d9:53:01:f1:05:a4:f1:91:69:ca:e7:6f:20:63: 53:07:3a:78:bb:ac:86:4c:df:0a:8f:6f:f8:56:a5: cd:f6:fa:36:90:fa:92:a0:1c:6a:96:10:a2:1c:47: 25:70:0a:52:07:6f:9a:ac:0b:1a:4a:a1:f9:d0:35: 05:6c:a7:49:76:58:37:b4:ef:68:56:5c:ad:65:f5: 52:3a:f2:7a:99:9d:f8:99:31:d7:12:f8:49:09:ca: 58:09:18:65:03:98:66:c7:0f:dc:30:bf:d6:01:84: e2:79:33:7f:8f:06:ee:9a:fa:5d:d7:93:7c:18:fe: cb:9e:38:52:af:eb:77:0a:fc:32:e3:f7:98:56:d2: 52:9a:59:7d:35:d1:a3:0a:e6:e2:6f:20:cf:ec:21: e7:0f:41:21:68:68:1d:25:68:e8:e1:d2:ee:ee:20: fb:6c:e2:21:d9:3d:f9:dc:b4:10:ef:b7:a6:2c:12: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:40:96:35:98:49:76:0B:5D:EC:1A:DF:35:0C:CF:01:44:7F:62:2F X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:1000::/36 Signature Algorithm: sha256WithRSAEncryption aa:d3:cd:e7:74:e6:9e:b6:e5:5a:68:a7:19:a9:07:f7:87:38: 90:22:6f:01:f5:24:3e:7b:66:71:f7:e7:c0:9d:d2:3c:d8:74: 8c:5c:8c:91:fa:4b:2f:ba:ad:25:3d:22:b8:8e:70:b5:08:96: a7:57:f1:34:c2:16:f7:5e:a2:de:31:c3:19:9a:77:7e:ab:10: ae:8f:aa:25:28:c2:9b:fe:ab:66:3c:1b:40:b2:49:22:44:9e: 02:ef:07:d0:bd:4c:2e:9b:c8:f0:5c:24:e3:9a:ac:03:50:d3: 0c:e1:61:c2:ce:f6:5e:dd:2a:1f:19:91:67:b5:29:71:6c:05: 8b:56:db:93:30:ac:0f:39:78:65:ec:a4:95:2a:ba:58:92:a8: ba:43:03:ba:4a:36:39:e6:c0:a8:74:54:07:e9:d3:e7:4f:6e: 74:d0:53:f0:87:30:4f:db:5e:37:59:2b:c6:4c:89:85:72:6c: 0a:26:92:c2:7b:f5:cb:21:f2:31:8e:23:dd:d0:e8:68:e8:3c: a9:dc:2b:3f:4e:36:c2:f1:2b:28:89:7d:36:b6:e3:41:a5:fc: be:ad:56:ba:0f:d8:20:8d:de:40:5f:94:f3:6d:4a:a2:ff:d6: fa:83:87:f8:65:b4:10:4a:ba:6c:1e:71:7f:08:90:68:eb:72: 0b:ea:c3:bb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZMqQuwAdOnEJK8bp+4jFjLd5GWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTRaFw0yNjExMDYxNDUwMTRaMDMxMTAvBgNV BAMTKDI3NDA5NjM1OTg0OTc2MEI1REVDMUFERjM1MENDRjAxNDQ3RjYyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFygDJHKSomu+M2gpxqssksjBk zeZ//BS2IzWG1NSxQmiqqZthlbqhLQcs6mKylX983OfLH4n981ZvV9knPYmzpEn9 Q2iAShlgPwbZUwHxBaTxkWnK528gY1MHOni7rIZM3wqPb/hWpc32+jaQ+pKgHGqW EKIcRyVwClIHb5qsCxpKofnQNQVsp0l2WDe072hWXK1l9VI68nqZnfiZMdcS+EkJ ylgJGGUDmGbHD9wwv9YBhOJ5M3+PBu6a+l3Xk3wY/sueOFKv63cK/DLj95hW0lKa WX010aMK5uJvIM/sIecPQSFoaB0laOjh0u7uIPts4iHZPfnctBDvt6YsEsW5AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUJ0CWNZhJdgtd7BrfNQzPAUR/Yi8wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQEDANBgkqhkiG9w0BAQsFAAOCAQEAqtPN53TmnrblWminGakH94c4 kCJvAfUkPntmcffnwJ3SPNh0jFyMkfpLL7qtJT0iuI5wtQiWp1fxNMIW916i3jHD GZp3fqsQro+qJSjCm/6rZjwbQLJJIkSeAu8H0L1MLpvI8Fwk45qsA1DTDOFhws72 Xt0qHxmRZ7UpcWwFi1bbkzCsDzl4ZeyklSq6WJKoukMDuko2OebAqHRUB+nT509u dNBT8IcwT9teN1krxkyJhXJsCiaSwnv1yyHyMY4j3dDoaOg8qdwrP042wvErKIl9 NrbjQaX8vq1Wug/YII3eQF+U821Kov/W+oOH+GW0EEq6bB5xfwiQaOtyC+rDuw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:42 2025 by rpki-client