This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa File: 323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa (raw, json) Hash identifier: 4NpGcVo/GmqYCZAEXEBmRCCqMMhubYg0CcjQA1qqh4c= Subject key identifier: 5C:24:BF:BE:05:E4:34:4D:24:DC:54:57:E0:FB:1E:B7:A8:5C:57:39 Certificate issuer: /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D Certificate serial: 69A1526A9833245DC90C4885044C6F5475856643 Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa Signing time: Mon 10 Nov 2025 13:52:08 +0000 ROA not before: Mon 10 Nov 2025 13:47:08 +0000 ROA not after: Mon 09 Nov 2026 13:52:08 +0000 asID: 266809 IP address blocks: 2803:60a0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 03:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a1:52:6a:98:33:24:5d:c9:0c:48:85:04:4c:6f:54:75:85:66:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D Validity Not Before: Nov 10 13:47:08 2025 GMT Not After : Nov 9 13:52:08 2026 GMT Subject: CN=5C24BFBE05E4344D24DC5457E0FB1EB7A85C5739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:fa:e3:4f:3b:d5:67:2a:e8:60:64:cc:47: 4c:0c:50:f3:5c:8d:d2:49:72:27:64:a2:92:6d:d3: 3b:44:92:a0:8d:20:57:15:72:f7:85:90:51:1a:ec: 82:b7:73:cf:86:8f:06:42:9e:30:f3:8e:b8:51:0e: 92:1b:54:cf:a2:25:30:ae:bc:22:2c:a0:d1:f2:5f: 1a:e8:9d:a1:12:6d:61:c4:29:93:31:b6:2c:c9:1b: 9c:f2:44:2c:12:17:dd:13:30:f4:48:9a:a8:d0:b2: d3:5c:4b:44:6b:1a:b7:e3:4c:8e:15:c7:c1:f2:d5: 33:11:23:02:c0:f1:03:95:0f:5b:1b:f5:84:ea:ce: 11:34:89:bb:c8:5b:5e:3d:bf:76:06:e2:dc:b0:6a: 08:86:87:41:ef:6b:7a:e3:1d:c9:0b:15:2e:86:88: c7:e7:be:44:a9:f6:de:e2:47:24:ed:37:cc:c7:ad: ff:99:13:98:c9:69:57:db:ae:4e:14:55:43:13:1e: 31:f9:dd:32:2b:8d:9b:91:47:42:dc:e9:b4:29:50: 79:d1:b1:c4:23:1c:9f:d5:c0:38:f0:f9:e0:85:0d: 50:f1:18:6a:4f:f6:6d:4c:73:ce:84:ad:db:75:ea: 88:0d:f9:88:86:09:74:e1:66:ef:f8:5f:8b:48:53: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:24:BF:BE:05:E4:34:4D:24:DC:54:57:E0:FB:1E:B7:A8:5C:57:39 X509v3 Authority Key Identifier: keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a313030303a3a2f33362d3336203d3e20323636383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:60a0:1000::/36 Signature Algorithm: sha256WithRSAEncryption bc:fa:fa:0c:d2:0c:07:36:ea:af:de:19:2a:fc:f7:7e:a6:43: 05:59:94:42:3e:0d:86:69:4f:93:4b:38:72:b5:19:52:5c:ae: 82:38:b4:54:90:33:31:3c:6e:77:b3:7e:6d:9f:9b:67:a8:b0: 19:6b:f1:47:35:1f:48:47:a6:bc:d7:9c:46:bb:f5:e6:df:35: 27:a0:19:bd:87:e8:b2:11:32:da:8e:a4:e6:87:61:de:f0:11: 7f:56:f5:34:41:64:43:04:4e:3c:3d:82:a0:e9:ff:60:fe:68: 16:f8:04:aa:a1:79:e0:e4:62:41:8b:f1:3b:d0:66:59:59:b7: 20:6a:1a:5b:7b:1a:5e:7e:7f:8a:dc:26:50:84:bf:a1:68:46: 7c:0d:e5:05:09:2c:94:e1:3d:9c:01:27:ae:97:05:7e:89:af: 80:fb:7a:df:98:a6:8c:bb:15:31:99:7d:91:c0:87:b1:a1:90: a3:6a:e0:50:b8:12:ee:ed:a5:09:ba:29:09:a9:da:45:76:43: 00:69:0f:c4:7b:d9:10:cb:a0:8d:07:52:bf:92:66:0c:4b:56: d4:32:a9:4e:4b:1d:92:85:ee:8a:b7:f9:d2:69:d7:df:7f:99: 21:d3:59:f0:b4:00:5a:97:d6:2a:b1:eb:af:28:1f:5e:44:3a: 4e:eb:48:1d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUaaFSapgzJF3JDEiFBExvVHWFZkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2MTAwQzFFQjNBOUNFQjk0RTQ1NTBCREI5OTdCN0Iz REY5QkM5RDAeFw0yNTExMTAxMzQ3MDhaFw0yNjExMDkxMzUyMDhaMDMxMTAvBgNV BAMTKDVDMjRCRkJFMDVFNDM0NEQyNERDNTQ1N0UwRkIxRUI3QTg1QzU3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqivrjTzvVZyroYGTMR0wMUPNc jdJJcidkopJt0ztEkqCNIFcVcveFkFEa7IK3c8+GjwZCnjDzjrhRDpIbVM+iJTCu vCIsoNHyXxronaESbWHEKZMxtizJG5zyRCwSF90TMPRImqjQstNcS0RrGrfjTI4V x8Hy1TMRIwLA8QOVD1sb9YTqzhE0ibvIW149v3YG4tywagiGh0Hva3rjHckLFS6G iMfnvkSp9t7iRyTtN8zHrf+ZE5jJaVfbrk4UVUMTHjH53TIrjZuRR0Lc6bQpUHnR scQjHJ/VwDjw+eCFDVDxGGpP9m1Mc86Erdt16ogN+YiGCXThZu/4X4tIU9n9AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUXCS/vgXkNE0k3FRX4Pset6hcVzkwHwYDVR0j BBgwFoAUImEAwes6nOuU5FUL25l7ez35vJ0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENUYxMUJFRDAyN0M0QUM0MEE4Mzc2QzdCNDcyMTY2RkYx MkY2MkMyNTBCOEIzQTg0Nzk5NUFDQzQwNThBMzhDLzAvMjI2MTAwQzFFQjNBOUNF Qjk0RTQ1NTBCREI5OTdCN0IzREY5QkM5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjYxMDBDMUVCM0E5Q0VCOTRF NDU1MEJEQjk5N0I3QjNERjlCQzlELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDVGMTFCRUQwMjdDNEFDNDBBODM3NkM3QjQ3MjE2NkZGMTJGNjJDMjUw QjhCM0E4NDc5OTVBQ0M0MDU4QTM4Qy8wLzMyMzgzMDMzM2EzNjMwNjEzMDNhMzEz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA2CgEDANBgkqhkiG9w0BAQsFAAOCAQEAvPr6DNIMBzbqr94ZKvz3fqZD BVmUQj4NhmlPk0s4crUZUlyugji0VJAzMTxud7N+bZ+bZ6iwGWvxRzUfSEemvNec Rrv15t81J6AZvYfoshEy2o6k5odh3vARf1b1NEFkQwROPD2CoOn/YP5oFvgEqqF5 4ORiQYvxO9BmWVm3IGoaW3saXn5/itwmUIS/oWhGfA3lBQkslOE9nAEnrpcFfomv gPt635imjLsVMZl9kcCHsaGQo2rgULgS7u2lCbopCanaRXZDAGkPxHvZEMugjQdS v5JmDEtW1DKpTksdkoXuirf50mnX33+ZIdNZ8LQAWpfWKrHrrygfXkQ6TutIHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:38:08 2025 by rpki-client