This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa File: 323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa (raw, json) Hash identifier: 2O2BwfvUllE506Un72r0sahuena+jzRT+rWVu3twQYo= Subject key identifier: F6:87:22:DB:07:A3:39:26:C9:F7:8D:56:77:F9:E8:87:72:D6:ED:AD Certificate issuer: /CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Certificate serial: 7C42474AD11F24D3CC2070B4D590B6303B4F7A9B Authority key identifier: 86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa Signing time: Tue 11 Nov 2025 23:35:00 +0000 ROA not before: Tue 11 Nov 2025 23:30:00 +0000 ROA not after: Tue 10 Nov 2026 23:35:00 +0000 asID: 273280 IP address blocks: 2001:1226:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:42:47:4a:d1:1f:24:d3:cc:20:70:b4:d5:90:b6:30:3b:4f:7a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865E5586107E0C9E056624D8900338C5C1CBFCC5 Validity Not Before: Nov 11 23:30:00 2025 GMT Not After : Nov 10 23:35:00 2026 GMT Subject: CN=F68722DB07A33926C9F78D5677F9E88772D6EDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:4a:17:a5:d5:da:f1:08:a1:fd:35:8d:68: 49:b2:8c:52:64:f9:80:70:9d:a8:3f:01:11:75:e0: fb:94:e2:25:b0:a9:3e:33:4d:90:a8:6d:71:a8:48: 2f:50:95:f9:b8:fb:fb:d3:57:06:5f:6d:43:9a:70: a1:a8:4e:06:57:3f:a9:bb:b6:52:c8:be:e4:e0:03: 9b:a3:c1:f5:3a:06:76:77:b8:92:a8:f6:55:c8:9c: 23:9b:e1:8c:f9:38:7f:cc:5d:25:d7:9a:09:c6:33: 08:a7:27:e8:ac:03:21:81:1e:30:da:f5:f2:c1:05: cc:fe:62:f1:a7:82:e1:b5:63:31:ae:41:9c:d3:20: 50:9e:62:37:3b:27:54:a7:35:4f:76:c0:5c:73:d9: d3:f4:63:a1:ac:30:b4:58:f4:a9:f5:f6:be:ff:13: 10:77:05:97:b6:f6:05:be:0b:5c:d6:85:01:d9:5e: 12:c0:98:9e:7e:85:8c:c3:46:a6:2b:73:06:0e:a8: 20:8c:2f:a5:08:24:2a:e0:05:a6:e4:c4:4d:c4:d5: 71:22:95:54:9f:02:e6:26:b3:8f:94:d9:74:17:cc: 64:80:20:d5:5f:e7:de:aa:43:c1:be:16:d0:b3:f5: 83:cf:04:58:01:0b:e4:63:3d:a4:d5:ca:d7:d4:30: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:87:22:DB:07:A3:39:26:C9:F7:8D:56:77:F9:E8:87:72:D6:ED:AD X509v3 Authority Key Identifier: keyid:86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1226:1000::/40 Signature Algorithm: sha256WithRSAEncryption c9:15:12:31:fa:e6:db:ea:5d:52:2a:b2:3f:26:3f:85:71:b7: f2:70:e4:7f:ee:be:76:3d:df:5b:b3:4a:39:9d:c9:66:6e:2c: f5:50:94:ff:4a:71:c6:fe:48:ad:34:ba:cc:fe:e2:73:bf:d4: 55:ee:af:0b:4b:ec:bd:95:e5:68:83:2f:e1:9c:4d:c3:f6:be: ce:7c:73:fe:7a:d4:2c:6f:83:ef:68:0a:87:cb:15:6c:64:a2: f3:54:74:9d:01:fa:73:8a:19:7d:8e:91:22:b0:c5:a7:c2:33: e7:e6:d2:49:1d:fa:1e:03:3f:b1:84:5e:38:97:bc:fa:66:83: f4:5c:0a:92:cd:c5:89:88:cc:ae:db:35:90:38:03:dd:e1:a6: 9c:dd:6b:3c:11:e2:00:8a:32:15:c9:35:a4:c7:c3:fd:dc:fb: 16:24:09:13:b3:04:30:a5:14:53:e0:f7:47:c5:98:2d:05:13: c0:d9:bd:8b:6c:b8:59:35:d4:97:ea:f1:2d:6b:33:35:2a:10: b8:c2:c0:4a:06:ec:9a:65:81:71:a8:48:e2:65:df:48:38:e8: d5:4d:c5:ce:57:49:ac:99:41:64:a6:2e:d9:ab:43:7f:96:5f: ff:f4:de:87:9c:c7:c4:1f:01:67:3b:ae:03:09:b4:d4:fe:4e: 47:7d:8d:e6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfEJHStEfJNPMIHC01ZC2MDtPepswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1RTU1ODYxMDdFMEM5RTA1NjYyNEQ4OTAwMzM4QzVD MUNCRkNDNTAeFw0yNTExMTEyMzMwMDBaFw0yNjExMTAyMzM1MDBaMDMxMTAvBgNV BAMTKEY2ODcyMkRCMDdBMzM5MjZDOUY3OEQ1Njc3RjlFODg3NzJENkVEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8EoXpdXa8Qih/TWNaEmyjFJk +YBwnag/ARF14PuU4iWwqT4zTZCobXGoSC9Qlfm4+/vTVwZfbUOacKGoTgZXP6m7 tlLIvuTgA5ujwfU6BnZ3uJKo9lXInCOb4Yz5OH/MXSXXmgnGMwinJ+isAyGBHjDa 9fLBBcz+YvGnguG1YzGuQZzTIFCeYjc7J1SnNU92wFxz2dP0Y6GsMLRY9Kn19r7/ ExB3BZe29gW+C1zWhQHZXhLAmJ5+hYzDRqYrcwYOqCCML6UIJCrgBabkxE3E1XEi lVSfAuYms4+U2XQXzGSAINVf596qQ8G+FtCz9YPPBFgBC+RjPaTVytfUMJ67AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU9oci2wejOSbJ941Wd/noh3LW7a0wHwYDVR0j BBgwFoAUhl5VhhB+DJ4FZiTYkAM4xcHL/MUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNTMzN0RFMkIzNkMwQzBFQkZFQ0M0RjJGNDE4RTEzMzc4 NUQ4ODc1MTFBMjREODJGODg2NUZFNTgyOTY3NkU1LzAvODY1RTU1ODYxMDdFMEM5 RTA1NjYyNEQ4OTAwMzM4QzVDMUNCRkNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjVFNTU4NjEwN0UwQzlFMDU2 NjI0RDg5MDAzMzhDNUMxQ0JGQ0M1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzUzMzdERTJCMzZDMEMwRUJGRUNDNEYyRjQxOEUxMzM3ODVEODg3NTEx QTI0RDgyRjg4NjVGRTU4Mjk2NzZFNS8wLzMyMzAzMDMxM2EzMTMyMzIzNjNhMzEz MDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzMzMjM4MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAgARImEDANBgkqhkiG9w0BAQsFAAOCAQEAyRUSMfrm2+pdUiqyPyY/hXG3 8nDkf+6+dj3fW7NKOZ3JZm4s9VCU/0pxxv5IrTS6zP7ic7/UVe6vC0vsvZXlaIMv 4ZxNw/a+znxz/nrULG+D72gKh8sVbGSi81R0nQH6c4oZfY6RIrDFp8Iz5+bSSR36 HgM/sYReOJe8+maD9FwKks3FiYjMrts1kDgD3eGmnN1rPBHiAIoyFck1pMfD/dz7 FiQJE7MEMKUUU+D3R8WYLQUTwNm9i2y4WTXUl+rxLWszNSoQuMLASgbsmmWBcahI 4mXfSDjo1U3FzldJrJlBZKYu2atDf5Zf//Teh5zHxB8BZzuuAwm01P5OR32N5g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:52:46 2025 by rpki-client