This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a343030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: 5I5p4xPbwOjjxgAhVi18ilapp01IMvPUcgyvdpijg/c= Subject key identifier: 3E:E0:D5:5D:D8:06:97:FC:13:36:72:CF:35:A9:FD:4F:EB:57:A4:0E Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 4C470FFA1EE1FE411F5BAEACC2B9BFDA45C83A97 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:06 +0000 ROA not before: Fri 07 Nov 2025 14:45:06 +0000 ROA not after: Fri 06 Nov 2026 14:50:06 +0000 asID: 272076 IP address blocks: 2803:2310:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:47:0f:fa:1e:e1:fe:41:1f:5b:ae:ac:c2:b9:bf:da:45:c8:3a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:06 2025 GMT Not After : Nov 6 14:50:06 2026 GMT Subject: CN=3EE0D55DD80697FC133672CF35A9FD4FEB57A40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:a6:f5:1e:2a:48:5a:54:7c:77:f7:b4:0c: ee:2a:20:40:c8:74:2e:bd:03:dc:ab:a3:4e:98:24: 2f:1e:32:ae:44:0e:1f:c8:51:8e:c1:6e:8f:42:06: 54:91:fb:f9:19:2d:ab:51:ca:8d:1d:8f:9c:96:f6: 5c:4d:66:36:d8:a4:a8:3d:c4:02:bd:ba:f5:fd:e4: 65:1b:57:8e:7f:9d:97:89:06:01:49:8f:85:e5:92: bd:39:48:86:3a:0c:47:8d:5a:bf:2f:3b:d9:c4:c3: d3:fd:3e:0a:d0:30:86:ea:9f:42:3e:a6:ab:83:fb: 05:2c:9e:3f:59:72:18:d7:85:db:b5:59:5e:49:d3: a5:47:86:ca:b4:64:cf:6d:6b:41:e3:bf:3e:83:cb: 1d:32:4a:a6:4b:8e:58:e1:12:d7:da:b9:bf:a0:9a: 7c:e1:da:a8:fa:c5:51:56:f5:6f:8e:69:7a:52:99: 9e:e7:4a:38:a5:f3:33:83:9a:1b:79:4f:df:88:8b: 8e:98:8b:31:93:ed:b5:5c:11:d9:d9:a1:d0:91:05: c1:6a:87:e4:38:61:2f:13:93:20:42:72:0c:73:e3: 97:9b:d1:73:59:2e:11:4d:bd:2e:91:d2:70:dc:1f: b2:72:08:bf:08:1a:d4:28:26:6c:cc:03:33:aa:0d: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:D5:5D:D8:06:97:FC:13:36:72:CF:35:A9:FD:4F:EB:57:A4:0E X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a343030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:4000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:bd:4a:2d:f9:5f:a3:f1:24:83:b4:d8:ce:3d:0b:f2:25:87: 03:1b:fb:f7:e1:51:cf:de:72:ee:5f:1b:d5:48:80:39:f7:58: f0:10:a9:44:eb:ac:1f:cf:13:0b:25:2e:ed:d0:e1:17:be:66: 96:55:a2:a4:77:5f:6a:8b:20:4a:c9:9b:03:08:ce:82:44:08: 8b:3e:1c:90:3c:2c:f0:3d:e1:d5:4c:10:bf:bd:de:57:67:7a: 10:2b:ff:fc:91:e2:3e:b0:df:1d:d2:8e:3c:9b:f8:30:57:17: 7c:cb:a6:4b:2d:31:1e:0c:a4:e8:46:5e:54:87:ac:af:72:ae: 21:45:8a:74:3c:c0:74:7f:8f:bb:1f:af:9f:2f:09:b6:85:df: f6:9a:8c:59:80:ef:db:54:1b:58:e1:e2:d4:a9:75:6a:46:45: 43:2c:c7:80:76:c4:33:d1:64:34:2c:30:55:57:fe:28:55:1a: 9d:99:35:bb:2d:f5:cc:f6:e9:24:2e:81:82:2d:9c:6e:ce:e1: 3a:63:74:73:66:98:87:c7:64:b7:01:07:5a:17:39:58:89:8e: 24:61:76:ba:ce:a5:cf:ea:1c:a7:78:f3:f5:24:9f:74:be:fa: 5d:13:4b:6c:21:99:2b:48:d7:11:f5:b8:b4:99:d5:e3:64:0b: 2d:1f:52:dd -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTEcP+h7h/kEfW66swrm/2kXIOpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDZaFw0yNjExMDYxNDUwMDZaMDMxMTAvBgNV BAMTKDNFRTBENTVERDgwNjk3RkMxMzM2NzJDRjM1QTlGRDRGRUI1N0E0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKqb1HipIWlR8d/e0DO4qIEDI dC69A9yro06YJC8eMq5EDh/IUY7Bbo9CBlSR+/kZLatRyo0dj5yW9lxNZjbYpKg9 xAK9uvX95GUbV45/nZeJBgFJj4Xlkr05SIY6DEeNWr8vO9nEw9P9PgrQMIbqn0I+ pquD+wUsnj9ZchjXhdu1WV5J06VHhsq0ZM9ta0Hjvz6Dyx0ySqZLjljhEtfaub+g mnzh2qj6xVFW9W+OaXpSmZ7nSjil8zODmht5T9+Ii46YizGT7bVcEdnZodCRBcFq h+Q4YS8TkyBCcgxz45eb0XNZLhFNvS6R0nDcH7JyCL8IGtQoJmzMAzOqDUlZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUPuDVXdgGl/wTNnLPNan9T+tXpA4wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQQDANBgkqhkiG9w0BAQsFAAOCAQEAD71KLflfo/Ekg7TYzj0L8iWH Axv79+FRz95y7l8b1UiAOfdY8BCpROusH88TCyUu7dDhF75mllWipHdfaosgSsmb AwjOgkQIiz4ckDws8D3h1UwQv73eV2d6ECv//JHiPrDfHdKOPJv4MFcXfMumSy0x Hgyk6EZeVIesr3KuIUWKdDzAdH+Pux+vny8JtoXf9pqMWYDv21QbWOHi1Kl1akZF QyzHgHbEM9FkNCwwVVf+KFUanZk1uy31zPbpJC6Bgi2cbs7hOmN0c2aYh8dktwEH Whc5WImOJGF2us6lz+ocp3jz9SSfdL76XRNLbCGZK0jXEfW4tJnV42QLLR9S3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client