This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a393030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: 6KsPA3Obb2UIcnhiCP01jPfkGjbdHja16e2vJy5LXkg= Subject key identifier: E3:51:73:47:BF:99:91:46:29:AF:F5:67:80:49:11:E2:16:17:1F:38 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 21DA12A3777172543E89FCCEEBFB6F8C099F9701 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:01 +0000 ROA not before: Fri 07 Nov 2025 14:45:01 +0000 ROA not after: Fri 06 Nov 2026 14:50:01 +0000 asID: 267832 IP address blocks: 2803:2310:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:da:12:a3:77:71:72:54:3e:89:fc:ce:eb:fb:6f:8c:09:9f:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:01 2025 GMT Not After : Nov 6 14:50:01 2026 GMT Subject: CN=E3517347BF99914629AFF567804911E216171F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:7e:d9:75:ba:e8:b3:26:cf:f4:fa:ef:55: f1:d2:04:1e:5c:a7:61:c4:97:c8:51:56:c3:7b:33: 27:f7:05:32:1d:1c:5b:3b:3c:1c:43:f3:ba:3b:1f: 14:82:1f:fc:3f:99:a6:40:a3:22:f6:6a:96:ae:36: 9b:e7:6b:ee:a6:59:0c:45:77:32:11:60:29:6d:3f: 7f:5a:dd:ef:e9:18:24:21:f7:71:fa:e9:01:92:56: 3a:e6:ff:0a:b8:4a:28:e0:18:27:01:9a:59:80:f7: 04:00:f8:25:d1:2f:05:0d:80:1a:b7:c5:81:7d:f4: 28:d9:8d:ae:1e:55:51:f5:b4:81:8b:d3:d7:c1:a0: d0:f8:cb:fc:5c:2e:e8:63:1a:eb:06:d2:e6:00:19: f2:20:0a:5d:d7:fb:9b:b9:24:84:af:34:a8:3c:57: 8e:66:aa:19:68:4c:43:73:83:63:49:2a:39:85:fc: 2f:5d:a1:49:f0:71:98:b6:c3:81:30:ec:86:8c:0c: e1:b4:80:2a:7e:da:af:9e:39:77:77:04:dc:4d:cb: 5b:68:98:5f:08:b0:5b:42:19:02:25:6a:c0:ef:28: 80:bf:cf:3d:17:cd:2a:5e:ea:4e:ff:bf:a2:4f:83: e2:08:9d:2a:d2:f0:51:d9:4e:37:66:7c:14:d2:cc: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:73:47:BF:99:91:46:29:AF:F5:67:80:49:11:E2:16:17:1F:38 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:9000::/36 Signature Algorithm: sha256WithRSAEncryption c2:fb:87:8f:14:65:1a:c8:e5:15:90:9f:11:b0:0d:40:88:5c: 5f:4e:70:5a:64:66:f3:d8:4d:d8:63:41:4a:a5:d8:ff:1f:41: 79:b3:97:75:a5:5b:46:1f:ea:9a:c1:d5:4b:2b:8f:84:f5:49: ba:c6:aa:b6:b4:8a:e8:08:7e:d4:ca:55:c3:9b:b9:eb:89:bc: 7c:88:c8:78:7f:5f:b9:4c:1d:ac:3c:f8:ac:0f:a6:fd:3f:e0: 6e:f7:04:f9:6e:41:60:37:38:c0:d1:3d:c0:53:87:48:6a:23: b4:34:82:58:95:47:60:40:8d:52:ac:bb:f9:45:f4:f9:0b:82: f6:e2:f2:84:cf:fc:ba:af:62:1f:aa:5a:14:38:48:08:71:83: c7:9e:ea:46:c6:3a:08:12:fe:dc:f9:e6:ba:4e:b8:f2:46:f0: a2:ec:55:7d:0c:6f:ef:7e:6b:5b:fd:b5:58:c5:1c:34:83:54: 1f:cc:61:3f:69:0a:11:3c:ff:1c:a9:f6:02:dc:07:90:2b:68: 7a:c8:a5:82:5e:d5:b1:cb:6f:bf:c8:74:34:c6:71:57:ad:65: f3:20:a3:ba:49:f1:bd:36:ce:e1:71:99:05:62:63:b6:d5:ab: aa:69:a0:f5:4d:a8:1e:8d:8b:1c:dc:d5:6c:17:2d:91:6c:e3: f1:9a:32:9f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUIdoSo3dxclQ+ifzO6/tvjAmflwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDFaFw0yNjExMDYxNDUwMDFaMDMxMTAvBgNV BAMTKEUzNTE3MzQ3QkY5OTkxNDYyOUFGRjU2NzgwNDkxMUUyMTYxNzFGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kn7ZdbrosybP9PrvVfHSBB5c p2HEl8hRVsN7Myf3BTIdHFs7PBxD87o7HxSCH/w/maZAoyL2apauNpvna+6mWQxF dzIRYCltP39a3e/pGCQh93H66QGSVjrm/wq4SijgGCcBmlmA9wQA+CXRLwUNgBq3 xYF99CjZja4eVVH1tIGL09fBoND4y/xcLuhjGusG0uYAGfIgCl3X+5u5JISvNKg8 V45mqhloTENzg2NJKjmF/C9doUnwcZi2w4Ew7IaMDOG0gCp+2q+eOXd3BNxNy1to mF8IsFtCGQIlasDvKIC/zz0XzSpe6k7/v6JPg+IInSrS8FHZTjdmfBTSzEJPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU41FzR7+ZkUYpr/VngEkR4hYXHzgwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzkz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQkDANBgkqhkiG9w0BAQsFAAOCAQEAwvuHjxRlGsjlFZCfEbANQIhc X05wWmRm89hN2GNBSqXY/x9BebOXdaVbRh/qmsHVSyuPhPVJusaqtrSK6Ah+1MpV w5u564m8fIjIeH9fuUwdrDz4rA+m/T/gbvcE+W5BYDc4wNE9wFOHSGojtDSCWJVH YECNUqy7+UX0+QuC9uLyhM/8uq9iH6paFDhICHGDx57qRsY6CBL+3Pnmuk648kbw ouxVfQxv735rW/21WMUcNINUH8xhP2kKETz/HKn2AtwHkCtoesilgl7Vsctvv8h0 NMZxV61l8yCjuknxvTbO4XGZBWJjttWrqmmg9U2oHo2LHNzVbBctkWzj8Zoynw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:42 2025 by rpki-client