This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa File: 323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa (raw, json) Hash identifier: /UydM9/wwME0APY03E5hI8ToYWNKFoudRH72s3jmvPw= Subject key identifier: D7:18:73:16:F6:9F:E7:CB:EC:40:FE:4F:C0:EF:FB:9F:46:49:3F:98 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 2DD566523BE7732F7AEEB4F5CC1CB0A18B780535 Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa Signing time: Fri 07 Nov 2025 14:50:01 +0000 ROA not before: Fri 07 Nov 2025 14:45:01 +0000 ROA not after: Fri 06 Nov 2026 14:50:01 +0000 asID: 267832 IP address blocks: 2803:2310:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d5:66:52:3b:e7:73:2f:7a:ee:b4:f5:cc:1c:b0:a1:8b:78:05:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:01 2025 GMT Not After : Nov 6 14:50:01 2026 GMT Subject: CN=D7187316F69FE7CBEC40FE4FC0EFFB9F46493F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:be:48:86:60:21:39:f3:66:74:0e:17:34:74: 5d:33:4c:f8:16:07:3f:08:d1:7b:b2:19:b8:fc:b1: cb:5d:17:ec:c5:1d:41:2d:74:df:6b:e5:a7:af:8c: 80:48:63:11:30:12:47:ed:b6:1c:df:b3:9c:99:3d: 91:b9:84:81:4e:c5:a4:ef:91:59:5b:09:6b:a2:9a: a3:a0:b1:b4:21:67:09:e2:e1:55:ed:46:f6:b3:8e: a4:14:af:59:e8:6f:05:4a:5e:8d:70:82:84:da:3b: 06:52:c0:d5:49:c1:eb:ae:7b:10:3b:7f:8d:b7:d0: 88:6f:f0:2c:8c:00:af:83:35:4d:23:95:80:25:cd: ac:5f:df:87:98:ef:78:fb:92:7a:7c:d4:11:26:43: f0:ca:2f:36:b1:8c:04:c3:20:23:7d:08:eb:a9:c6: ed:b8:ac:ff:5c:8b:8c:6a:a6:17:d6:25:21:b5:27: d5:f6:f1:4a:85:6f:13:21:c2:40:9b:34:6e:ca:6e: 9c:e1:0d:1d:25:8c:f7:e9:ed:21:a7:b3:6f:17:b4: 46:83:e3:93:2f:ad:49:b3:e3:e1:55:9c:85:7a:be: a8:ed:0a:58:ba:0d:ee:a1:f6:73:6f:e1:e9:39:e6: f7:df:77:e1:21:f2:46:0d:57:ce:95:11:57:1d:f7: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:73:16:F6:9F:E7:CB:EC:40:FE:4F:C0:EF:FB:9F:46:49:3F:98 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323637383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:f000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:df:62:39:7a:4c:cf:65:9b:21:2d:5b:ad:26:a1:bb:7a:35: fd:c2:6c:9d:28:7d:13:e2:f9:f7:c5:9e:db:3a:e4:4a:27:28: d6:48:c7:52:75:49:2d:b2:66:15:d1:50:19:04:8f:1e:45:7e: cb:2b:c6:f2:56:55:d2:6a:c8:6d:b4:cc:06:39:db:0e:bb:77: 61:c2:92:f8:db:8e:9b:bc:ae:3a:79:13:2a:b6:c5:53:24:45: 23:0a:0f:b4:6c:0f:7b:24:e5:0e:00:71:ce:88:7b:9b:4b:4b: e9:e6:a0:c9:9f:89:0f:22:2f:e8:7b:e1:a9:b3:db:a6:d5:75: 4f:6f:fb:6b:47:89:ae:77:73:2d:ab:27:e3:0c:1b:3b:bb:c2: d7:75:ec:d3:22:0b:8f:d1:f2:50:e5:c5:84:72:87:67:6d:8d: f7:c2:33:2f:ed:88:6b:f5:60:47:fe:dd:19:28:da:fa:2d:bc: ee:60:45:a6:cf:0d:4f:ab:4e:1d:44:31:35:1f:a1:21:5a:9b: 1d:8a:d6:3e:bf:12:0b:3f:7e:91:ef:fd:97:15:b9:67:d5:ab: f0:f7:47:e3:66:e8:a4:34:0f:b6:ee:4a:2c:6a:ac:3a:c7:b1: e9:c4:a1:d5:5f:a5:c7:9d:3f:08:86:7b:df:ed:23:17:80:94: 8d:3d:27:f6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIULdVmUjvncy967rT1zBywoYt4BTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDFaFw0yNjExMDYxNDUwMDFaMDMxMTAvBgNV BAMTKEQ3MTg3MzE2RjY5RkU3Q0JFQzQwRkU0RkMwRUZGQjlGNDY0OTNGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvkiGYCE582Z0Dhc0dF0zTPgW Bz8I0XuyGbj8sctdF+zFHUEtdN9r5aevjIBIYxEwEkftthzfs5yZPZG5hIFOxaTv kVlbCWuimqOgsbQhZwni4VXtRvazjqQUr1nobwVKXo1wgoTaOwZSwNVJweuuexA7 f4230Ihv8CyMAK+DNU0jlYAlzaxf34eY73j7knp81BEmQ/DKLzaxjATDICN9COup xu24rP9ci4xqphfWJSG1J9X28UqFbxMhwkCbNG7KbpzhDR0ljPfp7SGns28XtEaD 45MvrUmz4+FVnIV6vqjtCli6De6h9nNv4ek55vffd+Eh8kYNV86VEVcd9y8/AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU1xhzFvaf58vsQP5PwO/7n0ZJP5gwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQ8DANBgkqhkiG9w0BAQsFAAOCAQEAft9iOXpMz2WbIS1brSahu3o1 /cJsnSh9E+L598We2zrkSico1kjHUnVJLbJmFdFQGQSPHkV+yyvG8lZV0mrIbbTM BjnbDrt3YcKS+NuOm7yuOnkTKrbFUyRFIwoPtGwPeyTlDgBxzoh7m0tL6eagyZ+J DyIv6HvhqbPbptV1T2/7a0eJrndzLasn4wwbO7vC13Xs0yILj9HyUOXFhHKHZ22N 98IzL+2Ia/VgR/7dGSja+i287mBFps8NT6tOHUQxNR+hIVqbHYrWPr8SCz9+ke/9 lxW5Z9Wr8PdH42bopDQPtu5KLGqsOsex6cSh1V+lx50/CIZ73+0jF4CUjT0n9g== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:52 2025 by rpki-client