This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a623030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: XCFx/O07rFJoXpXjjQ+Ckhlj9eRcbw3NsodRiOtkQcg= Subject key identifier: F4:C0:2C:23:99:9B:46:1F:27:2F:F9:A3:27:05:23:12:38:79:74:F1 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 71B3C6D9845815952DA08FE00A6AC42636D72179 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:13 +0000 ROA not before: Fri 07 Nov 2025 14:45:13 +0000 ROA not after: Fri 06 Nov 2026 14:50:13 +0000 asID: 272076 IP address blocks: 2803:2310:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b3:c6:d9:84:58:15:95:2d:a0:8f:e0:0a:6a:c4:26:36:d7:21:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:13 2025 GMT Not After : Nov 6 14:50:13 2026 GMT Subject: CN=F4C02C23999B461F272FF9A327052312387974F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:b1:9c:50:34:72:de:db:aa:ef:d7:e8:47: 2a:32:e1:05:5b:fe:3e:14:16:70:4c:60:c3:5e:ba: 2c:2b:7d:ac:49:ac:f1:87:7b:fd:8e:72:4e:a1:f6: b7:94:33:27:65:84:c2:95:83:f2:30:2b:62:6d:fa: 1b:9d:c4:58:3c:eb:1d:ba:4c:ba:4d:e4:bd:54:68: 8c:a7:fb:11:f3:83:43:ce:0e:3e:35:cd:4a:6e:fe: 38:b8:88:ec:7a:e1:2f:d4:49:28:fb:3d:2b:7f:3d: f8:5a:3d:80:35:39:3e:de:d2:e1:bf:43:69:05:9a: f7:5b:ad:ed:6e:c8:01:fa:e8:87:9f:41:5e:97:a3: d8:26:fc:17:7e:39:7a:38:c6:7e:6c:3a:8e:16:f5: 69:6f:f3:75:24:47:6f:78:1e:d6:7a:2f:db:c1:99: 95:b5:af:a2:f0:c2:7c:23:77:d6:b2:fa:12:b1:4c: 0e:f1:cb:13:bf:bb:0b:68:48:c1:f6:8d:0b:d9:d1: 83:1b:84:b9:b1:03:2a:85:33:d9:03:4d:56:e9:93: 44:7b:4a:60:59:06:cc:e1:47:b1:ce:45:5c:90:a9: 64:fa:51:4a:a5:56:27:8d:9b:99:88:c1:1c:ad:99: 6a:03:dd:89:3a:2d:f3:19:eb:b8:c3:fe:7d:f8:60: b9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:2C:23:99:9B:46:1F:27:2F:F9:A3:27:05:23:12:38:79:74:F1 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a623030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:b000::/36 Signature Algorithm: sha256WithRSAEncryption 99:ba:59:15:56:47:30:e5:88:6b:9e:5c:7c:7e:bf:67:d8:21: 24:40:1d:2e:88:50:ab:c6:5c:79:6f:63:69:57:a5:5d:51:d4: 92:85:9a:72:e7:15:4b:65:4f:07:c1:d0:b4:8e:a3:63:c3:b6: 3f:27:24:a5:0f:58:40:21:8a:a8:f2:05:10:af:87:a7:58:bd: c9:81:5c:41:46:c8:ff:6f:3c:45:0d:e8:91:4b:51:f9:b4:2a: de:3b:31:59:88:03:a2:da:c7:76:35:0d:85:0b:0d:d3:19:62: b1:72:79:47:43:db:bc:2b:e9:96:cf:6a:19:4b:7f:b1:b3:a1: fd:06:06:01:71:b7:32:31:2f:67:bd:33:e6:a1:af:b1:5f:b3: 4f:c3:ce:31:d5:86:68:5a:0c:23:d8:bc:0f:c0:ac:26:8f:52: 9a:c4:78:59:d7:b0:37:5b:02:b5:6a:8c:c2:74:07:17:f2:7f: 85:ec:bb:68:b1:c4:7f:ae:84:62:ff:48:d1:05:5a:f7:fe:6a: ec:96:5f:e5:17:79:61:45:0e:55:af:65:75:d4:33:20:3e:ed: 9a:d2:fb:42:0d:db:ae:6c:1a:da:20:cb:4e:2f:f0:b1:06:17: f3:c9:b1:f6:46:93:bb:9a:bf:7c:75:7c:b7:fa:63:34:a2:c9: 2e:b3:be:93 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUcbPG2YRYFZUtoI/gCmrEJjbXIXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTNaFw0yNjExMDYxNDUwMTNaMDMxMTAvBgNV BAMTKEY0QzAyQzIzOTk5QjQ2MUYyNzJGRjlBMzI3MDUyMzEyMzg3OTc0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCLGcUDRy3tuq79foRyoy4QVb /j4UFnBMYMNeuiwrfaxJrPGHe/2Ock6h9reUMydlhMKVg/IwK2Jt+hudxFg86x26 TLpN5L1UaIyn+xHzg0PODj41zUpu/ji4iOx64S/USSj7PSt/PfhaPYA1OT7e0uG/ Q2kFmvdbre1uyAH66IefQV6Xo9gm/Bd+OXo4xn5sOo4W9Wlv83UkR294HtZ6L9vB mZW1r6Lwwnwjd9ay+hKxTA7xyxO/uwtoSMH2jQvZ0YMbhLmxAyqFM9kDTVbpk0R7 SmBZBszhR7HORVyQqWT6UUqlVieNm5mIwRytmWoD3Yk6LfMZ67jD/n34YLnxAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU9MAsI5mbRh8nL/mjJwUjEjh5dPEwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQsDANBgkqhkiG9w0BAQsFAAOCAQEAmbpZFVZHMOWIa55cfH6/Z9gh JEAdLohQq8ZceW9jaVelXVHUkoWacucVS2VPB8HQtI6jY8O2PyckpQ9YQCGKqPIF EK+Hp1i9yYFcQUbI/288RQ3okUtR+bQq3jsxWYgDotrHdjUNhQsN0xlisXJ5R0Pb vCvpls9qGUt/sbOh/QYGAXG3MjEvZ70z5qGvsV+zT8POMdWGaFoMI9i8D8CsJo9S msR4WdewN1sCtWqMwnQHF/J/hey7aLHEf66EYv9I0QVa9/5q7JZf5Rd5YUUOVa9l ddQzID7tmtL7Qg3brmwa2iDLTi/wsQYX88mx9kaTu5q/fHV8t/pjNKLJLrO+kw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:43 2025 by rpki-client