This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/323830333a323939303a313030303a3a2f33362d3438203d3e20323732393530.roa File: 323830333a323939303a313030303a3a2f33362d3438203d3e20323732393530.roa (raw, json) Hash identifier: lbCzVvfMjizA0ISxYYxLyUgR5UydUYbNqP92pe/zN2M= Subject key identifier: 39:F9:95:22:28:02:3E:51:B9:F0:5A:F9:3A:D9:73:DA:FC:FF:80:1E Certificate issuer: /CN=3C7B69A1EF4CA7800FEB038E1DD0633839F3995F Certificate serial: 438769B3E20AFB3A294CAE399C83664C2222D5C3 Authority key identifier: 3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/323830333a323939303a313030303a3a2f33362d3438203d3e20323732393530.roa Signing time: Wed 03 Dec 2025 21:55:00 +0000 ROA not before: Wed 03 Dec 2025 21:50:00 +0000 ROA not after: Wed 02 Dec 2026 21:55:00 +0000 asID: 272950 IP address blocks: 2803:2990:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.crl rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 15:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:87:69:b3:e2:0a:fb:3a:29:4c:ae:39:9c:83:66:4c:22:22:d5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C7B69A1EF4CA7800FEB038E1DD0633839F3995F Validity Not Before: Dec 3 21:50:00 2025 GMT Not After : Dec 2 21:55:00 2026 GMT Subject: CN=39F9952228023E51B9F05AF93AD973DAFCFF801E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:45:ce:02:cc:9e:b8:37:04:4b:4c:46:54: 24:bb:2f:3b:da:e4:94:43:bf:39:b3:82:28:b2:6a: 0f:b1:80:1d:29:18:f6:01:82:4c:d5:d5:62:84:a9: 0a:b2:6e:45:8f:f8:98:04:3a:d5:2d:b3:e1:14:23: ab:1f:b0:94:a7:d5:fa:b7:0d:54:ee:78:03:d8:39: 0c:b3:d0:7c:49:53:76:9e:90:32:c0:79:25:dc:aa: 5c:8c:af:84:d8:72:7c:73:a5:56:0e:92:eb:b6:72: 6c:0b:f9:56:1b:9d:df:16:a3:ed:59:fd:f1:67:c5: c1:44:b9:d8:ce:2c:21:3c:db:4e:d4:cc:14:3c:00: 3b:5a:48:14:24:e3:1f:44:c1:b3:82:be:ed:a7:a4: d5:b1:0e:51:a5:a2:6c:10:e8:04:1d:7f:9d:6f:d2: e1:26:05:83:27:53:7c:68:03:05:7c:8b:6e:3f:58: 2d:b8:c5:2f:2d:f0:85:54:c4:af:0a:86:c4:df:c2: 19:01:52:87:c8:12:d6:dc:96:28:27:22:49:7a:58: 06:73:c7:b5:0b:77:75:bb:a7:30:eb:85:c2:8e:a2: 28:ea:90:0f:76:0d:3b:b6:b4:ae:b3:27:e1:64:19: e3:83:ab:b6:d4:72:6e:75:71:f8:e4:04:a3:a1:87: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F9:95:22:28:02:3E:51:B9:F0:5A:F9:3A:D9:73:DA:FC:FF:80:1E X509v3 Authority Key Identifier: keyid:3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/323830333a323939303a313030303a3a2f33362d3438203d3e20323732393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2990:1000::/36 Signature Algorithm: sha256WithRSAEncryption 43:17:0c:97:bf:96:87:df:08:06:8e:e8:ac:88:d5:46:72:99: d1:f3:5d:e5:6f:8f:a9:74:46:71:b7:4f:d3:39:d5:9a:23:ac: 5b:27:51:87:9e:45:f2:5f:67:b0:07:b0:d9:b7:4f:a5:d5:90: 47:06:d3:37:25:09:0b:59:74:94:39:bb:79:e6:4f:65:a4:54: d6:85:7a:0c:49:a9:56:20:41:e8:99:21:e7:cf:ca:9b:67:a6: 93:1e:ad:c0:ec:8b:fa:0d:a0:9a:90:b8:ee:95:c5:2c:a6:4d: e8:1c:44:a2:87:e7:28:49:02:77:74:87:d0:2f:e0:5f:04:8a: 54:b4:91:14:66:5c:6e:39:48:08:ae:57:92:15:72:ca:7a:50: 0f:b2:15:cc:7b:8b:77:74:a4:3b:6b:ed:04:de:9a:5b:1c:5b: 79:ce:fd:12:20:41:32:bc:09:0a:a5:2a:f0:df:1a:8e:d2:76: 25:a7:5e:71:ec:1a:c4:3f:5b:ff:d0:4c:16:6b:39:74:3a:f9: 50:71:56:1c:41:34:1c:17:66:f6:b2:f3:a9:3e:00:b7:53:8d: 85:3d:40:fc:82:61:e8:b8:d0:43:3f:c1:33:32:32:d0:e5:d5: 18:e8:6b:cf:df:f6:d9:11:73:90:6d:39:c7:b8:bd:81:63:07: 6e:24:8f:b9 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQ4dps+IK+zopTK45nINmTCIi1cMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3QjY5QTFFRjRDQTc4MDBGRUIwMzhFMUREMDYzMzgz OUYzOTk1RjAeFw0yNTEyMDMyMTUwMDBaFw0yNjEyMDIyMTU1MDBaMDMxMTAvBgNV BAMTKDM5Rjk5NTIyMjgwMjNFNTFCOUYwNUFGOTNBRDk3M0RBRkNGRjgwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKq0XOAsyeuDcES0xGVCS7Lzva 5JRDvzmzgiiyag+xgB0pGPYBgkzV1WKEqQqybkWP+JgEOtUts+EUI6sfsJSn1fq3 DVTueAPYOQyz0HxJU3aekDLAeSXcqlyMr4TYcnxzpVYOkuu2cmwL+VYbnd8Wo+1Z /fFnxcFEudjOLCE8207UzBQ8ADtaSBQk4x9EwbOCvu2npNWxDlGlomwQ6AQdf51v 0uEmBYMnU3xoAwV8i24/WC24xS8t8IVUxK8KhsTfwhkBUofIEtbclignIkl6WAZz x7ULd3W7pzDrhcKOoijqkA92DTu2tK6zJ+FkGeODq7bUcm51cfjkBKOhh5VjAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUOfmVIigCPlG58Fr5Otlz2vz/gB4wHwYDVR0j BBgwFoAUPHtpoe9Mp4AP6wOOHdBjODnzmV8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NDU5MTMwODY2NUNCREMxNDVBMjA5RjEwQ0I1RjVENkIw RDFFMThGQjhGQ0E2NDhFMkM2QTE1QjU3Q0Q2RDVCLzAvM0M3QjY5QTFFRjRDQTc4 MDBGRUIwMzhFMUREMDYzMzgzOUYzOTk1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzdCNjlBMUVGNENBNzgwMEZF QjAzOEUxREQwNjMzODM5RjM5OTVGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODQ1OTEzMDg2NjVDQkRDMTQ1QTIwOUYxMENCNUY1RDZCMEQxRTE4RkI4 RkNBNjQ4RTJDNkExNUI1N0NENkQ1Qi8wLzMyMzgzMDMzM2EzMjM5MzkzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAymQEDANBgkqhkiG9w0BAQsFAAOCAQEAQxcMl7+Wh98IBo7orIjVRnKZ 0fNd5W+PqXRGcbdP0znVmiOsWydRh55F8l9nsAew2bdPpdWQRwbTNyUJC1l0lDm7 eeZPZaRU1oV6DEmpViBB6Jkh58/Km2emkx6twOyL+g2gmpC47pXFLKZN6BxEoofn KEkCd3SH0C/gXwSKVLSRFGZcbjlICK5XkhVyynpQD7IVzHuLd3SkO2vtBN6aWxxb ec79EiBBMrwJCqUq8N8ajtJ2JadecewaxD9b/9BMFms5dDr5UHFWHEE0HBdm9rLz qT4At1ONhT1A/IJh6LjQQz/BMzIy0OXVGOhrz9/22RFzkG05x7i9gWMHbiSPuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:04:54 2025 by rpki-client