This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a633030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a633030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: rgg8YNRzk37EL6bzxVG5b08hl5e8GC7eweXKLzlNhzg= Subject key identifier: AD:84:A9:5D:83:C6:A6:A5:D5:27:32:C7:77:B2:AF:38:DB:39:33:0D Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 1A45B040FE897B8D1C8A253A643F7CE36BE0C234 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a633030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:08 +0000 ROA not before: Fri 07 Nov 2025 14:45:08 +0000 ROA not after: Fri 06 Nov 2026 14:50:08 +0000 asID: 272076 IP address blocks: 2803:2310:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:45:b0:40:fe:89:7b:8d:1c:8a:25:3a:64:3f:7c:e3:6b:e0:c2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:08 2025 GMT Not After : Nov 6 14:50:08 2026 GMT Subject: CN=AD84A95D83C6A6A5D52732C777B2AF38DB39330D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:7a:58:cc:ef:f9:b2:76:76:3f:07:35:0d: 24:9f:7c:66:27:d8:b3:a6:57:4f:06:fb:72:db:9f: ee:70:54:e2:14:a0:1f:08:4b:34:13:16:2d:2e:21: 80:6f:05:43:28:e4:c0:6a:a5:cf:1e:b3:7e:2e:3b: af:08:aa:c6:96:9b:fb:d6:98:e4:2c:1c:23:de:3a: c1:6c:50:26:1d:df:28:1e:10:98:cc:5e:ad:86:d0: fc:e5:cb:22:0d:bb:cc:9d:c8:21:e4:45:14:72:ad: 66:a1:f7:9a:65:54:79:63:22:2c:b1:ea:27:c6:91: 5b:94:01:9e:c9:e0:7f:12:71:36:c9:08:cd:c6:6d: cb:11:c6:48:aa:8c:f1:41:69:ee:b6:82:07:be:d6: 64:60:3a:12:62:a5:56:44:66:47:f3:56:36:d6:73: b5:5b:d9:ab:17:ad:f9:9f:8a:e2:eb:cb:ea:30:cf: 3c:3a:dc:16:cf:50:92:1f:89:69:0a:6e:e7:9a:2d: cf:2f:83:ba:05:4e:82:62:2b:2e:e4:18:8d:c0:8e: 51:b3:69:c6:0f:5c:c6:ed:9a:50:b5:40:a8:20:a8: 18:d1:39:69:32:56:e1:6e:d2:c8:a5:c8:61:02:c3: 4c:c5:43:f0:da:b7:f3:b3:b3:44:f1:55:7f:ad:e8: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:84:A9:5D:83:C6:A6:A5:D5:27:32:C7:77:B2:AF:38:DB:39:33:0D X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a633030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:c000::/36 Signature Algorithm: sha256WithRSAEncryption 72:28:dd:71:ca:08:75:bf:f9:bf:33:b1:eb:ee:b8:b4:86:08: 97:8b:6b:b3:67:c3:1a:5f:2b:3b:0d:74:9d:57:c1:d6:5a:0c: 3c:f7:82:19:57:db:10:51:a6:72:c7:af:31:7c:40:02:b4:18: 01:dc:02:76:f4:e0:e9:69:fe:83:73:6d:2b:f6:c4:d2:b6:66: 0c:58:9c:8c:94:29:55:a1:00:4d:45:be:47:d0:98:f4:db:e4: 99:78:2d:3e:8b:87:15:d8:b2:9a:38:f4:f0:96:7a:e2:94:4e: 19:43:52:cd:05:a9:bf:0b:d2:2b:07:db:db:b3:45:af:46:80: 0c:0e:b9:de:9a:4f:b4:6d:ca:77:96:15:ae:39:ef:e7:10:24: b8:ba:63:9d:19:2e:87:3c:51:0e:b7:91:d5:7d:25:3a:b2:df: e9:20:bc:14:30:21:4b:df:e2:f4:d6:06:ec:2a:64:dd:e8:e5: f1:5b:76:e7:4d:96:9a:0b:1e:13:cb:b2:5f:85:0c:39:64:eb: 0e:ca:0e:7c:a2:09:27:81:0c:42:89:e1:7d:ff:2f:62:8e:70: 54:f5:7e:d3:5f:d0:16:33:d1:f7:db:82:c8:8e:14:9f:3d:d2: 18:45:cd:10:21:97:5e:9e:1b:85:2f:aa:62:1a:eb:a3:00:c9: 30:09:bf:cd -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUGkWwQP6Je40ciiU6ZD9842vgwjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDhaFw0yNjExMDYxNDUwMDhaMDMxMTAvBgNV BAMTKEFEODRBOTVEODNDNkE2QTVENTI3MzJDNzc3QjJBRjM4REIzOTMzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzN3pYzO/5snZ2Pwc1DSSffGYn 2LOmV08G+3Lbn+5wVOIUoB8ISzQTFi0uIYBvBUMo5MBqpc8es34uO68IqsaWm/vW mOQsHCPeOsFsUCYd3ygeEJjMXq2G0PzlyyINu8ydyCHkRRRyrWah95plVHljIiyx 6ifGkVuUAZ7J4H8ScTbJCM3GbcsRxkiqjPFBae62gge+1mRgOhJipVZEZkfzVjbW c7Vb2asXrfmfiuLry+owzzw63BbPUJIfiWkKbueaLc8vg7oFToJiKy7kGI3AjlGz acYPXMbtmlC1QKggqBjROWkyVuFu0silyGECw0zFQ/Dat/Ozs0TxVX+t6APZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUrYSpXYPGpqXVJzLHd7KvONs5Mw0wHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjMz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQwDANBgkqhkiG9w0BAQsFAAOCAQEAcijdccoIdb/5vzOx6+64tIYI l4trs2fDGl8rOw10nVfB1loMPPeCGVfbEFGmcsevMXxAArQYAdwCdvTg6Wn+g3Nt K/bE0rZmDFicjJQpVaEATUW+R9CY9NvkmXgtPouHFdiymjj08JZ64pROGUNSzQWp vwvSKwfb27NFr0aADA653ppPtG3Kd5YVrjnv5xAkuLpjnRkuhzxRDreR1X0lOrLf 6SC8FDAhS9/i9NYG7Cpk3ejl8Vt2502WmgseE8uyX4UMOWTrDsoOfKIJJ4EMQonh ff8vYo5wVPV+01/QFjPR99uCyI4Unz3SGEXNECGXXp4bhS+qYhrrowDJMAm/zQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client