This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: 6Olcxgo0uD92f03K2zWarDpRlHzXotLSejrPLtR0WSM= Subject key identifier: 2D:58:F8:14:C6:E1:D3:6D:25:39:E7:AC:1E:83:59:B9:05:21:B5:A0 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 48137FE534BE60A6427F4166C3ACF610FD5A7C84 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:15 +0000 ROA not before: Fri 07 Nov 2025 14:45:15 +0000 ROA not after: Fri 06 Nov 2026 14:50:15 +0000 asID: 272076 IP address blocks: 2803:2310:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:13:7f:e5:34:be:60:a6:42:7f:41:66:c3:ac:f6:10:fd:5a:7c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:15 2025 GMT Not After : Nov 6 14:50:15 2026 GMT Subject: CN=2D58F814C6E1D36D2539E7AC1E8359B90521B5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:89:c2:25:d1:10:09:74:d4:2a:f6:59:82: 45:ed:84:6c:f7:33:37:d4:b1:48:2c:60:c9:71:19: e8:4b:33:c1:83:30:6a:7f:b3:cc:b3:47:1e:a0:4c: 73:21:80:56:43:c2:7d:c1:7d:66:ab:21:f0:3d:4a: e8:df:5e:09:15:d4:10:cf:02:02:85:61:56:4b:9d: 7c:b4:03:a7:58:08:d1:b6:e3:6c:f0:0a:12:b5:0f: 93:d9:3f:6f:1e:ed:3e:f8:64:46:43:98:58:d6:13: 3f:8c:04:ca:ff:a3:a7:6c:03:d3:39:65:89:43:00: 72:e9:8c:d9:c5:2c:24:12:51:f9:d7:fc:86:3f:46: 29:18:8e:60:4c:3a:a3:00:19:9d:fc:78:1d:e2:9b: b8:5a:19:42:80:6c:dd:5a:a4:50:50:fa:ca:87:35: 6f:9b:c0:bf:1e:79:06:dc:9c:83:9f:41:2d:3f:e9: 77:24:4e:ad:1f:76:eb:f7:df:2e:95:91:bb:aa:ab: eb:a1:16:c5:65:60:49:0c:e3:ab:76:93:8c:ce:91: c1:d0:63:39:c1:cd:85:d6:b6:d9:14:33:fe:8d:c1: 09:b1:a2:b1:b4:68:8d:1b:92:2f:7a:f2:3e:f7:f9: 64:0f:c6:04:38:7a:09:f8:db:27:cd:05:ed:5d:ed: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:58:F8:14:C6:E1:D3:6D:25:39:E7:AC:1E:83:59:B9:05:21:B5:A0 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a313030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:1000::/36 Signature Algorithm: sha256WithRSAEncryption a4:a9:da:19:91:67:8c:4b:9b:3a:a4:8c:df:a0:e2:e2:4f:69: d3:be:24:86:b3:90:08:aa:fd:be:7a:16:e9:92:ff:2f:16:b5: 76:32:e0:6a:d8:4e:67:15:2d:4f:b7:1c:bd:75:a1:8d:3f:23: aa:67:dc:04:0d:28:97:cd:d1:43:30:5a:7f:ef:ed:bd:ef:27: d9:02:d3:ba:49:72:e7:52:21:c8:8e:d1:9a:01:59:9b:1f:bb: 32:dc:02:30:24:e3:2f:bc:48:cc:2d:d7:e7:4f:57:54:c8:91: 7b:a9:b7:a1:58:71:c5:59:82:4f:31:b2:df:55:39:f7:b5:07: 7a:eb:3a:e6:bb:f4:d2:cf:ef:1b:7e:b1:39:6b:2c:78:fc:a8: 37:1f:ac:86:d0:4c:25:93:43:f8:85:69:67:ca:e8:3e:ef:bc: 49:d8:bc:e2:6e:82:73:a5:8f:58:72:5d:13:09:b9:c1:89:d5: 2a:48:ec:b4:a8:74:e8:44:c5:9e:6b:6c:4e:bf:5d:5e:3d:08: d5:76:f5:4a:dc:6c:6d:e2:a8:8b:d9:1c:45:f2:80:e7:96:43: 2d:4a:d1:9b:86:b2:99:c1:22:a9:99:d7:b4:2e:f9:7d:2a:2d: 28:bf:e8:0c:48:c8:b3:60:74:98:91:05:e3:a8:e5:a7:fd:be: 43:66:d7:5c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUSBN/5TS+YKZCf0Fmw6z2EP1afIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTVaFw0yNjExMDYxNDUwMTVaMDMxMTAvBgNV BAMTKDJENThGODE0QzZFMUQzNkQyNTM5RTdBQzFFODM1OUI5MDUyMUI1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j4nCJdEQCXTUKvZZgkXthGz3 MzfUsUgsYMlxGehLM8GDMGp/s8yzRx6gTHMhgFZDwn3BfWarIfA9SujfXgkV1BDP AgKFYVZLnXy0A6dYCNG242zwChK1D5PZP28e7T74ZEZDmFjWEz+MBMr/o6dsA9M5 ZYlDAHLpjNnFLCQSUfnX/IY/RikYjmBMOqMAGZ38eB3im7haGUKAbN1apFBQ+sqH NW+bwL8eeQbcnIOfQS0/6XckTq0fduv33y6Vkbuqq+uhFsVlYEkM46t2k4zOkcHQ YznBzYXWttkUM/6NwQmxorG0aI0bki968j73+WQPxgQ4egn42yfNBe1d7WCbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQULVj4FMbh020lOeesHoNZuQUhtaAwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQEDANBgkqhkiG9w0BAQsFAAOCAQEApKnaGZFnjEubOqSM36Di4k9p 074khrOQCKr9vnoW6ZL/Lxa1djLgathOZxUtT7ccvXWhjT8jqmfcBA0ol83RQzBa f+/tve8n2QLTukly51IhyI7RmgFZmx+7MtwCMCTjL7xIzC3X509XVMiRe6m3oVhx xVmCTzGy31U597UHeus65rv00s/vG36xOWssePyoNx+shtBMJZND+IVpZ8roPu+8 Sdi84m6Cc6WPWHJdEwm5wYnVKkjstKh06ETFnmtsTr9dXj0I1Xb1StxsbeKoi9kc RfKA55ZDLUrRm4aymcEiqZnXtC75fSotKL/oDEjIs2B0mJEF46jlp/2+Q2bXXA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client