This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa File: 323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa (raw, json) Hash identifier: gxbfuP1eQb6D7myQwEiBNawoKaPBgLB2mXp44sNP9ug= Subject key identifier: B2:44:2D:1E:B6:69:C8:5F:A7:E9:FF:DF:7D:6D:67:14:28:E3:93:B5 Certificate issuer: /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395 Certificate serial: 20F744AC11BE8B946E24513316E144BA08CF5B93 Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa Signing time: Fri 12 Dec 2025 09:55:00 +0000 ROA not before: Fri 12 Dec 2025 09:50:00 +0000 ROA not after: Fri 11 Dec 2026 09:55:00 +0000 asID: 269918 IP address blocks: 2803:dd80:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 12:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:44:ac:11:be:8b:94:6e:24:51:33:16:e1:44:ba:08:cf:5b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395 Validity Not Before: Dec 12 09:50:00 2025 GMT Not After : Dec 11 09:55:00 2026 GMT Subject: CN=B2442D1EB669C85FA7E9FFDF7D6D671428E393B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:97:7d:17:3c:c0:25:8c:ec:14:1c:a5:78: 77:3e:35:48:2b:03:66:1f:a5:e8:3d:44:af:e1:86: b6:88:8f:10:07:43:40:01:9c:93:59:eb:e1:b7:9a: 6d:20:d2:63:d3:28:36:82:aa:e4:04:00:3e:8a:93: f8:77:86:70:44:c4:44:d5:04:ea:3b:f8:94:1f:73: 08:80:0c:88:d6:ac:30:71:2b:34:00:ff:70:41:fe: 72:f7:40:8f:66:7a:76:d8:4c:fe:fb:92:06:4c:21: 18:19:26:89:cc:2d:c6:80:77:7b:d0:9d:5d:dc:88: 54:43:ec:2a:99:d0:f0:ba:a5:aa:28:66:8c:2a:74: 4c:ce:a8:ae:23:21:73:52:10:29:e9:66:c0:c0:bb: e0:e8:46:65:d2:0b:c2:01:09:58:1f:5e:d4:9b:da: f3:63:bd:ef:69:39:08:b6:0f:18:ad:4b:93:2f:ef: f9:17:a5:44:8e:da:31:6c:dd:59:14:14:46:d0:1b: 5c:90:d1:39:66:d6:97:86:26:5f:b1:6b:ae:06:62: 19:b9:a6:92:5f:15:c7:ed:34:c6:fb:3f:83:82:a1: 4f:d2:75:37:f6:15:b6:9a:88:dd:15:d2:61:5e:15: 9d:85:2b:3a:5f:dc:ea:d0:18:ea:af:f5:4d:cd:bd: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:44:2D:1E:B6:69:C8:5F:A7:E9:FF:DF:7D:6D:67:14:28:E3:93:B5 X509v3 Authority Key Identifier: keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:dd80:f000::/36 Signature Algorithm: sha256WithRSAEncryption 53:c9:94:fc:e2:0d:9f:1d:e3:9b:01:ec:54:f9:88:e1:e7:0c: 97:7a:2f:c4:62:17:10:94:7c:22:7c:e9:f3:89:35:eb:5e:19: 03:26:57:04:3a:19:fc:75:01:79:c5:0f:4e:88:dc:ab:c4:8a: dc:aa:48:47:d2:56:1a:7a:04:e9:34:e1:4c:84:06:aa:9b:0d: 4e:bb:fd:3a:bb:e4:2e:50:a6:0d:81:89:ee:1c:17:c2:99:19: 8f:b1:47:67:5c:f1:a8:61:cc:ab:f4:62:33:5a:93:90:58:0d: c1:1e:1d:c0:09:37:c2:b8:24:e9:c6:de:d0:b0:13:5d:c4:1f: e0:2c:31:fb:f3:2b:15:c2:e9:fc:60:4e:12:59:e2:49:ff:89: 10:6d:46:9a:9b:65:4f:e8:84:ea:b5:d4:8f:01:62:bb:d8:57: 5e:00:af:dd:40:93:f4:63:3e:d8:a7:84:55:5b:11:50:ec:26: 19:a5:d2:b6:ef:53:37:10:3e:a5:d8:19:35:8e:ae:03:0d:51: 6a:50:f6:c0:67:1c:e0:06:bc:d2:a0:88:0c:a5:16:bf:50:bd: 5c:82:78:78:92:d4:1d:1f:f2:c9:5e:71:b9:56:c8:06:f4:cf: f2:7e:27:e6:ef:7c:2e:fc:0b:ce:9e:df:52:f5:cc:41:1d:d0: a7:1c:e3:49 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUIPdErBG+i5RuJFEzFuFEugjPW5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTREOTJFREJCRDRFQjlBQ0QxQTY3QjU4RkRDQjE5MDA0 OEIxRDM5NTAeFw0yNTEyMTIwOTUwMDBaFw0yNjEyMTEwOTU1MDBaMDMxMTAvBgNV BAMTKEIyNDQyRDFFQjY2OUM4NUZBN0U5RkZERjdENkQ2NzE0MjhFMzkzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHzJd9FzzAJYzsFByleHc+NUgr A2Yfpeg9RK/hhraIjxAHQ0ABnJNZ6+G3mm0g0mPTKDaCquQEAD6Kk/h3hnBExETV BOo7+JQfcwiADIjWrDBxKzQA/3BB/nL3QI9menbYTP77kgZMIRgZJonMLcaAd3vQ nV3ciFRD7CqZ0PC6paooZowqdEzOqK4jIXNSECnpZsDAu+DoRmXSC8IBCVgfXtSb 2vNjve9pOQi2DxitS5Mv7/kXpUSO2jFs3VkUFEbQG1yQ0Tlm1peGJl+xa64GYhm5 ppJfFcftNMb7P4OCoU/SdTf2FbaaiN0V0mFeFZ2FKzpf3OrQGOqv9U3NvUxbAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUskQtHrZpyF+n6f/ffW1nFCjjk7UwHwYDVR0j BBgwFoAUlNku271OuazRpntY/csZAEix05UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvOTREOTJFREJCRDRFQjlB Q0QxQTY3QjU4RkRDQjE5MDA0OEIxRDM5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEQ5MkVEQkJENEVCOUFDRDFB NjdCNThGRENCMTkwMDQ4QjFEMzk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMyMzgzMDMzM2E2NDY0MzgzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzOTMxMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA92A8DANBgkqhkiG9w0BAQsFAAOCAQEAU8mU/OINnx3jmwHsVPmI4ecM l3ovxGIXEJR8Inzp84k1614ZAyZXBDoZ/HUBecUPTojcq8SK3KpIR9JWGnoE6TTh TIQGqpsNTrv9OrvkLlCmDYGJ7hwXwpkZj7FHZ1zxqGHMq/RiM1qTkFgNwR4dwAk3 wrgk6cbe0LATXcQf4Cwx+/MrFcLp/GBOElniSf+JEG1GmptlT+iE6rXUjwFiu9hX XgCv3UCT9GM+2KeEVVsRUOwmGaXStu9TNxA+pdgZNY6uAw1RalD2wGcc4Aa80qCI DKUWv1C9XIJ4eJLUHR/yyV5xuVbIBvTP8n4n5u98LvwLzp7fUvXMQR3QpxzjSQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:58 2025 by rpki-client