This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a383030313a3a2f34382d3634203d3e20323637393035.roa File: 323830333a333636303a383030313a3a2f34382d3634203d3e20323637393035.roa (raw, json) Hash identifier: isYcoIi12e/So/rJAQcW4ZdAuuchWkOVLxQdTLQU1hI= Subject key identifier: AF:95:6C:F2:EA:B0:A5:11:66:E6:88:91:0F:65:04:AB:14:15:D0:20 Certificate issuer: /CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B Certificate serial: 40F4D17D0878EE32E83764BAD8164E02F4995C3E Authority key identifier: 5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a383030313a3a2f34382d3634203d3e20323637393035.roa Signing time: Thu 06 Nov 2025 02:35:00 +0000 ROA not before: Thu 06 Nov 2025 02:30:00 +0000 ROA not after: Thu 05 Nov 2026 02:35:00 +0000 asID: 267905 IP address blocks: 2803:3660:8001::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 19:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f4:d1:7d:08:78:ee:32:e8:37:64:ba:d8:16:4e:02:f4:99:5c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B Validity Not Before: Nov 6 02:30:00 2025 GMT Not After : Nov 5 02:35:00 2026 GMT Subject: CN=AF956CF2EAB0A51166E688910F6504AB1415D020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:86:48:6c:d8:b0:30:81:40:0d:37:fd:d7: e6:0b:ad:b5:66:77:b2:dd:88:65:7d:4d:d9:18:61: 55:e4:31:25:f1:8c:b8:00:8b:ff:5a:6c:0e:be:9a: b9:9f:cf:ca:a7:0a:79:c5:f0:08:56:01:30:d5:16: 5c:a9:33:78:a4:1d:a1:e8:78:44:1c:bd:1e:82:5c: 36:fa:09:0f:bf:00:8a:b5:4d:d8:f8:9f:2f:d8:4a: 3d:15:9a:ce:b9:82:19:d9:1b:cd:0d:48:82:eb:6c: 5c:14:d6:a5:a6:49:84:1a:28:67:fc:b7:f7:a1:97: 20:70:29:e1:92:38:16:7c:53:90:ff:0e:96:0c:12: 9c:55:3f:b9:ae:e3:6a:8a:48:42:77:9d:22:98:10: fb:c3:6e:de:69:72:b5:35:0a:25:e8:89:e0:04:64: 7c:a1:26:67:64:ef:74:16:e7:f0:87:c8:42:f7:38: 1b:3c:46:a3:32:e5:86:2a:a4:80:a8:c5:99:59:fb: 83:6c:83:b2:f8:fd:3d:8e:2b:be:b6:79:a3:be:18: b6:9a:3e:5a:da:9d:81:f0:8f:a1:07:cc:41:8b:a9: bf:26:f4:b4:c7:e1:fb:35:9c:40:e3:6f:57:3b:d6: d9:72:e8:82:b6:41:a4:7f:2b:9a:14:76:91:76:15: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:95:6C:F2:EA:B0:A5:11:66:E6:88:91:0F:65:04:AB:14:15:D0:20 X509v3 Authority Key Identifier: keyid:5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a383030313a3a2f34382d3634203d3e20323637393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3660:8001::/48 Signature Algorithm: sha256WithRSAEncryption 63:60:18:04:c7:3c:da:0c:4c:d9:e9:75:04:32:ec:70:5c:d5: 6e:25:59:58:b3:2a:a6:be:c4:1d:82:30:c3:b8:43:dd:f4:ad: e3:72:64:43:d2:2f:ae:8b:03:df:15:5f:78:e2:d8:b3:ac:ab: 83:81:b8:5f:3b:8c:ff:f6:a0:38:ab:a8:50:3b:08:76:88:89: 1c:05:4d:00:4f:ad:64:0c:15:c8:1f:5a:cf:5c:e2:fe:43:31: 2f:01:4c:ea:85:2e:f1:06:46:4c:e7:dd:2e:87:84:d9:07:1b: d6:87:2d:1d:98:6f:e6:90:59:7c:56:a2:ed:28:ce:98:e9:68: d5:ce:2f:d3:d9:29:24:96:88:fa:13:a5:44:5f:0a:a7:10:33: 26:a2:83:34:0b:25:b7:b6:22:e6:a7:5f:46:10:f4:df:5f:d8: 22:71:c9:c1:64:2e:64:28:13:20:f5:35:b7:64:1d:bf:3f:05: 3e:28:40:d7:86:7f:1a:82:43:3e:31:02:bf:8e:a6:e2:63:6f: c9:59:54:c8:0b:2e:4f:8d:ca:80:00:a9:05:5d:05:22:fe:96: 60:c7:a1:22:a9:8e:c0:02:4b:0e:59:0c:41:e7:09:08:77:b4: 72:dc:82:12:62:4a:f2:8e:51:53:0b:68:10:1b:c5:62:b2:50: 14:02:bc:ad -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUQPTRfQh47jLoN2S62BZOAvSZXD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyMjRGREFFREQ1MTI2MzU4QUY5NEM2RkEwRDcxOEFD NkVFMUQ5QjAeFw0yNTExMDYwMjMwMDBaFw0yNjExMDUwMjM1MDBaMDMxMTAvBgNV BAMTKEFGOTU2Q0YyRUFCMEE1MTE2NkU2ODg5MTBGNjUwNEFCMTQxNUQwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5IZIbNiwMIFADTf91+YLrbVm d7LdiGV9TdkYYVXkMSXxjLgAi/9abA6+mrmfz8qnCnnF8AhWATDVFlypM3ikHaHo eEQcvR6CXDb6CQ+/AIq1Tdj4ny/YSj0Vms65ghnZG80NSILrbFwU1qWmSYQaKGf8 t/ehlyBwKeGSOBZ8U5D/DpYMEpxVP7mu42qKSEJ3nSKYEPvDbt5pcrU1CiXoieAE ZHyhJmdk73QW5/CHyEL3OBs8RqMy5YYqpICoxZlZ+4Nsg7L4/T2OK762eaO+GLaa PlranYHwj6EHzEGLqb8m9LTH4fs1nEDjb1c71tly6IK2QaR/K5oUdpF2FfALAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUr5Vs8uqwpRFm5oiRD2UEqxQV0CAwHwYDVR0j BBgwFoAUXiJP2u3VEmNYr5TG+g1xisbuHZswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GOUE3RURCOUFDQzZBMkM5MUVBOEVGNzgzMTUxMkMzQzE4 MUVBMzYxNDAxMjYzMENCRDFDMTE4RTE5Njg4Q0UyLzAvNUUyMjRGREFFREQ1MTI2 MzU4QUY5NEM2RkEwRDcxOEFDNkVFMUQ5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTIyNEZEQUVERDUxMjYzNThB Rjk0QzZGQTBENzE4QUM2RUUxRDlCLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjlBN0VEQjlBQ0M2QTJDOTFFQThFRjc4MzE1MTJDM0MxODFFQTM2MTQw MTI2MzBDQkQxQzExOEUxOTY4OENFMi8wLzMyMzgzMDMzM2EzMzM2MzYzMDNhMzgz MDMwMzEzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczOTMwMzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAzZggAEwDQYJKoZIhvcNAQELBQADggEBAGNgGATHPNoMTNnpdQQy7HBc 1W4lWVizKqa+xB2CMMO4Q930reNyZEPSL66LA98VX3ji2LOsq4OBuF87jP/2oDir qFA7CHaIiRwFTQBPrWQMFcgfWs9c4v5DMS8BTOqFLvEGRkzn3S6HhNkHG9aHLR2Y b+aQWXxWou0ozpjpaNXOL9PZKSSWiPoTpURfCqcQMyaigzQLJbe2IuanX0YQ9N9f 2CJxycFkLmQoEyD1NbdkHb8/BT4oQNeGfxqCQz4xAr+OpuJjb8lZVMgLLk+NyoAA qQVdBSL+lmDHoSKpjsACSw5ZDEHnCQh3tHLcghJiSvKOUVMLaBAbxWKyUBQCvK0= -----END CERTIFICATE-----Generated at Sun Dec 7 07:21:01 2025 by rpki-client