This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323637383332.roa
File: 323830333a323331303a333030303a3a2f33362d3336203d3e20323637383332.roa (raw, json)
Hash identifier: cNaScjqvI2ASzlGgmJYj2V5xVrj+n72TsapwL6NPEhw=
Subject key identifier: DC:12:0F:D0:27:04:A0:66:AE:7E:0B:95:19:07:04:D7:23:92:B3:03
Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial: 1E627F75A77ABAD36593CB6623B0CAE19F8A08FD
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323637383332.roa
Signing time: Fri 07 Nov 2025 14:50:06 +0000
ROA not before: Fri 07 Nov 2025 14:45:06 +0000
ROA not after: Fri 06 Nov 2026 14:50:06 +0000
asID: 267832
IP address blocks: 2803:2310:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 11:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:62:7f:75:a7:7a:ba:d3:65:93:cb:66:23:b0:ca:e1:9f:8a:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Validity
Not Before: Nov 7 14:45:06 2025 GMT
Not After : Nov 6 14:50:06 2026 GMT
Subject: CN=DC120FD02704A066AE7E0B95190704D72392B303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:f8:01:58:02:8a:33:9a:14:51:63:40:3f:
ae:a3:f0:cd:ed:e8:fe:69:84:fd:ee:6c:19:12:fd:
c3:ab:93:91:76:f8:16:32:f9:8f:9c:90:20:13:38:
d7:ba:fe:29:45:81:9c:9b:b7:9f:fe:a7:5d:e8:59:
83:42:5e:0f:b8:4c:e6:5b:0c:b9:be:fa:df:6a:d3:
bf:74:60:70:44:f7:71:db:e5:00:57:b8:87:59:24:
0c:e5:b9:a1:38:22:7f:d4:e7:19:2b:6e:6f:d5:33:
ee:15:57:d9:5d:92:f1:47:dc:3a:a8:c8:e5:0a:9b:
99:82:ae:0d:8f:2f:58:ac:67:a1:8f:5e:85:70:5a:
95:97:3b:01:1a:1c:05:f5:3d:18:af:40:c2:54:ba:
9a:11:0e:89:79:74:62:9a:b0:ce:6f:9f:c6:91:b0:
63:04:eb:ee:10:bb:00:58:e7:f1:06:ca:c4:0d:a0:
81:7f:9c:27:b9:66:a6:f8:20:10:83:74:a9:e3:87:
b2:f2:02:b2:3a:b4:0b:d6:5f:65:82:59:af:cf:f9:
8b:24:82:df:4f:3f:67:11:ba:81:85:ae:ed:0b:7c:
9d:34:53:5e:82:53:94:72:d4:f6:75:51:d7:f2:83:
cc:d4:99:a2:d9:b6:2c:97:93:34:2b:78:c4:84:b9:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:0F:D0:27:04:A0:66:AE:7E:0B:95:19:07:04:D7:23:92:B3:03
X509v3 Authority Key Identifier:
keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323637383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2310:3000::/36
Signature Algorithm: sha256WithRSAEncryption
55:f4:41:57:04:2b:53:6e:9f:66:4e:8d:12:08:6b:dd:f1:b6:
1d:e9:b7:8e:23:c9:3d:80:90:47:80:40:0e:24:d0:03:95:5a:
37:2b:ba:59:cf:6c:33:da:1e:45:fa:a9:73:36:11:a0:cc:8d:
68:1c:e4:ba:59:63:52:da:31:b1:c1:b4:2f:8e:70:46:00:24:
76:69:9d:b6:2a:e7:38:d8:c6:dc:12:95:05:59:fe:1d:cc:02:
e8:81:84:0a:71:fc:e2:95:96:b5:ad:18:af:93:9c:06:e0:bd:
33:b2:44:f6:bb:7f:58:55:f7:b4:24:a6:2c:cc:4c:4f:b8:b7:
5f:ab:a9:6b:ef:c0:d2:2c:bf:e4:e8:b0:07:a9:c7:c8:55:16:
f4:5f:56:f0:6b:85:ce:a8:5a:7a:71:93:9c:f4:36:7e:54:53:
89:4f:a9:ff:ea:90:c7:fa:50:c9:05:5d:be:5d:a5:41:67:19:
88:f8:10:ef:d3:1e:32:9d:6d:11:8b:52:d6:e2:6e:5e:84:84:
1d:bd:3d:74:c7:f3:86:78:84:c9:ef:99:43:4b:5e:ba:22:d7:
20:fe:4f:fe:53:69:e3:a2:ca:6c:b7:b6:bd:6d:9e:47:c5:48:
72:6d:88:d3:a3:12:f6:5f:e2:b3:66:95:1f:9e:01:ba:85:cf:
da:87:e3:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:30:53 2025 by rpki-client