This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a323030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a323030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: luV5hmRot9gTdK/kk4ZYofXFw+wrxz3lSdnyoHnq7NQ= Subject key identifier: 64:95:E8:A6:4F:33:90:51:96:4A:64:AF:15:45:3C:A6:3A:E1:68:AE Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 1D232407BE16414EDF65B7EF09B3922C33505707 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a323030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:14 +0000 ROA not before: Fri 07 Nov 2025 14:45:14 +0000 ROA not after: Fri 06 Nov 2026 14:50:14 +0000 asID: 272076 IP address blocks: 2803:2310:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:23:24:07:be:16:41:4e:df:65:b7:ef:09:b3:92:2c:33:50:57:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:14 2025 GMT Not After : Nov 6 14:50:14 2026 GMT Subject: CN=6495E8A64F339051964A64AF15453CA63AE168AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:34:bf:4f:a5:57:b2:dc:7a:ff:f5:4f:b9: be:f9:bb:a0:b1:0d:f1:cd:3a:2a:78:52:ff:a8:e6: 37:4a:d3:09:e5:6c:3d:ff:92:eb:41:d7:f5:c6:e2: 36:da:a3:41:bd:4c:1d:f0:6d:7d:ee:4c:f7:04:b0: 43:1e:b6:18:cb:c3:48:2f:f8:93:32:79:83:03:2c: 74:50:1a:45:a3:f2:92:08:b7:94:92:17:22:4d:45: da:3a:15:1f:77:6f:b1:9c:db:68:27:ba:3a:bf:9b: b5:8b:9f:15:93:c7:96:f7:3a:00:ed:77:0a:bb:ef: 7c:63:7c:7c:ca:69:4c:19:8e:0e:de:13:12:42:36: 67:6e:3d:2e:ff:f5:e3:b7:c2:78:b6:a9:e0:e4:c1: 37:66:a4:f1:85:16:30:3f:a8:a5:ce:f6:91:fd:51: c3:b3:67:09:14:b4:02:5c:35:5d:b2:3f:37:4f:4f: ff:b3:93:12:e0:5f:bb:97:33:31:a0:19:6f:f0:d0: 49:db:10:53:8e:58:9c:0f:a1:c7:25:48:2a:89:86: 85:c9:f4:40:73:ff:f9:48:98:ba:47:05:a2:84:97: 7d:79:3c:8a:d0:6f:10:23:f7:81:78:aa:b7:af:bc: 17:54:fe:9e:cc:dc:96:bf:d4:6d:4a:76:97:21:de: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:E8:A6:4F:33:90:51:96:4A:64:AF:15:45:3C:A6:3A:E1:68:AE X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a323030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:2000::/36 Signature Algorithm: sha256WithRSAEncryption b0:3e:e4:1b:91:d6:3c:74:bd:7d:7f:95:93:54:4c:9e:12:64: b0:f5:8f:9f:93:d1:1c:e0:75:76:e5:14:c0:dc:aa:01:af:3e: 26:db:9d:11:78:37:eb:1e:76:23:ce:4f:47:8a:4e:81:20:c4: 82:e0:98:78:f5:70:2d:47:70:96:df:6b:45:6d:c7:ac:f9:87: 23:9a:2f:2d:4f:52:c5:fa:62:09:ac:4a:cd:9e:13:f1:b4:87: 24:7d:01:a1:34:f3:f9:4b:ff:55:91:d7:ef:66:ec:01:11:fa: e9:4f:45:29:d9:4b:b4:06:bb:6e:7e:90:5b:5f:51:34:7a:fa: ec:25:34:d4:cc:21:4f:e0:ae:ec:1d:9e:2e:8f:1e:72:67:0d: 04:3a:7f:e0:54:9d:c6:11:36:b5:82:c0:cb:3f:cd:c7:88:f2: 0a:fb:2f:3b:c4:71:03:db:0d:ee:6d:1a:2d:8a:11:74:cb:c1: 4f:dc:21:70:7b:b6:55:6f:6e:7b:ff:a9:95:8e:2c:b7:e9:65: 9a:b1:b6:a1:e2:25:e0:36:34:c4:aa:81:c0:cb:63:07:0a:00: 05:f0:b3:ed:a2:14:b7:37:57:0b:4d:2d:c2:91:1d:4b:c3:10: 17:2f:b1:a4:9b:1a:68:4e:2b:b5:71:a4:00:e6:3d:9d:b0:bc: 62:05:20:38 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHSMkB74WQU7fZbfvCbOSLDNQVwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTRaFw0yNjExMDYxNDUwMTRaMDMxMTAvBgNV BAMTKDY0OTVFOEE2NEYzMzkwNTE5NjRBNjRBRjE1NDUzQ0E2M0FFMTY4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHDS/T6VXstx6//VPub75u6Cx DfHNOip4Uv+o5jdK0wnlbD3/kutB1/XG4jbao0G9TB3wbX3uTPcEsEMethjLw0gv +JMyeYMDLHRQGkWj8pIIt5SSFyJNRdo6FR93b7Gc22gnujq/m7WLnxWTx5b3OgDt dwq773xjfHzKaUwZjg7eExJCNmduPS7/9eO3wni2qeDkwTdmpPGFFjA/qKXO9pH9 UcOzZwkUtAJcNV2yPzdPT/+zkxLgX7uXMzGgGW/w0EnbEFOOWJwPocclSCqJhoXJ 9EBz//lImLpHBaKEl315PIrQbxAj94F4qrevvBdU/p7M3Ja/1G1Kdpch3r7zAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUZJXopk8zkFGWSmSvFUU8pjrhaK4wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQIDANBgkqhkiG9w0BAQsFAAOCAQEAsD7kG5HWPHS9fX+Vk1RMnhJk sPWPn5PRHOB1duUUwNyqAa8+JtudEXg36x52I85PR4pOgSDEguCYePVwLUdwlt9r RW3HrPmHI5ovLU9SxfpiCaxKzZ4T8bSHJH0BoTTz+Uv/VZHX72bsARH66U9FKdlL tAa7bn6QW19RNHr67CU01MwhT+Cu7B2eLo8ecmcNBDp/4FSdxhE2tYLAyz/Nx4jy CvsvO8RxA9sN7m0aLYoRdMvBT9whcHu2VW9ue/+plY4st+llmrG2oeIl4DY0xKqB wMtjBwoABfCz7aIUtzdXC00twpEdS8MQFy+xpJsaaE4rtXGkAOY9nbC8YgUgOA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:42 2025 by rpki-client