This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a623030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: 8VtUmyRVsyGXC82lUH0yVib1wopUS4mSdnGX6DtegCw= Subject key identifier: BC:38:75:BD:5F:4F:34:0E:19:8B:83:41:9C:B1:3C:CC:8A:3B:D1:57 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 528A4B300B0DF886656D06C6E85E75B7EF92CF1E Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:03 +0000 ROA not before: Fri 07 Nov 2025 14:45:03 +0000 ROA not after: Fri 06 Nov 2026 14:50:03 +0000 asID: 267832 IP address blocks: 2803:2310:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8a:4b:30:0b:0d:f8:86:65:6d:06:c6:e8:5e:75:b7:ef:92:cf:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:03 2025 GMT Not After : Nov 6 14:50:03 2026 GMT Subject: CN=BC3875BD5F4F340E198B83419CB13CCC8A3BD157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:ed:d3:74:71:2d:08:a9:72:35:94:88:2a: 15:3f:74:56:ce:0d:40:6b:43:be:57:d3:9f:5d:f5: 11:c0:21:e0:8a:14:bc:ba:77:e5:83:87:c5:8a:06: 97:f7:9a:41:34:05:86:c3:ed:d3:69:fb:c7:5d:84: db:bb:e6:d6:db:eb:df:1e:11:77:86:7c:7f:69:43: e6:55:32:12:c8:5f:30:ed:50:0f:dd:77:aa:f3:8e: 82:07:d1:da:ef:bc:a0:04:eb:81:66:d6:68:c4:52: 1d:93:13:36:5d:50:9d:fe:ec:41:07:1f:f7:dd:78: 82:63:a8:4c:cc:53:3c:d1:58:7e:2e:25:5c:b3:4d: 1b:9e:d5:af:f6:59:ac:02:bd:6e:20:43:c3:d0:92: 09:e1:19:2e:9d:c9:52:08:54:3e:34:68:ad:2a:2d: fd:65:e4:a9:b1:d1:ad:41:9f:89:26:c4:f8:85:57: e1:4d:16:f3:b6:87:43:86:d4:78:02:27:b2:c9:06: 75:44:e7:33:3b:12:e7:a9:35:58:ef:15:34:0a:ee: 2e:41:98:88:ea:93:f2:64:25:f8:b5:ac:6d:f1:26: 90:80:97:96:e9:2f:c0:9a:49:59:d7:6c:da:dc:41: ce:cb:b6:ce:77:87:0a:fe:4e:de:61:29:d2:11:74: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:38:75:BD:5F:4F:34:0E:19:8B:83:41:9C:B1:3C:CC:8A:3B:D1:57 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:b000::/36 Signature Algorithm: sha256WithRSAEncryption c7:35:b4:6a:a1:77:5d:ee:57:9e:70:c2:5c:ec:13:28:fd:94: a7:0e:b3:20:17:ff:6b:c0:53:7a:08:6d:bc:89:c4:6b:fc:78: 51:a7:66:5c:b6:cd:7a:3d:ef:16:9c:63:91:d6:c8:10:89:91: 1f:ce:22:0f:9c:16:33:b7:af:d0:83:18:5e:d0:ae:7c:c9:91: 5d:51:76:78:06:c3:77:a7:3c:e7:7d:36:50:9f:55:f3:dd:ce: a6:91:aa:65:fe:e1:44:99:61:cb:75:2f:7a:89:55:24:04:95: 00:5d:c4:71:98:38:8b:b2:0e:45:8a:44:d6:54:2d:c8:80:13: 63:f9:8c:30:4b:6e:7f:c0:bb:a3:fd:8f:4b:d6:dd:51:06:03: f2:27:e6:fe:5b:69:91:b8:68:a4:6f:eb:1c:3f:e9:95:68:a5: eb:59:96:01:2e:9d:b6:df:fa:95:45:8f:00:df:a5:80:7b:ae: 84:05:d0:2e:04:68:5a:1e:4a:42:ba:ed:5d:25:a8:43:f1:08: 18:b7:fb:91:10:57:08:8f:52:0c:4d:2b:06:a8:83:d4:cc:fd: c6:e0:df:d0:56:d0:7e:d6:9c:95:23:83:b3:01:3c:4e:27:58: 2a:6f:e9:02:ff:50:23:7d:64:9d:ec:a3:78:c1:8f:18:0f:19: 46:e4:85:45 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUUopLMAsN+IZlbQbG6F51t++Szx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDNaFw0yNjExMDYxNDUwMDNaMDMxMTAvBgNV BAMTKEJDMzg3NUJENUY0RjM0MEUxOThCODM0MTlDQjEzQ0NDOEEzQkQxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4u3TdHEtCKlyNZSIKhU/dFbO DUBrQ75X059d9RHAIeCKFLy6d+WDh8WKBpf3mkE0BYbD7dNp+8ddhNu75tbb698e EXeGfH9pQ+ZVMhLIXzDtUA/dd6rzjoIH0drvvKAE64Fm1mjEUh2TEzZdUJ3+7EEH H/fdeIJjqEzMUzzRWH4uJVyzTRue1a/2WawCvW4gQ8PQkgnhGS6dyVIIVD40aK0q Lf1l5Kmx0a1Bn4kmxPiFV+FNFvO2h0OG1HgCJ7LJBnVE5zM7EuepNVjvFTQK7i5B mIjqk/JkJfi1rG3xJpCAl5bpL8CaSVnXbNrcQc7Lts53hwr+Tt5hKdIRdNxRAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUvDh1vV9PNA4Zi4NBnLE8zIo70VcwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQsDANBgkqhkiG9w0BAQsFAAOCAQEAxzW0aqF3Xe5XnnDCXOwTKP2U pw6zIBf/a8BTeghtvInEa/x4UadmXLbNej3vFpxjkdbIEImRH84iD5wWM7ev0IMY XtCufMmRXVF2eAbDd6c85302UJ9V893OppGqZf7hRJlhy3UveolVJASVAF3EcZg4 i7IORYpE1lQtyIATY/mMMEtuf8C7o/2PS9bdUQYD8ifm/ltpkbhopG/rHD/plWil 61mWAS6dtt/6lUWPAN+lgHuuhAXQLgRoWh5KQrrtXSWoQ/EIGLf7kRBXCI9SDE0r BqiD1Mz9xuDf0FbQftaclSODswE8TidYKm/pAv9QI31kneyjeMGPGA8ZRuSFRQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:42 2025 by rpki-client