This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a393030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: EMDfojDfsoUMj99BCy9/j6+XgXhVRctrPN4H6aASgkI= Subject key identifier: A4:0E:73:19:DC:D3:16:9F:56:AB:C7:13:87:94:CE:93:34:A5:C9:8E Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 5518FEA43E2F7A22A3749F289EE4F900F58226C8 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:13 +0000 ROA not before: Fri 07 Nov 2025 14:45:13 +0000 ROA not after: Fri 06 Nov 2026 14:50:13 +0000 asID: 272076 IP address blocks: 2803:2310:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:18:fe:a4:3e:2f:7a:22:a3:74:9f:28:9e:e4:f9:00:f5:82:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:13 2025 GMT Not After : Nov 6 14:50:13 2026 GMT Subject: CN=A40E7319DCD3169F56ABC7138794CE9334A5C98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:c3:57:15:08:77:37:d1:10:ae:a7:2d:58: 41:b6:e0:61:6a:b6:79:4f:b9:ad:3f:0b:b5:81:a4: 24:9a:3a:f3:65:93:77:47:ff:a3:f4:64:68:39:b8: 55:86:79:7e:94:00:a5:74:3c:25:ef:5f:b4:bb:2d: 26:52:0b:54:29:44:a1:24:f2:b2:e6:6e:d9:4a:50: 0e:7d:64:63:ab:c2:c4:59:00:3b:23:93:d6:cb:a9: f6:c1:63:4f:1a:c9:80:5a:dd:c0:9f:b7:f8:28:1a: 78:be:50:cc:86:1e:6c:c5:6b:2e:c6:0d:04:6c:78: 7b:10:d2:cc:ae:49:02:37:38:2f:46:03:b3:86:f7: a8:be:d9:14:b2:bc:b7:29:10:41:57:6c:39:99:c1: 8b:c5:79:f2:10:18:40:14:8d:e2:46:1a:37:87:89: ab:11:21:41:c9:36:64:4c:fa:c6:4c:4d:a0:a6:26: 3c:dd:fe:e5:72:19:52:35:73:a8:25:ba:45:4d:07: bd:a4:3a:c0:a5:1a:9e:cc:0f:f9:42:64:17:16:be: 4c:52:ed:73:ea:4b:db:3d:d5:59:62:cd:49:ed:d3: 28:9f:34:e0:74:cf:eb:b1:65:e3:8f:79:f8:b1:f9: 89:ed:3c:07:c6:06:c7:3b:3d:37:52:51:36:00:8d: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:73:19:DC:D3:16:9F:56:AB:C7:13:87:94:CE:93:34:A5:C9:8E X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a393030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:9000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:3e:a7:81:5d:30:ae:96:9d:e9:8e:76:a0:52:e0:06:79:59: 4e:94:ff:72:a1:97:63:2a:78:75:35:78:77:53:bb:22:6a:d6: fb:95:04:69:c0:c2:e6:4e:9a:7c:0e:a3:f0:ec:1d:ce:d0:78: 11:39:f9:30:03:b7:0f:af:20:9d:96:98:70:a5:c2:48:d7:c3: 1d:ac:7d:c7:d6:28:c5:10:a0:47:1a:63:a9:bd:a2:54:bb:6f: ac:f1:4f:4d:c4:07:2d:5d:e8:46:92:99:a7:54:0a:77:d7:88: 24:4a:8b:18:78:44:f5:0d:6c:e7:7a:de:db:08:fd:cb:90:a9: 7e:54:69:03:c0:2e:aa:36:7f:43:e2:da:ac:fc:5a:91:cf:12: 57:9d:af:a7:f3:bf:38:f2:56:e4:fe:ad:4a:33:93:19:e7:04: b3:11:13:24:9a:94:d8:20:da:74:cd:cc:86:c4:5c:fc:27:62: 4f:ba:40:98:58:e1:d7:ad:ed:53:6e:98:9e:76:dc:03:15:78: e4:4a:a8:36:d6:f5:08:8c:5f:e1:6f:d4:96:d5:39:c0:01:01: 9e:f0:18:e7:ca:df:8d:3a:8b:f9:aa:83:18:e7:74:b6:d5:49: d4:9c:0a:6d:54:7b:04:34:23:ec:8b:53:89:80:2a:7e:9b:37: b9:45:3a:1c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUVRj+pD4veiKjdJ8onuT5APWCJsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTNaFw0yNjExMDYxNDUwMTNaMDMxMTAvBgNV BAMTKEE0MEU3MzE5RENEMzE2OUY1NkFCQzcxMzg3OTRDRTkzMzRBNUM5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrcNXFQh3N9EQrqctWEG24GFq tnlPua0/C7WBpCSaOvNlk3dH/6P0ZGg5uFWGeX6UAKV0PCXvX7S7LSZSC1QpRKEk 8rLmbtlKUA59ZGOrwsRZADsjk9bLqfbBY08ayYBa3cCft/goGni+UMyGHmzFay7G DQRseHsQ0syuSQI3OC9GA7OG96i+2RSyvLcpEEFXbDmZwYvFefIQGEAUjeJGGjeH iasRIUHJNmRM+sZMTaCmJjzd/uVyGVI1c6glukVNB72kOsClGp7MD/lCZBcWvkxS 7XPqS9s91VlizUnt0yifNOB0z+uxZeOPefix+YntPAfGBsc7PTdSUTYAjc8vAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUpA5zGdzTFp9Wq8cTh5TOkzSlyY4wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhMzkz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQkDANBgkqhkiG9w0BAQsFAAOCAQEAKz6ngV0wrpad6Y52oFLgBnlZ TpT/cqGXYyp4dTV4d1O7ImrW+5UEacDC5k6afA6j8OwdztB4ETn5MAO3D68gnZaY cKXCSNfDHax9x9YoxRCgRxpjqb2iVLtvrPFPTcQHLV3oRpKZp1QKd9eIJEqLGHhE 9Q1s53re2wj9y5CpflRpA8AuqjZ/Q+LarPxakc8SV52vp/O/OPJW5P6tSjOTGecE sxETJJqU2CDadM3MhsRc/CdiT7pAmFjh163tU26YnnbcAxV45EqoNtb1CIxf4W/U ltU5wAEBnvAY58rfjTqL+aqDGOd0ttVJ1JwKbVR7BDQj7ItTiYAqfps3uUU6HA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client