This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa File: 323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa (raw, json) Hash identifier: IBn4Ffgwk/vPOtOsIn5x101vHMTOLwjDgKTAcPmbMKo= Subject key identifier: 83:DA:A6:51:8A:3A:FF:01:21:CA:D2:93:9F:2E:EC:7A:2A:F1:04:1C Certificate issuer: /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F Certificate serial: 6F4578ED10690BA05A1C2D28D7F63B5CA00C8920 Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa Signing time: Fri 25 Apr 2025 21:50:01 +0000 ROA not before: Fri 25 Apr 2025 21:45:01 +0000 ROA not after: Fri 24 Apr 2026 21:50:01 +0000 asID: 272875 IP address blocks: 2803:4a90:8303::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 10:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:45:78:ed:10:69:0b:a0:5a:1c:2d:28:d7:f6:3b:5c:a0:0c:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F Validity Not Before: Apr 25 21:45:01 2025 GMT Not After : Apr 24 21:50:01 2026 GMT Subject: CN=83DAA6518A3AFF0121CAD2939F2EEC7A2AF1041C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:2b:8b:b8:b7:d8:bb:28:e1:43:6c:7a:21: a8:27:49:14:a0:81:1b:88:0f:30:42:61:74:bd:e8: 9e:1d:00:4a:40:92:2c:c4:12:c4:58:71:d9:e7:9a: 28:6a:b0:61:47:c7:19:53:ad:cb:00:47:c2:e6:24: cd:b1:78:1c:6e:c1:3a:b6:8d:d7:36:2c:40:d9:e2: ec:5a:c3:03:33:cc:3c:72:a4:28:1e:7f:51:08:f4: 43:fd:ad:0a:6c:b9:4a:c3:25:3d:1f:33:b6:41:b5: 29:0f:04:62:c3:98:09:25:fe:24:5b:b5:08:92:ae: 6b:49:ac:d4:43:e9:95:13:13:62:56:b2:c6:1f:fb: 17:ee:10:d1:e2:24:8c:b0:74:fc:9b:c7:14:7d:cc: b7:32:0c:68:d5:2c:43:60:aa:bc:fe:d5:db:0d:a6: a6:4c:2a:ce:fb:15:59:36:35:51:bb:25:c4:a4:e7: 53:b2:93:a7:78:73:38:df:49:57:c3:71:6b:48:b1: 89:30:5e:01:4e:61:20:28:f9:03:cf:df:82:8f:1d: aa:63:2c:4f:72:c6:28:f2:43:b5:e7:10:4e:f7:8e: ed:24:1f:65:96:6c:25:39:fa:2d:78:8b:f4:65:c4: a5:a2:44:6d:df:63:25:48:0c:57:53:37:4b:32:ee: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DA:A6:51:8A:3A:FF:01:21:CA:D2:93:9F:2E:EC:7A:2A:F1:04:1C X509v3 Authority Key Identifier: keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4a90:8303::/48 Signature Algorithm: sha256WithRSAEncryption 21:f3:ed:9f:d7:d3:f7:db:fa:35:d0:2b:26:d4:53:f5:ae:a6: 81:35:2f:eb:a6:a4:7f:91:a9:c7:83:79:a7:ea:b9:32:f2:c3: 58:40:94:50:46:db:a7:52:a8:a4:5c:10:c3:1d:be:cb:63:2b: 6d:22:db:f1:a7:5d:3d:56:f6:0e:ca:a0:6e:7f:7a:ba:16:c0: 05:54:33:e3:69:1b:26:7b:fe:22:b3:f1:1e:dc:c0:b6:5d:dc: 5f:13:38:12:c7:53:b9:1c:90:b3:ff:92:b3:6c:c6:03:5a:91: 95:74:43:69:56:91:c4:21:57:77:2b:ed:13:b1:74:cf:bf:49: 28:a7:03:4a:3e:e1:32:f2:e0:aa:6b:d1:62:b2:4d:ff:60:87: 2a:e2:2f:61:a5:2c:c0:3b:bb:a4:5c:10:48:02:ed:7d:b0:08: c6:9e:bf:45:6c:25:a4:8d:fb:99:e4:9d:2b:48:9f:43:d0:c6: 43:9b:ef:e4:01:94:b4:b6:c2:d2:2f:ec:08:4e:7f:cb:10:5c: 8d:43:c2:f1:ad:2f:74:00:42:e7:59:93:b8:9c:18:45:50:30: af:87:d3:71:eb:4b:94:64:c3:dd:cd:8d:f8:3f:4e:e5:c9:11: 06:0e:fe:cf:b5:3a:30:58:3e:02:d6:2b:fa:6e:21:ce:eb:cb: 69:92:b4:4b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUb0V47RBpC6BaHC0o1/Y7XKAMiSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDQUZGM0MyNkEzOEM1RUU5QkYwMkM0OTg0OEExM0Q4 MkRGRTgxRjAeFw0yNTA0MjUyMTQ1MDFaFw0yNjA0MjQyMTUwMDFaMDMxMTAvBgNV BAMTKDgzREFBNjUxOEEzQUZGMDEyMUNBRDI5MzlGMkVFQzdBMkFGMTA0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwayuLuLfYuyjhQ2x6IagnSRSg gRuIDzBCYXS96J4dAEpAkizEEsRYcdnnmihqsGFHxxlTrcsAR8LmJM2xeBxuwTq2 jdc2LEDZ4uxawwMzzDxypCgef1EI9EP9rQpsuUrDJT0fM7ZBtSkPBGLDmAkl/iRb tQiSrmtJrNRD6ZUTE2JWssYf+xfuENHiJIywdPybxxR9zLcyDGjVLENgqrz+1dsN pqZMKs77FVk2NVG7JcSk51Oyk6d4czjfSVfDcWtIsYkwXgFOYSAo+QPP34KPHapj LE9yxijyQ7XnEE73ju0kH2WWbCU5+i14i/RlxKWiRG3fYyVIDFdTN0sy7krrAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUg9qmUYo6/wEhytKTny7seirxBBwwHwYDVR0j BBgwFoAUPMr/PCajjF7pvwLEmEihPYLf6B8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CM0U1MEIxMTExNUMwODRENkJBODE5N0MwNTgwQ0FBRkVG REZENTQ2RjkxN0JGNkMzRkNFMzEyNUFENTgxNjUzLzAvM0NDQUZGM0MyNkEzOEM1 RUU5QkYwMkM0OTg0OEExM0Q4MkRGRTgxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0NBRkYzQzI2QTM4QzVFRTlC RjAyQzQ5ODQ4QTEzRDgyREZFODFGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjNFNTBCMTExMTVDMDg0RDZCQTgxOTdDMDU4MENBQUZFRkRGRDU0NkY5 MTdCRjZDM0ZDRTMxMjVBRDU4MTY1My8wLzMyMzgzMDMzM2EzNDYxMzkzMDNhMzgz MzMwMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM3MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA0qQgwMwDQYJKoZIhvcNAQELBQADggEBACHz7Z/X0/fb+jXQKybUU/Wu poE1L+umpH+RqceDeafquTLyw1hAlFBG26dSqKRcEMMdvstjK20i2/GnXT1W9g7K oG5/eroWwAVUM+NpGyZ7/iKz8R7cwLZd3F8TOBLHU7kckLP/krNsxgNakZV0Q2lW kcQhV3cr7ROxdM+/SSinA0o+4TLy4Kpr0WKyTf9ghyriL2GlLMA7u6RcEEgC7X2w CMaev0VsJaSN+5nknStIn0PQxkOb7+QBlLS2wtIv7AhOf8sQXI1DwvGtL3QAQudZ k7icGEVQMK+H03HrS5Rkw93Njfg/TuXJEQYO/s+1OjBYPgLWK/puIc7ry2mStEs= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:56 2025 by rpki-client