This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa File: 323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa (raw, json) Hash identifier: OlIAmvkiaJlOtzhvvG4eF8Tb4t6gobfe3Jjbqw6Ap/g= Subject key identifier: 4B:5C:83:62:BE:B9:AC:17:7D:84:22:C1:8D:D0:2E:CB:88:BD:B8:A1 Certificate issuer: /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395 Certificate serial: 266182F99E7EFA1DB3A8CCA0F8417DE590E71CEA Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa Signing time: Fri 12 Dec 2025 09:55:00 +0000 ROA not before: Fri 12 Dec 2025 09:50:00 +0000 ROA not after: Fri 11 Dec 2026 09:55:00 +0000 asID: 269918 IP address blocks: 2803:dd80:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 12:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:61:82:f9:9e:7e:fa:1d:b3:a8:cc:a0:f8:41:7d:e5:90:e7:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395 Validity Not Before: Dec 12 09:50:00 2025 GMT Not After : Dec 11 09:55:00 2026 GMT Subject: CN=4B5C8362BEB9AC177D8422C18DD02ECB88BDB8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:55:7a:09:b9:a6:c9:52:ef:fd:fa:06:9f: 21:5b:97:30:73:bc:94:df:55:15:f8:fe:7e:c9:63: fb:1d:ea:e5:c5:44:b9:5a:b7:42:35:fb:22:2a:0a: 1f:4a:9b:b4:c9:d0:1a:5b:7b:20:db:b2:20:f8:ae: 9d:b4:22:cc:bb:54:24:45:dd:ac:eb:d6:93:3b:f3: 0b:8e:77:fa:e1:d8:17:68:81:c8:d9:1f:1e:7a:ee: a5:c6:ac:39:c2:a9:1e:a2:2c:57:0a:56:4c:47:ac: ba:39:9a:61:29:1e:10:72:c8:5a:b7:45:78:81:bc: f3:0d:fe:f0:26:9e:ac:4b:ba:9c:dd:cd:d4:78:3f: 4a:7f:18:04:ac:91:7f:99:3d:d9:cd:c7:df:7b:d1: af:9e:a0:fe:c1:78:25:64:46:e1:da:d9:62:cc:75: ae:8f:93:7c:a3:02:71:32:80:74:50:28:48:b4:1c: d0:cd:84:73:72:51:ae:86:9d:cf:4b:ce:10:c1:d7: e2:f7:8a:5a:11:fd:8f:c2:0f:f7:05:af:c4:79:b9: 22:74:c8:dd:c0:c7:af:75:6d:ae:60:ae:88:d0:07: 79:a3:61:e7:f0:94:bc:05:67:15:f1:e5:cc:07:72: 8b:c8:a8:87:10:a7:bb:8c:30:d7:b8:24:85:1a:7f: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:83:62:BE:B9:AC:17:7D:84:22:C1:8D:D0:2E:CB:88:BD:B8:A1 X509v3 Authority Key Identifier: keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:dd80:e000::/36 Signature Algorithm: sha256WithRSAEncryption 77:d9:90:5f:71:19:17:64:f4:fd:23:03:d4:06:9c:9e:37:89: 5d:bb:21:31:36:29:c5:46:c4:19:38:cc:5b:d9:73:8a:e7:33: 07:45:9c:07:05:9e:d3:e6:b8:bb:cc:c6:5c:54:cd:ee:07:b8: 97:4b:39:f1:72:f7:7c:27:76:de:d3:c1:d2:f3:04:5b:fd:be: 20:13:e4:88:69:53:d9:62:0e:d8:29:87:18:47:4e:99:09:3d: ae:a0:7f:0f:4c:23:1e:57:2d:5d:b1:c2:5a:88:c4:0a:33:01: a8:1f:cf:ed:d5:5f:5b:14:44:ed:46:0f:b0:f1:eb:63:f9:9c: 4f:bb:a1:d7:2d:22:d9:4c:a2:fa:dd:bf:db:cf:5c:17:41:43: c8:94:24:f7:66:94:da:89:5b:ce:27:e6:48:ff:9b:a5:5b:53: ee:4c:27:82:7e:ad:67:f7:df:a1:51:1f:d8:ad:65:9d:30:f0: 5f:61:d8:31:33:36:90:2b:b7:c5:4f:1f:8e:db:ca:c9:54:0c: 8d:73:32:0f:dc:68:a7:c1:3e:0a:2d:4b:f1:b4:fe:ee:1f:e4: 70:38:2b:63:b2:da:a0:45:a0:8c:2e:95:2d:a0:cf:56:f8:54: 68:11:5f:6a:a2:10:e1:7c:f1:eb:c0:13:c3:00:4f:d0:da:d6: 20:44:8c:67 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUJmGC+Z5++h2zqMyg+EF95ZDnHOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTREOTJFREJCRDRFQjlBQ0QxQTY3QjU4RkRDQjE5MDA0 OEIxRDM5NTAeFw0yNTEyMTIwOTUwMDBaFw0yNjEyMTEwOTU1MDBaMDMxMTAvBgNV BAMTKDRCNUM4MzYyQkVCOUFDMTc3RDg0MjJDMThERDAyRUNCODhCREI4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpy1V6CbmmyVLv/foGnyFblzBz vJTfVRX4/n7JY/sd6uXFRLlat0I1+yIqCh9Km7TJ0BpbeyDbsiD4rp20Isy7VCRF 3azr1pM78wuOd/rh2BdogcjZHx567qXGrDnCqR6iLFcKVkxHrLo5mmEpHhByyFq3 RXiBvPMN/vAmnqxLupzdzdR4P0p/GASskX+ZPdnNx9970a+eoP7BeCVkRuHa2WLM da6Pk3yjAnEygHRQKEi0HNDNhHNyUa6Gnc9LzhDB1+L3iloR/Y/CD/cFr8R5uSJ0 yN3Ax691ba5grojQB3mjYefwlLwFZxXx5cwHcovIqIcQp7uMMNe4JIUaf771AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUS1yDYr65rBd9hCLBjdAuy4i9uKEwHwYDVR0j BBgwFoAUlNku271OuazRpntY/csZAEix05UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvOTREOTJFREJCRDRFQjlB Q0QxQTY3QjU4RkRDQjE5MDA0OEIxRDM5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEQ5MkVEQkJENEVCOUFDRDFB NjdCNThGRENCMTkwMDQ4QjFEMzk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMyMzgzMDMzM2E2NDY0MzgzMDNhNjUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzOTMxMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA92A4DANBgkqhkiG9w0BAQsFAAOCAQEAd9mQX3EZF2T0/SMD1AacnjeJ XbshMTYpxUbEGTjMW9lziuczB0WcBwWe0+a4u8zGXFTN7ge4l0s58XL3fCd23tPB 0vMEW/2+IBPkiGlT2WIO2CmHGEdOmQk9rqB/D0wjHlctXbHCWojECjMBqB/P7dVf WxRE7UYPsPHrY/mcT7uh1y0i2Uyi+t2/289cF0FDyJQk92aU2olbzifmSP+bpVtT 7kwngn6tZ/ffoVEf2K1lnTDwX2HYMTM2kCu3xU8fjtvKyVQMjXMyD9xop8E+Ci1L 8bT+7h/kcDgrY7LaoEWgjC6VLaDPVvhUaBFfaqIQ4Xzx68ATwwBP0NrWIESMZw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:57 2025 by rpki-client