This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa File: 323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa (raw, json) Hash identifier: zx6BL8Qo6yPL1OrktRhRBVfUiHFhpThwy7kVSO4GVj8= Subject key identifier: 00:5A:F4:26:87:F0:0C:53:E4:7C:F2:73:C2:FC:D7:13:A8:16:D3:51 Certificate issuer: /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Certificate serial: 76DAC1C634788AFFF597663833944ACB70FACD8E Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa Signing time: Fri 07 Nov 2025 14:50:04 +0000 ROA not before: Fri 07 Nov 2025 14:45:04 +0000 ROA not after: Fri 06 Nov 2026 14:50:04 +0000 asID: 272076 IP address blocks: 2803:2310:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 11:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:da:c1:c6:34:78:8a:ff:f5:97:66:38:33:94:4a:cb:70:fa:cd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87 Validity Not Before: Nov 7 14:45:04 2025 GMT Not After : Nov 6 14:50:04 2026 GMT Subject: CN=005AF42687F00C53E47CF273C2FCD713A816D351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:bd:fb:b5:28:d0:56:81:48:8f:b4:b8:8f: e7:7c:e8:6d:52:88:36:f9:d0:ee:09:45:b4:8a:a1: 1c:21:34:4b:4b:e7:74:b2:2e:3b:ac:a0:ed:4c:2d: 05:60:98:1f:60:24:71:67:a9:b8:e1:dd:c1:94:ce: 97:e8:e0:2d:52:45:1f:51:8c:44:fc:f5:6d:f7:2c: c8:69:57:1c:13:d4:c0:07:3e:bb:a8:76:ab:79:f5: 01:e1:f8:7d:57:59:18:6a:d3:1b:15:f9:3e:76:cc: 06:02:de:56:25:42:e1:37:34:f9:a2:a1:ba:92:f4: 64:76:ea:de:f5:e0:24:31:3c:d0:f8:62:a4:af:ff: 53:13:c3:7d:63:3f:8e:52:79:7f:1a:44:d5:9d:d5: 6a:b2:62:99:0c:ce:c8:42:06:95:b8:21:17:c6:8e: 29:79:0d:29:57:41:21:a2:1e:7d:2e:01:9f:c2:7d: e0:dd:a7:ac:f4:6e:60:0e:a3:88:39:fa:1d:c0:49: 05:24:82:40:90:2b:5e:49:60:89:14:da:85:58:85: 27:6d:58:88:04:3c:eb:e3:f9:b2:e9:33:4d:4a:b7: d8:5e:50:83:8b:9b:6c:44:4d:a7:b9:c3:29:23:f0: 2e:61:98:e2:a4:b8:63:36:65:c5:9d:cb:64:dc:b8: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:F4:26:87:F0:0C:53:E4:7C:F2:73:C2:FC:D7:13:A8:16:D3:51 X509v3 Authority Key Identifier: keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/323830333a323331303a663030303a3a2f33362d3336203d3e20323732303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2310:f000::/36 Signature Algorithm: sha256WithRSAEncryption 98:49:97:3e:82:ce:2c:ee:d2:47:cc:4a:5f:f8:71:76:10:1d: 9a:81:b2:e4:a1:95:b5:8f:ea:ca:aa:0b:c4:fe:c4:65:7e:18: d7:6d:b4:0f:2f:1a:9e:a1:8c:b9:bd:ca:d0:1b:80:c3:4e:6a: 12:98:f3:8d:91:c7:2a:72:87:3b:4c:61:ac:7c:a4:82:24:0a: 65:77:98:dd:aa:fb:15:82:7b:57:1d:b1:93:8f:62:b2:16:58: 0d:d8:7f:d8:6a:44:b4:2f:c5:b0:01:54:18:f4:90:1d:c9:0a: 35:3e:64:d0:e0:d0:45:bc:fc:05:b4:2d:85:d7:59:4c:ac:ee: fd:7f:38:3f:5e:c3:d1:db:59:ea:e3:41:72:5f:cf:5f:76:f0: 5a:59:7f:01:2b:ca:2a:72:b8:08:26:9d:e5:05:26:6f:06:3b: 8f:aa:3d:43:b2:1a:a5:ca:08:c0:55:93:4e:78:f6:b6:5f:17: 43:f0:9e:59:08:85:21:d0:83:ce:37:8a:19:66:0a:61:ce:d9: 1d:0f:55:bd:fb:96:d4:6a:d8:16:d7:72:b3:4a:5d:c9:1f:61: 71:e3:60:34:d9:90:7e:36:2e:6d:e6:f9:5c:da:81:23:0f:14: 8f:81:a1:99:7b:f1:56:7c:70:ea:c2:b0:80:05:30:ff:71:46: af:f3:b6:52 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUdtrBxjR4iv/1l2Y4M5RKy3D6zY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE NEIzMEQ4NzAeFw0yNTExMDcxNDQ1MDRaFw0yNjExMDYxNDUwMDRaMDMxMTAvBgNV BAMTKDAwNUFGNDI2ODdGMDBDNTNFNDdDRjI3M0MyRkNENzEzQTgxNkQzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDheb37tSjQVoFIj7S4j+d86G1S iDb50O4JRbSKoRwhNEtL53SyLjusoO1MLQVgmB9gJHFnqbjh3cGUzpfo4C1SRR9R jET89W33LMhpVxwT1MAHPruodqt59QHh+H1XWRhq0xsV+T52zAYC3lYlQuE3NPmi obqS9GR26t714CQxPND4YqSv/1MTw31jP45SeX8aRNWd1WqyYpkMzshCBpW4IRfG jil5DSlXQSGiHn0uAZ/CfeDdp6z0bmAOo4g5+h3ASQUkgkCQK15JYIkU2oVYhSdt WIgEPOvj+bLpM01Kt9heUIOLm2xETae5wykj8C5hmOKkuGM2ZcWdy2TcuFLBAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUAFr0JofwDFPkfPJzwvzXE6gW01EwHwYDVR0j BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2 NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMyMzgzMDMzM2EzMjMzMzEzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMDM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyMQ8DANBgkqhkiG9w0BAQsFAAOCAQEAmEmXPoLOLO7SR8xKX/hxdhAd moGy5KGVtY/qyqoLxP7EZX4Y1220Dy8anqGMub3K0BuAw05qEpjzjZHHKnKHO0xh rHykgiQKZXeY3ar7FYJ7Vx2xk49ishZYDdh/2GpEtC/FsAFUGPSQHckKNT5k0ODQ Rbz8BbQthddZTKzu/X84P17D0dtZ6uNBcl/PX3bwWll/ASvKKnK4CCad5QUmbwY7 j6o9Q7IapcoIwFWTTnj2tl8XQ/CeWQiFIdCDzjeKGWYKYc7ZHQ9VvfuW1GrYFtdy s0pdyR9hceNgNNmQfjYubeb5XNqBIw8Uj4GhmXvxVnxw6sKwgAUw/3FGr/O2Ug== -----END CERTIFICATE-----Generated at Sun Dec 7 12:30:53 2025 by rpki-client