This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a363030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: l1sdSOw8JK+i2HtSsERwdmwvnDGlUCvOhybV54UTOOw= Subject key identifier: 4F:E7:B9:0D:EB:DC:61:38:DC:5E:D1:D3:15:EF:8A:24:35:80:2A:18 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 4CBD894BEA304E368F9FF116BF95B83695ADA792 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:14 +0000 ROA not before: Fri 07 Nov 2025 14:45:14 +0000 ROA not after: Fri 06 Nov 2026 14:50:14 +0000 asID: 267832 IP address blocks: 2803:2310:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bd:89:4b:ea:30:4e:36:8f:9f:f1:16:bf:95:b8:36:95:ad:a7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:14 2025 GMT Not After : Nov 6 14:50:14 2026 GMT Subject: CN=4FE7B90DEBDC6138DC5ED1D315EF8A2435802A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:b5:be:66:c7:5a:1f:07:60:82:2e:f0:e4: fb:63:9f:06:a0:ec:4c:94:44:ee:81:65:ec:1c:c4: 8e:2e:fd:36:2b:56:0b:79:94:ee:be:40:08:9c:c5: 2c:0e:51:04:bc:22:e6:99:cf:7d:78:14:4b:91:9d: fa:58:4e:85:2e:47:87:c2:f5:c5:84:d1:2f:83:34: cd:3a:22:ed:3a:0a:b7:18:b5:90:86:4b:4e:90:4e: 5c:31:45:ea:f8:75:ca:4e:bc:8d:9f:5b:e4:f6:1d: 39:a4:a0:b1:e4:eb:57:3f:5c:f6:e9:a9:96:dc:35: e7:ab:d5:c2:c3:4a:96:75:8e:2b:f1:e5:a2:55:76: 46:e9:6e:d0:ff:b5:99:4f:65:dd:c2:0d:e2:fd:8f: 69:97:92:92:a7:f8:e1:69:0d:62:39:00:ba:d0:17: 0d:a7:f8:d1:74:e2:46:df:97:f0:2b:bc:de:84:2c: c5:47:c5:9d:f5:47:83:21:a8:e6:0f:27:99:62:fc: 0e:7f:47:2e:d1:ff:52:61:74:44:e1:e6:96:b2:12: 5a:81:40:45:73:dd:ad:e3:e0:67:ac:a7:72:16:02: e5:fa:6f:01:ea:04:4a:cd:88:14:8a:c8:55:ae:9e: 9b:fd:28:98:24:cf:25:27:4d:b6:02:4a:a0:a5:75: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E7:B9:0D:EB:DC:61:38:DC:5E:D1:D3:15:EF:8A:24:35:80:2A:18 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:6000::/36 Signature Algorithm: sha256WithRSAEncryption a1:1d:a9:11:91:34:91:60:8c:51:b9:bb:0d:35:a8:f5:dd:26: 24:57:57:f7:74:8a:cf:ab:b5:2e:ee:f8:99:e7:63:38:44:89: 97:d6:cd:f4:2c:8c:53:8f:c4:51:f7:1a:99:53:65:f4:7f:11: 20:39:7a:60:b0:b7:cb:0e:7f:19:6c:87:d7:2f:5c:ed:16:d0: 2e:70:64:38:ed:fa:52:e2:05:b2:23:c4:dc:6f:72:0e:4e:9b: 76:4d:be:77:89:a3:7e:c4:95:46:07:d8:ad:ad:f8:bb:a8:8b: e5:62:a9:c0:3e:91:cc:0d:b8:ca:68:f6:74:e4:a5:c4:cb:df: a1:f8:6c:7f:b1:f9:c0:86:9d:f7:8a:e4:fa:7c:bf:28:52:20: 3b:f6:de:ac:58:c5:c0:7b:d4:77:f5:70:55:e7:58:5b:6e:1d: 90:5c:3c:69:30:cf:c2:74:a8:5a:fb:d3:1b:84:66:82:cc:fc: 87:5b:31:01:8c:76:92:dd:fd:11:ad:d0:44:c8:05:e6:2b:cc: 57:37:89:bd:0d:34:28:d3:ab:4f:3d:b5:15:08:2e:18:49:77: 29:66:f9:07:39:2f:f1:37:5c:a0:89:3f:1a:08:f5:1e:20:7c: 78:00:c0:21:4f:c4:ef:78:0b:31:2c:e5:83:b1:99:58:41:f2: 39:3c:ff:bb -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUTL2JS+owTjaPn/EWv5W4NpWtp5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTRaFw0yNjExMDYxNDUwMTRaMDMxMTAvBgNV BAMTKDRGRTdCOTBERUJEQzYxMzhEQzVFRDFEMzE1RUY4QTI0MzU4MDJBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYrW+ZsdaHwdggi7w5Ptjnwag 7EyURO6BZewcxI4u/TYrVgt5lO6+QAicxSwOUQS8IuaZz314FEuRnfpYToUuR4fC 9cWE0S+DNM06Iu06CrcYtZCGS06QTlwxRer4dcpOvI2fW+T2HTmkoLHk61c/XPbp qZbcNeer1cLDSpZ1jivx5aJVdkbpbtD/tZlPZd3CDeL9j2mXkpKn+OFpDWI5ALrQ Fw2n+NF04kbfl/ArvN6ELMVHxZ31R4MhqOYPJ5li/A5/Ry7R/1JhdETh5payElqB QEVz3a3j4Gesp3IWAuX6bwHqBErNiBSKyFWunpv9KJgkzyUnTbYCSqCldQuvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUT+e5DevcYTjcXtHTFe+KJDWAKhgwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQYDANBgkqhkiG9w0BAQsFAAOCAQEAoR2pEZE0kWCMUbm7DTWo9d0m JFdX93SKz6u1Lu74medjOESJl9bN9CyMU4/EUfcamVNl9H8RIDl6YLC3yw5/GWyH 1y9c7RbQLnBkOO36UuIFsiPE3G9yDk6bdk2+d4mjfsSVRgfYra34u6iL5WKpwD6R zA24ymj2dOSlxMvfofhsf7H5wIad94rk+ny/KFIgO/berFjFwHvUd/VwVedYW24d kFw8aTDPwnSoWvvTG4Rmgsz8h1sxAYx2kt39Ea3QRMgF5ivMVzeJvQ00KNOrTz21 FQguGEl3KWb5Bzkv8TdcoIk/Ggj1HiB8eADAIU/E73gLMSzlg7GZWEHyOTz/uw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client