This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a383030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a383030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: ju8tR2iLDJg/2BhUft17ON48xyGG95EoE/Zt5XyuL6M= Subject key identifier: 4B:D9:5E:E1:CE:10:16:F7:8E:52:8C:56:22:FA:2B:74:4A:2B:A4:BE Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 01BCAF23827FA248777C2486AA15BBB1775B4C2F Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a383030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:01 +0000 ROA not before: Fri 07 Nov 2025 14:45:01 +0000 ROA not after: Fri 06 Nov 2026 14:50:01 +0000 asID: 267832 IP address blocks: 2803:2310:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bc:af:23:82:7f:a2:48:77:7c:24:86:aa:15:bb:b1:77:5b:4c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:01 2025 GMT Not After : Nov 6 14:50:01 2026 GMT Subject: CN=4BD95EE1CE1016F78E528C5622FA2B744A2BA4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:89:f0:e8:b7:4e:0b:4e:7d:12:b0:4b:26: 3a:d9:3f:db:b0:77:01:87:72:89:84:54:b4:50:4c: a3:5f:fc:a4:2f:11:a3:7e:53:7a:a7:48:1a:01:38: d7:7a:0c:3b:18:51:c0:e4:ae:d8:41:c8:9e:93:e4: 1a:a7:80:c2:34:7b:11:e0:a4:13:2b:54:4f:4b:ad: ce:59:5f:d5:e3:89:68:f8:4c:d8:7f:7f:14:33:e1: 64:8f:cc:58:79:ac:72:7a:27:b0:c9:4b:45:b0:83: 36:ed:c2:07:52:b1:55:3c:8a:69:d4:23:60:ee:32: 5a:81:f8:89:3c:97:ab:b6:24:9f:6a:1c:6e:c0:ae: a6:9d:5f:cd:3f:08:2d:c4:9f:fd:40:44:e1:05:d9: c1:c1:ba:e6:d6:ee:f5:eb:b6:17:ed:89:62:83:92: de:b0:31:78:86:ca:66:e5:50:94:51:dc:b2:61:22: fc:2a:5f:33:57:2d:0d:d0:a3:07:69:69:29:75:92: 4c:76:c9:fc:db:de:91:7d:9c:de:19:75:1b:8c:d7: f7:1f:e4:9c:1f:39:25:47:b5:de:5f:49:c8:84:a3: 4a:43:b9:4e:07:13:b3:ce:1a:89:9c:15:b8:d3:c4: 9d:9e:65:52:31:0d:7b:a0:c1:14:bb:aa:e8:af:83: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:5E:E1:CE:10:16:F7:8E:52:8C:56:22:FA:2B:74:4A:2B:A4:BE X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a383030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:8000::/36 Signature Algorithm: sha256WithRSAEncryption ba:aa:eb:df:57:32:08:3a:38:db:a5:69:01:41:66:06:71:86: ce:e7:b6:ed:96:e9:22:79:f1:df:f0:cc:97:df:8e:d0:0f:52: a2:d2:2d:82:e9:11:2e:b6:c3:e6:c1:ba:51:aa:66:0a:1c:3a: df:79:82:b3:f4:1e:2d:01:54:66:6c:77:5c:eb:5f:03:ec:0b: eb:70:69:46:ed:cd:b6:49:67:8f:05:a6:87:cd:bc:b9:9a:61: 6c:a8:c3:49:57:b0:8f:11:83:9f:43:27:3b:e8:dd:a9:34:12: 45:9a:99:05:47:3c:db:23:e4:df:22:1a:16:61:b1:19:9b:1b: ab:b5:6b:77:ef:60:dd:b5:89:86:63:2f:a7:f5:02:c6:4d:cc: ce:c8:b8:f7:e9:0d:62:51:31:dc:e5:5b:16:da:16:00:73:d2: 88:3a:36:24:00:06:71:0d:1c:83:1a:0b:31:3e:c4:87:00:59: e5:c3:9a:4f:c5:2c:a3:a6:0d:e6:3a:ca:c9:84:ee:10:c0:60: bd:51:f7:df:90:14:20:57:87:77:0a:75:52:b1:6e:b4:d6:6e: 22:e6:6b:9a:f1:17:3e:47:6e:c4:bf:aa:16:fb:4f:a9:8b:a3: c4:0a:5d:b0:23:b4:7c:73:c0:41:11:bd:6a:b0:bd:ac:17:9a: 9e:c3:df:26 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUAbyvI4J/okh3fCSGqhW7sXdbTC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDFaFw0yNjExMDYxNDUwMDFaMDMxMTAvBgNV BAMTKDRCRDk1RUUxQ0UxMDE2Rjc4RTUyOEM1NjIyRkEyQjc0NEEyQkE0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXInw6LdOC059ErBLJjrZP9uw dwGHcomEVLRQTKNf/KQvEaN+U3qnSBoBONd6DDsYUcDkrthByJ6T5BqngMI0exHg pBMrVE9Lrc5ZX9XjiWj4TNh/fxQz4WSPzFh5rHJ6J7DJS0WwgzbtwgdSsVU8imnU I2DuMlqB+Ik8l6u2JJ9qHG7ArqadX80/CC3En/1AROEF2cHBuubW7vXrthftiWKD kt6wMXiGymblUJRR3LJhIvwqXzNXLQ3QowdpaSl1kkx2yfzb3pF9nN4ZdRuM1/cf 5JwfOSVHtd5fSciEo0pDuU4HE7POGomcFbjTxJ2eZVIxDXugwRS7quivg6RpAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUS9le4c4QFveOUoxWIvordEorpL4wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzgz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQgDANBgkqhkiG9w0BAQsFAAOCAQEAuqrr31cyCDo426VpAUFmBnGG zue27ZbpInnx3/DMl9+O0A9SotItgukRLrbD5sG6UapmChw633mCs/QeLQFUZmx3 XOtfA+wL63BpRu3NtklnjwWmh828uZphbKjDSVewjxGDn0MnO+jdqTQSRZqZBUc8 2yPk3yIaFmGxGZsbq7Vrd+9g3bWJhmMvp/UCxk3Mzsi49+kNYlEx3OVbFtoWAHPS iDo2JAAGcQ0cgxoLMT7EhwBZ5cOaT8Uso6YN5jrKyYTuEMBgvVH335AUIFeHdwp1 UrFutNZuIuZrmvEXPkduxL+qFvtPqYujxApdsCO0fHPAQRG9arC9rBeansPfJg== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:41 2025 by rpki-client