This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa
File: 323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa (raw, json)
Hash identifier: SooADThF3+KjzCUxqK8KJ/a3gR4N92xDvg/nESGrRd8=
Subject key identifier: 16:25:78:05:68:E1:61:6A:AD:25:D0:4F:EF:8C:FA:BF:E7:4A:01:37
Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial: 6FBD68245D40D672540EDE79E70488241CE618D6
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa
Signing time: Fri 07 Nov 2025 14:50:13 +0000
ROA not before: Fri 07 Nov 2025 14:45:13 +0000
ROA not after: Fri 06 Nov 2026 14:50:13 +0000
asID: 272076
IP address blocks: 2803:2310:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 11:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bd:68:24:5d:40:d6:72:54:0e:de:79:e7:04:88:24:1c:e6:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Validity
Not Before: Nov 7 14:45:13 2025 GMT
Not After : Nov 6 14:50:13 2026 GMT
Subject: CN=1625780568E1616AAD25D04FEF8CFABFE74A0137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:82:f1:0b:75:b7:83:7d:2e:83:e4:3f:2d:
ab:13:b4:68:7c:11:d5:76:c6:8a:5d:73:78:90:d4:
01:63:33:ca:a1:8a:6f:5f:c1:8b:4a:c4:4c:18:a4:
9f:2c:ba:1d:6a:3a:23:cd:bd:fe:be:b2:d4:dc:d1:
76:57:28:2b:a1:19:b7:82:fe:5c:43:9c:6f:69:0a:
cc:c6:67:26:ac:48:b0:e8:9e:63:d2:3b:a0:11:89:
29:1e:68:35:16:73:f0:2a:e1:48:60:fe:b7:0c:b6:
bf:8d:f8:8b:5c:b9:cc:12:e3:b0:1a:dd:d8:51:d1:
84:01:13:c4:4c:4d:e6:05:73:5c:ed:d3:84:8e:ad:
be:56:42:84:da:d2:1f:41:ab:47:98:6a:a5:2d:52:
27:fe:9b:55:99:d7:7e:b1:3f:e3:bf:2c:db:71:80:
1b:59:be:79:09:30:fc:93:55:68:6b:51:6a:68:59:
47:8d:18:7f:39:e5:5b:34:5d:3a:5d:99:8e:6e:2a:
c3:f8:dd:06:ee:41:cb:0d:94:64:77:3d:f7:f7:13:
2f:22:97:c4:2d:d6:35:ba:66:90:d0:6c:30:2c:c5:
20:e9:a5:58:d0:6a:25:e7:54:3d:24:1b:98:c5:1a:
cd:9c:a5:03:e9:8f:d3:af:2d:77:b2:8e:05:4f:db:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:78:05:68:E1:61:6A:AD:25:D0:4F:EF:8C:FA:BF:E7:4A:01:37
X509v3 Authority Key Identifier:
keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a653030303a3a2f33362d3336203d3e20323732303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2310:e000::/36
Signature Algorithm: sha256WithRSAEncryption
80:aa:36:77:63:16:e6:a8:70:20:6a:6c:dc:b4:dc:a4:f2:19:
d4:93:61:38:a2:24:53:96:a0:6f:e2:01:c0:88:49:c5:ad:37:
8a:1b:48:ba:7e:bc:b5:b0:61:4a:07:e9:5c:b1:d7:46:cb:85:
1d:4f:a3:9b:5c:17:38:11:a1:2b:34:7f:8a:db:5e:64:10:fe:
fd:f9:b1:22:4d:78:a3:fa:ff:7a:d2:eb:9e:aa:3a:9d:ac:27:
6f:a9:14:30:91:cd:7e:9f:8e:5d:35:1e:22:95:cd:a3:df:44:
46:c1:1f:50:cf:70:be:0c:25:06:70:6d:8d:e9:48:3c:f1:0a:
66:de:fc:80:36:81:d2:db:b3:1a:24:b5:e2:e6:a3:3b:f8:5c:
24:d3:37:72:81:ae:15:27:e7:ec:32:18:15:2d:e5:ea:bb:d6:
d7:df:2a:a0:94:10:1e:58:88:84:b5:6b:1f:ed:89:c1:8c:c1:
77:96:6c:38:b7:cf:65:23:cf:6b:c9:ca:8c:30:69:26:43:f9:
c3:02:4c:bb:46:d8:81:ce:9b:79:41:06:65:4f:0d:7c:12:63:
77:6a:11:04:87:36:21:17:cb:7b:f9:94:df:9f:f4:a1:82:b1:
21:f4:1a:14:c1:fe:5d:ea:b2:a8:34:37:78:c7:12:f2:db:1e:
5d:af:c9:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:30:42 2025 by rpki-client