This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: RMvdqrrK4RGDp7b8hNVbw7BJBcISelOsVXMLv6/PED0= Subject key identifier: 47:1D:04:C7:06:16:53:88:A3:3F:0C:7E:14:0B:B0:6F:C7:C5:47:3D Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 222BF7465524A5F7BBA5E43EAB557B73CB613CEF Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:07 +0000 ROA not before: Fri 07 Nov 2025 14:45:07 +0000 ROA not after: Fri 06 Nov 2026 14:50:07 +0000 asID: 267832 IP address blocks: 2803:2310:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2b:f7:46:55:24:a5:f7:bb:a5:e4:3e:ab:55:7b:73:cb:61:3c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:07 2025 GMT Not After : Nov 6 14:50:07 2026 GMT Subject: CN=471D04C706165388A33F0C7E140BB06FC7C5473D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:b7:97:81:8a:10:15:3e:b5:41:52:c7:e8: 43:19:e7:10:af:a1:ed:ad:3d:66:3e:82:ef:10:9b: 63:f8:a8:01:cc:fe:0b:a5:bf:38:c9:91:d5:11:bc: 79:82:83:d1:a5:ae:37:da:52:c7:45:6a:74:79:51: 54:8d:00:87:5d:91:fd:b5:33:6e:6a:fe:a5:7d:6c: 24:50:ad:d2:48:37:25:1a:25:18:04:dc:43:67:01: aa:f3:fb:04:06:8c:42:8a:32:85:3e:88:3c:a5:c9: c9:e2:08:27:e3:f8:bb:c5:c4:55:da:ae:8f:9c:59: 3a:af:d2:ec:9b:37:1d:71:a6:e7:75:70:b8:e4:f1: 4d:a7:f4:2d:b7:44:b0:1b:6d:04:ec:7e:16:8a:eb: 80:04:8b:89:21:71:13:a6:7e:f3:14:ed:18:52:4c: 07:63:f1:fb:9d:be:77:76:89:95:20:38:af:f4:36: 21:91:f1:76:99:79:da:2c:52:27:2f:d7:0b:bb:4c: a2:03:96:33:0b:60:c4:a5:5f:d8:c5:51:d0:88:56: 64:64:bb:94:b5:69:ba:50:22:7f:7d:ee:9c:d1:b9: 0d:89:93:95:75:67:8c:6c:65:c7:f9:14:0e:5d:e6: 24:51:3e:0c:05:3a:ae:b1:8c:48:24:1b:b0:14:e5: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:04:C7:06:16:53:88:A3:3F:0C:7E:14:0B:B0:6F:C7:C5:47:3D X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:4000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:ad:19:7c:e7:db:fa:63:40:41:fd:19:d0:f4:c5:e4:c6:e5: e8:72:78:3c:97:b1:13:48:72:ae:ca:e9:8a:ed:58:28:78:fe: 49:d7:5b:16:6a:08:bb:72:17:97:32:f2:b5:7d:1a:90:0f:8d: 23:09:67:d2:71:86:3f:df:dc:71:41:73:58:b4:c2:8f:9f:ec: 49:d4:1b:99:c7:6b:ca:54:7b:f2:21:42:8d:ee:ef:a0:dc:b2: ab:c7:2b:1c:0b:8b:a0:6e:c8:5c:37:e9:48:f9:c7:2c:5c:c9: 5b:a2:b4:f7:09:0d:70:fd:96:dc:ec:c3:ad:3d:b5:b9:1a:ae: 65:35:7f:2f:92:cd:59:7a:31:cb:3a:b3:17:3c:a5:d8:ea:5a: ce:03:fe:10:e5:77:2a:76:7d:dc:65:60:3c:3b:f1:ba:6e:b9: d5:45:24:1d:42:18:8f:1f:f9:50:67:65:74:db:65:e9:f1:54: a0:7a:3a:45:7c:04:e6:5d:f1:eb:94:a2:15:67:e1:d8:0b:e8: 28:0d:95:b4:c5:1a:b7:da:90:44:5b:c5:3d:c4:0c:f8:05:68: 2a:3e:02:86:63:ef:15:b1:5d:b6:ca:37:91:77:eb:41:b5:11: d1:87:d2:63:93:96:aa:ec:1e:e7:a1:ae:56:f6:26:cd:30:b3: 71:35:4a:52 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUIiv3RlUkpfe7peQ+q1V7c8thPO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDdaFw0yNjExMDYxNDUwMDdaMDMxMTAvBgNV BAMTKDQ3MUQwNEM3MDYxNjUzODhBMzNGMEM3RTE0MEJCMDZGQzdDNTQ3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpLeXgYoQFT61QVLH6EMZ5xCv oe2tPWY+gu8Qm2P4qAHM/gulvzjJkdURvHmCg9GlrjfaUsdFanR5UVSNAIddkf21 M25q/qV9bCRQrdJINyUaJRgE3ENnAarz+wQGjEKKMoU+iDylycniCCfj+LvFxFXa ro+cWTqv0uybNx1xpud1cLjk8U2n9C23RLAbbQTsfhaK64AEi4khcROmfvMU7RhS TAdj8fudvnd2iZUgOK/0NiGR8XaZedosUicv1wu7TKIDljMLYMSlX9jFUdCIVmRk u5S1abpQIn997pzRuQ2Jk5V1Z4xsZcf5FA5d5iRRPgwFOq6xjEgkG7AU5bXvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQURx0ExwYWU4ijPwx+FAuwb8fFRz0wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQQDANBgkqhkiG9w0BAQsFAAOCAQEAK60ZfOfb+mNAQf0Z0PTF5Mbl 6HJ4PJexE0hyrsrpiu1YKHj+SddbFmoIu3IXlzLytX0akA+NIwln0nGGP9/ccUFz WLTCj5/sSdQbmcdrylR78iFCje7voNyyq8crHAuLoG7IXDfpSPnHLFzJW6K09wkN cP2W3OzDrT21uRquZTV/L5LNWXoxyzqzFzyl2OpazgP+EOV3KnZ93GVgPDvxum65 1UUkHUIYjx/5UGdldNtl6fFUoHo6RXwE5l3x65SiFWfh2AvoKA2VtMUat9qQRFvF PcQM+AVoKj4ChmPvFbFdtso3kXfrQbUR0YfSY5OWquwe56GuVvYmzTCzcTVKUg== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:42 2025 by rpki-client