This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a333030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: +eHUArlq/0Owg67VjVfeO/AzbA9yMdRf9Gj2UnwF4GQ= Subject key identifier: 3B:5D:A4:74:9C:F0:48:C6:54:54:F5:D0:C7:66:5E:0D:99:36:05:C3 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 0137FB3AD0EE4A002E96E8062D15144EB8154B69 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:12 +0000 ROA not before: Fri 07 Nov 2025 14:45:12 +0000 ROA not after: Fri 06 Nov 2026 14:50:12 +0000 asID: 272076 IP address blocks: 2803:2310:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:37:fb:3a:d0:ee:4a:00:2e:96:e8:06:2d:15:14:4e:b8:15:4b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:12 2025 GMT Not After : Nov 6 14:50:12 2026 GMT Subject: CN=3B5DA4749CF048C65454F5D0C7665E0D993605C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:d0:59:d5:df:d4:ce:8e:c4:5c:b1:3c:42: 02:94:b0:de:68:12:d7:0e:01:4f:f7:9f:e1:b4:63: 0f:8d:af:60:56:c0:3e:0f:89:b9:cb:51:2b:86:73: 70:9e:89:8f:bf:34:b1:6c:15:af:09:8b:e3:29:7e: cb:aa:fb:af:0d:26:9c:f5:73:dd:08:93:3f:30:63: 30:b3:2c:f5:19:a5:82:db:51:ec:81:d0:10:42:b0: c2:bc:82:46:8e:83:ac:1c:0f:b3:0c:45:04:f6:0e: 89:d3:97:87:3f:8d:ef:64:3b:44:83:0f:14:19:b2: 8b:a6:66:b8:3f:04:65:44:42:20:b4:71:72:e6:6f: 2b:c2:49:04:7a:84:2b:9d:34:87:9a:26:e4:7e:a9: c9:b4:be:c9:5c:9d:bb:c9:df:e5:be:06:e5:14:f5: 36:f3:e3:fe:d2:93:3c:d1:04:cd:f3:e2:15:01:27: 14:ec:53:36:e2:bb:d2:cf:ac:f2:17:c5:a9:cf:e6: 81:91:45:c9:53:84:fe:3a:98:d6:43:59:33:90:d2: 04:0c:d3:1b:2d:60:98:59:1e:db:3a:6f:68:6d:da: 74:f2:2b:1c:ac:16:65:1b:68:91:cb:9f:a2:b4:1a: 8f:a9:56:2b:a0:78:2c:70:fd:e2:13:41:dd:be:18: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:A4:74:9C:F0:48:C6:54:54:F5:D0:C7:66:5E:0D:99:36:05:C3 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a333030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:3000::/36 Signature Algorithm: sha256WithRSAEncryption 65:e8:6c:2f:2a:b3:87:27:49:64:a9:29:93:e3:5b:02:82:c7: e8:f3:c9:39:4a:8b:5c:cb:c2:bc:ef:ce:3b:a4:6e:5a:34:01: dd:92:cd:2a:a5:da:53:98:ae:71:7b:19:a1:b2:17:26:39:d8: b3:4f:0a:18:9e:bd:75:cb:5c:4a:70:62:40:79:e8:f7:f0:f3: f2:1a:38:4a:84:10:16:01:b1:99:97:cb:79:53:e0:cc:9e:7a: 36:1c:be:dd:9a:40:a9:56:d4:72:e3:5a:41:1e:8e:3d:8e:16: 8d:ba:85:74:9b:f3:14:22:64:91:5c:8f:e2:2e:4f:32:e3:ed: 37:26:f4:67:e4:3f:a0:11:26:b3:a2:8f:d2:c7:e6:34:c9:fa: 14:a1:4d:00:ea:2f:9b:ea:21:b0:a4:30:c6:9d:84:36:09:70: 4e:77:2b:d3:14:b2:eb:92:2b:48:c9:7c:d5:58:83:85:8a:1b: 15:c0:36:f1:ee:19:96:81:a3:33:19:12:e5:ae:20:90:74:66: 8b:25:86:16:c9:46:91:b5:16:5e:6c:c4:2d:9a:fb:a0:31:71: f8:ba:ce:29:41:d7:2f:5d:ea:af:c2:79:8c:ef:2b:5a:cd:12: 0e:21:39:69:b2:77:7d:2f:3a:e3:6f:4c:a5:94:c9:a7:00:3a: c2:ea:b7:ac -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUATf7OtDuSgAulugGLRUUTrgVS2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTJaFw0yNjExMDYxNDUwMTJaMDMxMTAvBgNV BAMTKDNCNURBNDc0OUNGMDQ4QzY1NDU0RjVEMEM3NjY1RTBEOTkzNjA1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAtBZ1d/Uzo7EXLE8QgKUsN5o EtcOAU/3n+G0Yw+Nr2BWwD4PibnLUSuGc3CeiY+/NLFsFa8Ji+Mpfsuq+68NJpz1 c90Ikz8wYzCzLPUZpYLbUeyB0BBCsMK8gkaOg6wcD7MMRQT2DonTl4c/je9kO0SD DxQZsoumZrg/BGVEQiC0cXLmbyvCSQR6hCudNIeaJuR+qcm0vslcnbvJ3+W+BuUU 9Tbz4/7SkzzRBM3z4hUBJxTsUzbiu9LPrPIXxanP5oGRRclThP46mNZDWTOQ0gQM 0xstYJhZHts6b2ht2nTyKxysFmUbaJHLn6K0Go+pViugeCxw/eITQd2+GGRBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUO12kdJzwSMZUVPXQx2ZeDZk2BcMwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQMDANBgkqhkiG9w0BAQsFAAOCAQEAZehsLyqzhydJZKkpk+NbAoLH 6PPJOUqLXMvCvO/OO6RuWjQB3ZLNKqXaU5iucXsZobIXJjnYs08KGJ69dctcSnBi QHno9/Dz8ho4SoQQFgGxmZfLeVPgzJ56Nhy+3ZpAqVbUcuNaQR6OPY4WjbqFdJvz FCJkkVyP4i5PMuPtNyb0Z+Q/oBEms6KP0sfmNMn6FKFNAOovm+ohsKQwxp2ENglw Tncr0xSy65IrSMl81ViDhYobFcA28e4ZloGjMxkS5a4gkHRmiyWGFslGkbUWXmzE LZr7oDFx+LrOKUHXL13qr8J5jO8rWs0SDiE5abJ3fS86429MpZTJpwA6wuq3rA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:53 2025 by rpki-client