This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a643030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: f8uvux4SeMjQA7nR0eYoN9jYzlupkNeP+KBB7BvU4O8= Subject key identifier: 50:DC:1B:9E:7E:30:B3:84:43:FE:53:4F:E3:93:96:9F:1A:BA:00:B4 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 530B814982127795C8A0F09C03B32D766F785101 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:07 +0000 ROA not before: Fri 07 Nov 2025 14:45:07 +0000 ROA not after: Fri 06 Nov 2026 14:50:07 +0000 asID: 272076 IP address blocks: 2803:2310:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0b:81:49:82:12:77:95:c8:a0:f0:9c:03:b3:2d:76:6f:78:51:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:07 2025 GMT Not After : Nov 6 14:50:07 2026 GMT Subject: CN=50DC1B9E7E30B38443FE534FE393969F1ABA00B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:d5:0d:50:8c:9f:e7:4a:66:cb:62:41:71: f0:2d:f6:ee:ab:45:05:e9:d0:a0:97:bc:e9:24:10: 83:19:e5:5c:87:5c:9b:32:3f:c0:43:18:3f:9f:90: 6d:60:1a:25:c7:98:cf:7d:fd:aa:b4:d0:fe:c7:d2: c2:f7:a2:ec:e3:33:ad:f9:87:e1:dd:1f:20:95:ae: 06:93:06:5e:51:9f:a2:01:cd:f6:6f:13:09:fb:32: 17:b3:93:f3:10:db:d3:98:2f:9b:4b:27:16:fe:93: 92:e5:2f:02:6e:2a:e5:fa:13:af:0c:c2:4d:70:6f: b9:db:ee:3a:73:98:55:37:78:ca:0d:d8:bd:6e:85: 40:93:90:11:d8:df:7a:f5:70:44:49:e7:5a:8c:a9: c0:d8:23:4a:43:fb:9e:02:5f:34:d9:06:97:70:71: 7c:c3:d1:37:59:7f:a6:79:93:74:4d:9e:51:d8:ec: b6:95:3e:bf:49:25:d2:84:00:35:60:41:93:85:09: c2:dc:0c:f1:fe:8e:c4:d5:e9:de:75:0c:32:db:e9: b5:40:20:1d:5b:5d:14:04:76:7d:c0:9f:14:25:7f: c5:a4:1e:51:d3:83:3b:66:59:2a:46:bb:85:da:33: b7:09:7c:17:45:f2:c8:90:14:a7:d7:0e:a0:a1:3d: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:1B:9E:7E:30:B3:84:43:FE:53:4F:E3:93:96:9F:1A:BA:00:B4 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a643030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:d000::/36 Signature Algorithm: sha256WithRSAEncryption 7b:d7:35:50:14:5a:7a:7c:d7:d6:3e:3c:68:0c:08:04:45:ae: fe:bf:35:46:d4:98:5d:b7:9b:9e:12:06:13:54:34:45:55:ec: 8b:f0:c7:3e:b7:c5:68:28:83:13:3c:c3:b7:7e:fb:99:3f:a0: 52:e6:a5:8a:f6:e3:9d:cb:9a:90:a8:6b:74:9d:c2:3e:e4:0f: 7e:8b:9c:2d:ba:ec:0a:79:19:cd:75:a2:20:b5:11:99:df:fb: ca:b6:74:ee:52:ff:37:21:2f:2a:c8:e1:8b:89:9a:36:36:a6: 37:9a:69:8d:51:94:f4:81:75:55:83:9d:88:3d:e0:4b:ad:77: 0c:4b:f5:4c:ec:d7:f5:ac:db:11:26:21:df:5a:27:94:00:d5: 95:b2:e4:5e:6a:30:4c:d2:98:cd:42:0e:25:80:fb:e9:8b:55: 64:a5:6c:cb:2f:17:44:64:2f:a7:24:51:bc:53:dd:f0:fd:92: d1:a0:a1:e8:10:de:3d:1b:08:fb:11:e7:a9:5e:eb:b6:1a:9a: 84:a4:8e:40:00:0f:04:79:93:20:5e:97:4d:50:04:53:1c:d6: 28:36:54:b4:46:e2:74:f7:3a:27:d8:ac:8c:07:40:3b:27:e7: c9:87:af:2d:ee:d1:0f:86:31:d1:91:52:6c:04:fa:a4:c0:4a: fe:9a:b0:68 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUUwuBSYISd5XIoPCcA7Mtdm94UQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDdaFw0yNjExMDYxNDUwMDdaMDMxMTAvBgNV BAMTKDUwREMxQjlFN0UzMEIzODQ0M0ZFNTM0RkUzOTM5NjlGMUFCQTAwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBdUNUIyf50pmy2JBcfAt9u6r RQXp0KCXvOkkEIMZ5VyHXJsyP8BDGD+fkG1gGiXHmM99/aq00P7H0sL3ouzjM635 h+HdHyCVrgaTBl5Rn6IBzfZvEwn7Mhezk/MQ29OYL5tLJxb+k5LlLwJuKuX6E68M wk1wb7nb7jpzmFU3eMoN2L1uhUCTkBHY33r1cERJ51qMqcDYI0pD+54CXzTZBpdw cXzD0TdZf6Z5k3RNnlHY7LaVPr9JJdKEADVgQZOFCcLcDPH+jsTV6d51DDLb6bVA IB1bXRQEdn3AnxQlf8WkHlHTgztmWSpGu4XaM7cJfBdF8siQFKfXDqChPWjFAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUUNwbnn4ws4RD/lNP45OWnxq6ALQwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQ0DANBgkqhkiG9w0BAQsFAAOCAQEAe9c1UBRaenzX1j48aAwIBEWu /r81RtSYXbebnhIGE1Q0RVXsi/DHPrfFaCiDEzzDt377mT+gUualivbjncuakKhr dJ3CPuQPfoucLbrsCnkZzXWiILURmd/7yrZ07lL/NyEvKsjhi4maNjamN5ppjVGU 9IF1VYOdiD3gS613DEv1TOzX9azbESYh31onlADVlbLkXmowTNKYzUIOJYD76YtV ZKVsyy8XRGQvpyRRvFPd8P2S0aCh6BDePRsI+xHnqV7rthqahKSOQAAPBHmTIF6X TVAEUxzWKDZUtEbidPc6J9isjAdAOyfnyYevLe7RD4Yx0ZFSbAT6pMBK/pqwaA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:53 2025 by rpki-client