This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: HXh+aO5P0MdpAQNFrDqpc8tRM9kiV/IsWfyVA+qIR8E= Subject key identifier: 97:F6:CD:57:1B:FC:C3:59:D5:DA:1D:37:BA:46:3C:74:34:FC:FE:91 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 2FC2F8D9BB63ECF8D68F48BFADA165233282461D Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:00 +0000 ROA not before: Fri 07 Nov 2025 14:45:00 +0000 ROA not after: Fri 06 Nov 2026 14:50:00 +0000 asID: 272076 IP address blocks: 2803:2310:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c2:f8:d9:bb:63:ec:f8:d6:8f:48:bf:ad:a1:65:23:32:82:46:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:00 2025 GMT Not After : Nov 6 14:50:00 2026 GMT Subject: CN=97F6CD571BFCC359D5DA1D37BA463C7434FCFE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:e8:f4:77:37:4f:b2:00:be:ea:b7:f9:7f: 0b:7b:c7:0a:8b:7a:10:2a:ce:0f:42:fb:2c:12:6a: 0a:36:9e:5d:8f:36:7e:61:1f:99:33:54:39:bf:6d: 62:45:28:d6:68:f8:f8:a2:a4:74:48:e1:a1:08:d6: 56:94:41:b8:27:0d:2b:37:9b:ac:08:a0:f7:b9:1b: 62:56:ba:c6:4f:19:9a:1b:76:4a:8d:a2:80:c5:bb: ba:75:6d:02:fa:e1:69:ff:d2:87:53:3c:4d:81:57: 30:f8:5b:39:52:b1:62:88:b4:5d:7a:00:fe:ac:42: 7a:52:5a:07:33:1c:fd:af:f7:28:30:27:cf:4a:eb: d6:99:d6:24:77:6e:88:47:cc:d1:e6:b4:00:58:90: 05:3f:38:f5:b0:0d:21:e2:d9:0a:db:9e:be:4b:bd: 54:6d:79:a0:41:84:63:9e:38:f2:b3:b8:a1:b2:41: dd:0d:20:4e:2d:69:ff:17:c5:29:4b:72:73:f8:e6: 04:6a:59:19:6e:c7:07:f1:0d:b0:e9:ae:49:f0:ec: 70:72:a5:4f:f8:33:09:e9:44:c0:dc:4d:1d:25:bd: 3a:f9:6e:f2:07:ff:0b:77:77:a3:49:e8:b1:15:22: c8:df:2a:be:a4:c8:ba:90:7c:5c:1f:bd:3c:a2:86: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:CD:57:1B:FC:C3:59:D5:DA:1D:37:BA:46:3C:74:34:FC:FE:91 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a353030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:5000::/36 Signature Algorithm: sha256WithRSAEncryption bd:2b:1a:0a:b5:52:e0:f5:ec:f3:a1:65:20:5b:d9:e2:aa:e3: 47:e4:e7:b9:e5:87:22:4b:76:e5:8d:43:ac:55:70:83:53:7c: 22:c0:31:4e:9d:34:33:92:b2:31:b5:0e:d0:59:42:ee:aa:69: ad:21:c9:13:0a:2c:ac:f2:99:7b:15:09:4c:c0:08:b4:f5:b7: ba:fa:54:be:9f:ea:b9:13:75:8d:a1:a5:80:76:0f:5d:21:6f: 02:66:3b:3a:53:e7:0d:e5:42:83:96:7c:2e:7b:c2:51:63:3f: 4f:ac:d9:9e:19:99:ff:29:75:35:3b:fc:2b:15:86:e7:09:1c: b3:f1:77:e1:3b:ca:db:db:ee:9b:7a:a4:8d:38:0b:f8:69:56: f9:94:1a:fd:ce:e5:fc:ae:d8:f0:bf:49:4f:a8:85:18:70:01: e3:2d:7b:20:23:4e:85:43:2c:21:66:bc:64:c0:8b:b0:ca:dc: 53:13:0e:12:6d:41:94:73:97:f7:91:63:bb:c8:68:59:4f:4e: 40:b2:fc:43:da:ca:1b:bf:a5:5d:89:b4:97:8f:5e:9d:5d:7f: 10:0f:1f:b5:5b:b4:bc:23:24:5e:e0:9d:94:98:90:84:1d:3d: dd:39:04:8b:6e:41:ca:b1:bf:48:78:2e:07:85:83:c4:19:d9: 48:1f:64:d5 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUL8L42btj7PjWj0i/raFlIzKCRh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDBaFw0yNjExMDYxNDUwMDBaMDMxMTAvBgNV BAMTKDk3RjZDRDU3MUJGQ0MzNTlENURBMUQzN0JBNDYzQzc0MzRGQ0ZFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9guj0dzdPsgC+6rf5fwt7xwqL ehAqzg9C+ywSago2nl2PNn5hH5kzVDm/bWJFKNZo+PiipHRI4aEI1laUQbgnDSs3 m6wIoPe5G2JWusZPGZobdkqNooDFu7p1bQL64Wn/0odTPE2BVzD4WzlSsWKItF16 AP6sQnpSWgczHP2v9ygwJ89K69aZ1iR3bohHzNHmtABYkAU/OPWwDSHi2Qrbnr5L vVRteaBBhGOeOPKzuKGyQd0NIE4taf8XxSlLcnP45gRqWRluxwfxDbDprknw7HBy pU/4MwnpRMDcTR0lvTr5bvIH/wt3d6NJ6LEVIsjfKr6kyLqQfFwfvTyihsBFAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUl/bNVxv8w1nV2h03ukY8dDT8/pEwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQUDANBgkqhkiG9w0BAQsFAAOCAQEAvSsaCrVS4PXs86FlIFvZ4qrj R+TnueWHIkt25Y1DrFVwg1N8IsAxTp00M5KyMbUO0FlC7qpprSHJEwosrPKZexUJ TMAItPW3uvpUvp/quRN1jaGlgHYPXSFvAmY7OlPnDeVCg5Z8LnvCUWM/T6zZnhmZ /yl1NTv8KxWG5wkcs/F34TvK29vum3qkjTgL+GlW+ZQa/c7l/K7Y8L9JT6iFGHAB 4y17ICNOhUMsIWa8ZMCLsMrcUxMOEm1BlHOX95Fju8hoWU9OQLL8Q9rKG7+lXYm0 l49enV1/EA8ftVu0vCMkXuCdlJiQhB093TkEi25ByrG/SHguB4WDxBnZSB9k1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:43 2025 by rpki-client