This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323732303736.roa
File: 323830333a323331303a363030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier: 1bssIncLNbzkapVPhxD4Tu+sanj74iaCzywb4qy+7UA=
Subject key identifier: 58:6A:29:9F:53:61:15:B3:56:9A:7B:6B:90:1E:2F:3A:5E:05:C8:0C
Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial: 6B2846680953992D7827600E09FAF6995534F046
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323732303736.roa
Signing time: Fri 07 Nov 2025 14:50:10 +0000
ROA not before: Fri 07 Nov 2025 14:45:10 +0000
ROA not after: Fri 06 Nov 2026 14:50:10 +0000
asID: 272076
IP address blocks: 2803:2310:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 11:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:28:46:68:09:53:99:2d:78:27:60:0e:09:fa:f6:99:55:34:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Validity
Not Before: Nov 7 14:45:10 2025 GMT
Not After : Nov 6 14:50:10 2026 GMT
Subject: CN=586A299F536115B3569A7B6B901E2F3A5E05C80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:96:da:8c:4d:8a:07:cb:e0:39:29:a5:53:
fe:1c:35:6e:e7:70:ff:09:c5:d7:24:a8:7d:30:86:
8b:37:3b:c7:b4:02:08:94:1f:c8:2f:23:a5:0e:d8:
a5:8b:f7:e9:97:9e:d7:9b:38:27:d2:2b:88:ec:9e:
cc:df:4a:40:1a:63:df:07:f6:7a:be:b5:bc:8e:71:
2d:b6:07:d4:73:ec:d5:02:a2:85:77:35:1e:63:96:
03:2d:7a:d6:a7:92:28:f3:10:c0:be:c5:2f:3e:3a:
03:dd:54:ac:a4:b8:2c:40:8d:9e:4c:8b:3d:87:49:
c3:c7:1b:71:b2:d8:53:eb:1b:dc:ff:92:9d:36:1e:
7c:b5:c2:b3:5b:b7:91:4e:fc:c8:c4:c4:38:57:77:
19:42:c3:05:ee:6c:29:20:24:5d:3d:91:ec:8b:50:
d6:01:94:36:69:63:41:9c:77:82:41:f4:6b:87:82:
43:ac:22:6a:bb:07:0f:6e:bc:aa:86:d0:00:00:9a:
8f:72:66:2c:f5:9a:40:91:67:1b:b3:a3:de:f3:27:
ab:b4:2b:86:13:af:31:9b:3c:65:6e:17:29:3b:ad:
d4:ff:f5:41:90:f4:81:22:12:09:0b:88:01:e0:37:
b0:34:54:6c:64:2e:a2:2e:62:74:a8:cc:f0:8a:b0:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:29:9F:53:61:15:B3:56:9A:7B:6B:90:1E:2F:3A:5E:05:C8:0C
X509v3 Authority Key Identifier:
keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a363030303a3a2f33362d3336203d3e20323732303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2310:6000::/36
Signature Algorithm: sha256WithRSAEncryption
0d:77:dd:23:12:45:f8:b7:84:7f:50:ec:9d:bb:79:2a:8f:7a:
70:4b:17:f9:95:c2:54:a5:3b:67:f9:ec:75:70:ea:46:0d:d0:
2b:b8:50:e9:83:88:b5:a7:8d:d0:e0:cc:6e:5c:01:19:34:38:
cb:67:aa:be:28:9b:f7:ac:9a:cb:3c:c2:03:4a:24:11:b3:73:
af:b1:86:37:1e:b5:34:a3:e1:d7:a1:06:c6:17:5b:d6:8b:0f:
20:3b:3a:ec:d5:e4:d9:a0:44:57:da:8f:c1:f3:06:2f:64:ed:
76:89:17:ea:18:d3:c9:98:22:27:6c:e3:97:20:fd:8d:6a:8e:
d2:c5:a4:c3:af:c9:79:91:5a:4e:78:4e:ef:9d:23:5f:a6:ba:
a8:8a:06:5a:d6:41:12:d5:14:b9:f9:2c:c1:84:a2:4c:ca:5a:
0d:50:b9:7b:87:bd:c9:1b:d8:fd:e3:15:f7:70:5f:46:91:2a:
63:d9:ca:39:d0:c9:85:e0:7b:7b:ad:fe:18:04:57:f3:78:47:
cc:07:10:cf:76:bc:28:10:60:1e:97:ad:28:14:6d:94:bc:55:
6f:ec:58:f8:37:54:c7:46:cf:b6:27:db:77:b8:b8:ae:b8:42:
64:13:1a:d6:af:72:d4:cb:17:07:11:7b:1e:67:19:65:26:4f:
65:82:11:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:30:53 2025 by rpki-client