This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a643030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: EFSb1EFcnVu7+vDcuKwVH4Oe6oMCFraZIKmY0Q30Vzg= Subject key identifier: 75:08:6B:9E:B5:C5:95:69:46:8D:BA:59:DA:DC:96:0C:79:D8:AF:29 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 247446A5DBDF00DC81920F9722C25530DED2970F Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:12 +0000 ROA not before: Fri 07 Nov 2025 14:45:12 +0000 ROA not after: Fri 06 Nov 2026 14:50:12 +0000 asID: 267832 IP address blocks: 2803:2310:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:74:46:a5:db:df:00:dc:81:92:0f:97:22:c2:55:30:de:d2:97:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:12 2025 GMT Not After : Nov 6 14:50:12 2026 GMT Subject: CN=75086B9EB5C59569468DBA59DADC960C79D8AF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:7c:89:37:9f:ed:05:6d:cf:81:6b:05:fa: 41:a7:7c:b8:88:48:1c:48:50:60:c3:c0:2c:76:f8: 98:19:1b:f3:52:9a:8d:0e:4c:e3:7e:aa:22:ba:77: 4e:9f:8b:01:5c:ba:5f:8c:97:2f:51:9d:76:4b:e1: c1:0f:3b:e2:c3:8c:bc:bc:aa:47:e4:d5:d8:96:81: d8:96:88:41:66:fa:d4:6a:69:67:e2:81:9e:13:ee: 80:12:a8:27:7c:5a:38:20:70:e3:cb:c5:cc:72:bc: b2:cf:e0:72:15:d4:0c:86:62:d4:3a:13:7b:50:9b: 6c:c7:e0:f8:72:89:b2:c6:d0:82:87:c5:86:f0:7f: 9e:36:72:69:28:03:80:54:fa:48:8b:7c:cb:68:30: e3:13:f7:5c:c2:5a:fb:12:70:6d:91:8b:1d:fc:54: 61:7d:64:7d:33:98:1b:78:87:b3:6f:e2:6f:78:c5: 5e:4a:ad:bb:20:30:fe:66:20:0c:0e:0e:c8:c8:4c: 4a:b9:a2:55:0a:d7:5d:52:84:b3:1d:75:0f:1c:9b: 8d:3e:0e:c5:1e:23:2b:db:f7:c9:75:6c:e6:1d:fd: 5e:31:ba:fe:62:7d:93:cf:0d:d9:8c:ac:b3:76:ad: d5:96:4d:66:df:28:bf:df:62:db:56:a0:3a:65:07: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:6B:9E:B5:C5:95:69:46:8D:BA:59:DA:DC:96:0C:79:D8:AF:29 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:d000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:f9:0d:da:84:1f:e2:87:88:05:c7:5c:ba:be:46:fa:fa:6b: 4e:b4:2f:c8:18:8b:83:04:a7:c8:0e:40:0c:53:38:d5:d1:51: 9d:4b:17:76:1e:34:f1:a3:6e:38:87:9e:72:3b:8b:67:e1:9d: bd:df:a4:64:e2:ad:a5:bd:1b:d1:6e:95:8f:6c:31:5a:6d:02: ad:3a:b7:d5:6d:5c:6e:91:35:42:98:e0:5a:a2:1b:8f:2f:8a: e0:43:47:fe:db:c7:ec:24:bd:00:a5:fe:7d:5f:81:a0:be:be: 3b:e3:07:a3:f9:7b:f2:6f:25:72:5b:61:17:4a:89:d9:38:be: 76:f6:4f:45:9e:b7:92:83:b6:7c:cb:0b:48:50:a9:d0:9c:6b: b2:2d:32:99:c8:a3:5b:02:dd:7a:2c:ec:ed:34:50:1a:5a:4b: 55:69:9b:65:27:41:96:16:e6:f0:65:70:2e:ca:ab:bc:8d:56: bc:07:9e:7e:76:65:c5:42:3e:09:24:8d:28:d2:36:4d:e8:de: 4b:fb:33:2e:fb:9e:62:e0:7f:c9:12:78:45:9e:e6:bc:56:2c: 43:3c:62:ae:e7:2b:6f:f0:7d:e8:62:ab:a3:77:5e:f2:3c:48: a2:df:f7:a7:c1:8a:0f:9a:02:9f:25:31:75:3e:3a:d1:fb:cd: e2:f4:83:ef -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUJHRGpdvfANyBkg+XIsJVMN7Slw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MTJaFw0yNjExMDYxNDUwMTJaMDMxMTAvBgNV BAMTKDc1MDg2QjlFQjVDNTk1Njk0NjhEQkE1OURBREM5NjBDNzlEOEFGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClM3yJN5/tBW3PgWsF+kGnfLiI SBxIUGDDwCx2+JgZG/NSmo0OTON+qiK6d06fiwFcul+Mly9RnXZL4cEPO+LDjLy8 qkfk1diWgdiWiEFm+tRqaWfigZ4T7oASqCd8WjggcOPLxcxyvLLP4HIV1AyGYtQ6 E3tQm2zH4PhyibLG0IKHxYbwf542cmkoA4BU+kiLfMtoMOMT91zCWvsScG2Rix38 VGF9ZH0zmBt4h7Nv4m94xV5KrbsgMP5mIAwODsjITEq5olUK111ShLMddQ8cm40+ DsUeIyvb98l1bOYd/V4xuv5ifZPPDdmMrLN2rdWWTWbfKL/fYttWoDplB9anAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUdQhrnrXFlWlGjbpZ2tyWDHnYrykwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQ0DANBgkqhkiG9w0BAQsFAAOCAQEAivkN2oQf4oeIBcdcur5G+vpr TrQvyBiLgwSnyA5ADFM41dFRnUsXdh408aNuOIeecjuLZ+Gdvd+kZOKtpb0b0W6V j2wxWm0CrTq31W1cbpE1QpjgWqIbjy+K4ENH/tvH7CS9AKX+fV+BoL6+O+MHo/l7 8m8lclthF0qJ2Ti+dvZPRZ63koO2fMsLSFCp0Jxrsi0ymcijWwLdeizs7TRQGlpL VWmbZSdBlhbm8GVwLsqrvI1WvAeefnZlxUI+CSSNKNI2TejeS/szLvueYuB/yRJ4 RZ7mvFYsQzxirucrb/B96GKro3de8jxIot/3p8GKD5oCnyUxdT460fvN4vSD7w== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client