This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa File: 323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa (raw, json) Hash identifier: Bpd0ZqBlcBZNg215pqCEYBGPS/8wTCZEwffTt91osX4= Subject key identifier: C3:E0:F2:34:63:07:B5:F6:EE:C9:2D:02:30:E7:C2:9C:69:2C:72:98 Certificate issuer: /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6 Certificate serial: 1EFE0D2EC0B2066DD9B21E189E596751692D5C01 Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa Signing time: Fri 14 Nov 2025 21:05:00 +0000 ROA not before: Fri 14 Nov 2025 21:00:00 +0000 ROA not after: Fri 13 Nov 2026 21:05:00 +0000 asID: 272816 IP address blocks: 2803:7f90:5900::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fe:0d:2e:c0:b2:06:6d:d9:b2:1e:18:9e:59:67:51:69:2d:5c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6 Validity Not Before: Nov 14 21:00:00 2025 GMT Not After : Nov 13 21:05:00 2026 GMT Subject: CN=C3E0F2346307B5F6EEC92D0230E7C29C692C7298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:85:2e:c9:72:11:7b:0e:33:3c:8d:e3:54: 27:26:42:8e:b3:59:d2:9a:f8:07:3b:25:04:5b:0d: 19:f8:49:87:f7:0b:32:8c:6e:ed:35:27:62:26:3d: 8f:0c:a4:38:ab:fe:2e:5c:ed:90:6f:b0:a5:d3:e9: c6:fc:6e:e7:ed:9f:4a:4b:14:fb:a2:f8:a0:dc:1c: 17:a2:b5:8f:f1:32:3c:fc:77:50:fc:55:40:5d:04: 4d:79:50:67:ea:30:3b:d7:8b:38:8c:5c:12:cd:ae: 23:91:66:f9:b8:52:b6:c4:e6:eb:96:4b:38:26:de: a7:cf:32:01:a9:48:d8:be:1c:d4:0c:a0:7a:6c:6b: b1:49:56:5d:a9:8a:90:c4:58:b3:e3:32:57:fa:8e: 74:01:4c:db:f5:36:5d:b9:82:85:a0:37:37:d2:22: 9f:16:82:cb:bd:83:76:98:42:47:80:0b:7b:fe:28: c6:97:10:02:49:39:24:cf:c5:cd:ea:bf:d2:33:b2: 6f:17:51:a3:c7:e0:7c:f6:f4:99:e9:12:10:e6:37: f0:70:30:0b:cb:14:6e:c6:4c:1e:4e:7e:f4:00:7f: 8d:06:49:75:c0:81:d7:38:0b:d3:66:f1:80:31:0a: 43:4f:ad:e7:23:87:68:24:d3:51:6b:50:bf:f2:0a: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:F2:34:63:07:B5:F6:EE:C9:2D:02:30:E7:C2:9C:69:2C:72:98 X509v3 Authority Key Identifier: keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353930303a3a2f34302d3430203d3e20323732383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7f90:5900::/40 Signature Algorithm: sha256WithRSAEncryption a7:0f:c7:98:dd:86:49:0a:23:c3:78:9e:c3:07:6e:bf:ca:68: d5:f9:e4:9b:55:27:56:0a:23:3a:11:6f:ae:2c:1a:a6:85:b7: 1f:33:81:a0:b2:02:e7:ae:12:18:ed:92:51:2b:a0:b4:66:01: 2b:f0:44:39:60:bd:f9:78:68:74:f4:a6:84:55:90:c1:09:e5: b5:07:eb:c3:ae:a6:c3:5e:8d:b9:7a:bd:38:3a:6c:27:2d:da: 31:fe:2c:99:a2:e8:2d:cd:09:93:28:15:94:23:1f:a3:30:d9: 28:16:d7:eb:06:b5:c6:20:a1:77:b9:7a:8d:56:f6:d6:45:92: 4a:93:14:39:08:81:09:77:9c:3a:f3:c1:fb:f4:31:31:b2:da: ab:cd:9d:35:56:a9:67:9e:72:44:b5:5a:fd:da:23:b0:a6:b3: 68:d1:52:cc:05:74:4c:b7:33:af:cd:a4:ae:5a:eb:56:f6:bd: cf:c6:c1:f3:72:4b:64:68:cb:01:1d:95:4d:9c:8c:39:88:09: 13:a0:0f:e7:3e:0f:c4:3a:9a:ec:73:38:89:86:a6:bd:8a:14: 14:29:bc:37:25:1b:59:74:e8:5c:e7:59:99:c5:5c:94:cc:e1: e7:5f:db:12:07:8b:d6:72:66:a6:2f:85:53:53:1a:58:01:df: b4:71:52:17 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHv4NLsCyBm3Zsh4YnllnUWktXAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTQzQzMzRDNFOUU0QzU3Njk5MjRGRjNFODRCQTk5 MDZBQjZCNjAeFw0yNTExMTQyMTAwMDBaFw0yNjExMTMyMTA1MDBaMDMxMTAvBgNV BAMTKEMzRTBGMjM0NjMwN0I1RjZFRUM5MkQwMjMwRTdDMjlDNjkyQzcyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC094UuyXIRew4zPI3jVCcmQo6z WdKa+Ac7JQRbDRn4SYf3CzKMbu01J2ImPY8MpDir/i5c7ZBvsKXT6cb8buftn0pL FPui+KDcHBeitY/xMjz8d1D8VUBdBE15UGfqMDvXiziMXBLNriORZvm4UrbE5uuW Szgm3qfPMgGpSNi+HNQMoHpsa7FJVl2pipDEWLPjMlf6jnQBTNv1Nl25goWgNzfS Ip8Wgsu9g3aYQkeAC3v+KMaXEAJJOSTPxc3qv9Izsm8XUaPH4Hz29JnpEhDmN/Bw MAvLFG7GTB5OfvQAf40GSXXAgdc4C9Nm8YAxCkNPrecjh2gk01FrUL/yCkINAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUw+DyNGMHtfbuyS0CMOfCnGkscpgwHwYDVR0j BBgwFoAUHo5Dwz0+nkxXaZJP8+hLqZBqtrYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTM2M0M0MjA4ODlFMDQ1ODgzMERCMjc1ODlDNzA3MDdC MzFEMzYzNjZCNDA1QzBERTIyMTVFM0M1OEQ0OUExLzAvMUU4RTQzQzMzRDNFOUU0 QzU3Njk5MjRGRjNFODRCQTk5MDZBQjZCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRThFNDNDMzNEM0U5RTRDNTc2 OTkyNEZGM0U4NEJBOTkwNkFCNkI2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUEzNjNDNDIwODg5RTA0NTg4MzBEQjI3NTg5QzcwNzA3QjMxRDM2MzY2 QjQwNUMwREUyMjE1RTNDNThENDlBMS8wLzMyMzgzMDMzM2EzNzY2MzkzMDNhMzUz OTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzODMxMzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA3+QWTANBgkqhkiG9w0BAQsFAAOCAQEApw/HmN2GSQojw3iewwduv8po 1fnkm1UnVgojOhFvriwapoW3HzOBoLIC564SGO2SUSugtGYBK/BEOWC9+XhodPSm hFWQwQnltQfrw66mw16NuXq9ODpsJy3aMf4smaLoLc0JkygVlCMfozDZKBbX6wa1 xiChd7l6jVb21kWSSpMUOQiBCXecOvPB+/QxMbLaq82dNVapZ55yRLVa/dojsKaz aNFSzAV0TLczr82krlrrVva9z8bB83JLZGjLAR2VTZyMOYgJE6AP5z4PxDqa7HM4 iYamvYoUFCm8NyUbWXToXOdZmcVclMzh51/bEgeL1nJmpi+FU1MaWAHftHFSFw== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:53 2025 by rpki-client