This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a313030303a3a2f33362d3336203d3e20323734323637.roa File: 323830333a376664303a313030303a3a2f33362d3336203d3e20323734323637.roa (raw, json) Hash identifier: 17F7EHO+0IMAEBjdsYlUbOy7ckGrKaVf2GBLbuY/aAY= Subject key identifier: 3D:ED:D6:1D:00:9A:A0:FD:D2:A5:32:3E:36:00:9F:4F:C6:E4:C6:D7 Certificate issuer: /CN=1CB025B39863578DD58913190CAE124E8D58CAF4 Certificate serial: 0250E0863B80F054CA21156748A92DE04AF0F5AC Authority key identifier: 1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a313030303a3a2f33362d3336203d3e20323734323637.roa Signing time: Fri 05 Dec 2025 16:20:00 +0000 ROA not before: Fri 05 Dec 2025 16:15:00 +0000 ROA not after: Fri 04 Dec 2026 16:20:00 +0000 asID: 274267 IP address blocks: 2803:7fd0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 17:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:50:e0:86:3b:80:f0:54:ca:21:15:67:48:a9:2d:e0:4a:f0:f5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB025B39863578DD58913190CAE124E8D58CAF4 Validity Not Before: Dec 5 16:15:00 2025 GMT Not After : Dec 4 16:20:00 2026 GMT Subject: CN=3DEDD61D009AA0FDD2A5323E36009F4FC6E4C6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:3c:11:a4:b4:0d:ef:0a:23:4c:a8:18:db: 64:c3:d5:0c:4b:ea:13:71:5e:c5:ad:ae:5e:ff:2b: 13:ee:72:e8:a8:24:c1:ba:97:0f:21:21:07:60:b8: fe:6c:8a:5c:4a:0d:2f:27:06:52:05:55:ce:8b:8d: 86:3d:1a:3f:21:90:c3:da:f7:79:0c:32:c3:c3:69: 4c:73:55:16:ef:1b:45:b0:2a:02:5d:a3:8d:10:59: d1:7d:49:a6:99:5e:5c:bb:cc:22:48:e4:cc:87:d0: 1d:a5:4b:26:f1:55:b5:6c:50:ac:7c:44:80:f1:fb: 27:65:0e:d9:54:8e:af:c8:12:95:23:1b:5d:72:4c: 6c:92:3f:01:41:0a:e8:7d:e9:1b:7c:7e:0c:99:92: 14:f6:31:2f:aa:80:1e:be:69:27:10:07:22:80:00: 30:dd:7c:a1:97:ab:41:eb:da:39:84:df:fe:1a:25: ec:b0:1e:59:37:38:07:17:1d:9e:5f:b2:cd:59:fe: c1:b6:e6:0e:2d:a8:23:8a:8a:94:36:52:a0:f8:1b: 76:29:32:b7:e7:f8:58:61:fb:19:f7:b3:6f:79:f5: 57:49:3d:59:77:85:b6:f7:27:cd:7a:95:4f:c7:15: 23:48:b7:af:13:e4:78:01:bd:46:75:30:9e:1c:6b: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:ED:D6:1D:00:9A:A0:FD:D2:A5:32:3E:36:00:9F:4F:C6:E4:C6:D7 X509v3 Authority Key Identifier: keyid:1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/323830333a376664303a313030303a3a2f33362d3336203d3e20323734323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7fd0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 4e:78:6e:ca:8c:98:06:93:c2:45:c2:f2:19:4b:19:45:67:28: fb:4c:f5:fc:7c:eb:70:81:1b:21:a6:d1:64:c6:72:64:f7:39: 7d:13:c9:58:aa:30:25:7a:55:8c:cd:2d:c8:d3:59:88:4c:dc: 57:e1:96:10:1e:54:4d:5e:38:f5:4b:72:f6:9a:35:40:7d:38: a3:3b:f8:8f:f1:14:21:bf:49:ec:c4:d3:b6:3b:82:43:82:66: 9d:76:0d:9c:17:75:90:5c:5f:fe:5a:44:2c:87:28:74:2b:d1: 2b:93:d1:0c:76:58:fe:aa:5d:d4:da:56:83:bf:35:5b:50:6c: 31:71:43:e5:dc:45:5e:b7:34:30:f0:90:9a:86:55:f9:36:29: 02:20:79:a1:d1:48:38:f2:55:b6:be:44:16:e0:f1:ce:81:cd: cc:fe:77:1d:eb:94:10:79:77:71:a3:1a:b4:2a:78:63:b8:64: c2:41:2c:df:04:8f:b3:36:4c:09:4c:c9:91:9c:64:28:de:b0: 21:76:09:82:7d:41:7e:b7:15:ad:e6:af:f0:f2:01:86:95:79: c4:51:9b:6d:f7:99:56:8a:da:50:9e:69:7f:a3:76:bd:f0:2a: 88:cf:ca:26:f8:18:78:be:ce:5d:57:71:67:56:95:0e:e6:a4: bd:af:23:85 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUAlDghjuA8FTKIRVnSKkt4Erw9awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNCMDI1QjM5ODYzNTc4REQ1ODkxMzE5MENBRTEyNEU4 RDU4Q0FGNDAeFw0yNTEyMDUxNjE1MDBaFw0yNjEyMDQxNjIwMDBaMDMxMTAvBgNV BAMTKDNERURENjFEMDA5QUEwRkREMkE1MzIzRTM2MDA5RjRGQzZFNEM2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQjwRpLQN7wojTKgY22TD1QxL 6hNxXsWtrl7/KxPucuioJMG6lw8hIQdguP5silxKDS8nBlIFVc6LjYY9Gj8hkMPa 93kMMsPDaUxzVRbvG0WwKgJdo40QWdF9SaaZXly7zCJI5MyH0B2lSybxVbVsUKx8 RIDx+ydlDtlUjq/IEpUjG11yTGySPwFBCuh96Rt8fgyZkhT2MS+qgB6+aScQByKA ADDdfKGXq0Hr2jmE3/4aJeywHlk3OAcXHZ5fss1Z/sG25g4tqCOKipQ2UqD4G3Yp Mrfn+Fhh+xn3s2959VdJPVl3hbb3J816lU/HFSNIt68T5HgBvUZ1MJ4ca5ptAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUPe3WHQCaoP3SpTI+NgCfT8bkxtcwHwYDVR0j BBgwFoAUHLAls5hjV43ViRMZDK4STo1YyvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RUE4MjQ4OTlEMTI3RUNFOERDMkEyNjMxODRFREI4NDEw MkUwQjc4OTk0MDMzQjA0QUJDNUIzNTkwQTg3OEQ3LzAvMUNCMDI1QjM5ODYzNTc4 REQ1ODkxMzE5MENBRTEyNEU4RDU4Q0FGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQ0IwMjVCMzk4NjM1NzhERDU4 OTEzMTkwQ0FFMTI0RThENThDQUY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEVBODI0ODk5RDEyN0VDRThEQzJBMjYzMTg0RURCODQxMDJFMEI3ODk5 NDAzM0IwNEFCQzVCMzU5MEE4NzhENy8wLzMyMzgzMDMzM2EzNzY2NjQzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzQzMjM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA3/QEDANBgkqhkiG9w0BAQsFAAOCAQEATnhuyoyYBpPCRcLyGUsZRWco +0z1/HzrcIEbIabRZMZyZPc5fRPJWKowJXpVjM0tyNNZiEzcV+GWEB5UTV449Uty 9po1QH04ozv4j/EUIb9J7MTTtjuCQ4JmnXYNnBd1kFxf/lpELIcodCvRK5PRDHZY /qpd1NpWg781W1BsMXFD5dxFXrc0MPCQmoZV+TYpAiB5odFIOPJVtr5EFuDxzoHN zP53HeuUEHl3caMatCp4Y7hkwkEs3wSPszZMCUzJkZxkKN6wIXYJgn1BfrcVreav 8PIBhpV5xFGbbfeZVoraUJ5pf6N2vfAqiM/KJvgYeL7OXVdxZ1aVDuakva8jhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 22:46:08 2025 by rpki-client