This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630313a3a2f34382d3438203d3e20323733313737.roa File: 323830333a636135303a316630313a3a2f34382d3438203d3e20323733313737.roa (raw, json) Hash identifier: 4iFMeN1ABgzki7EiIIrLyCewZA/90qkJBHJej3CZSUU= Subject key identifier: 0E:C8:2E:CF:70:8F:F0:5C:C1:77:85:E5:7E:52:1C:01:B4:3F:01:D0 Certificate issuer: /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Certificate serial: 732866494200AC4365CC7E617BF75BFC704CD84E Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630313a3a2f34382d3438203d3e20323733313737.roa Signing time: Wed 12 Nov 2025 20:52:25 +0000 ROA not before: Wed 12 Nov 2025 20:47:25 +0000 ROA not after: Wed 11 Nov 2026 20:52:25 +0000 asID: 273177 IP address blocks: 2803:ca50:1f01::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 11:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:28:66:49:42:00:ac:43:65:cc:7e:61:7b:f7:5b:fc:70:4c:d8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Validity Not Before: Nov 12 20:47:25 2025 GMT Not After : Nov 11 20:52:25 2026 GMT Subject: CN=0EC82ECF708FF05CC17785E57E521C01B43F01D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:fc:43:97:be:2a:4d:e9:c1:28:45:06:a6: 5b:87:c5:1a:38:69:68:b9:50:a6:7b:6b:6c:b7:98: f3:c3:b8:76:bd:cf:a2:92:5b:8f:d1:2d:a6:79:61: 4b:73:35:ba:73:0d:ca:cd:cc:14:22:f1:66:a9:f0: 89:fe:d9:32:16:1c:01:25:f6:82:02:d4:94:92:f2: 6a:16:91:1b:fc:49:e3:52:a2:46:78:9d:7d:c2:27: 67:8e:0d:da:b2:a4:9f:36:f7:a8:36:be:5f:78:84: 74:6a:f2:68:4d:b8:f9:12:33:af:dd:72:18:2a:4c: 24:93:25:d9:67:0d:76:da:69:c4:74:f5:0d:3b:0f: 13:79:c4:53:06:6e:9c:56:a8:e2:ab:4b:0c:c9:0e: 62:1a:bc:2c:54:82:1b:9b:d3:5e:b9:c7:85:97:54: cb:23:4c:fe:4b:8f:0b:b5:74:67:c6:b8:41:4f:d4: b3:20:78:10:3f:e7:3c:07:c8:6c:68:6b:88:6d:3f: 98:00:91:1b:e2:4c:95:ab:d7:fe:c9:b4:d6:9c:a9: df:48:99:56:dd:87:4b:13:cf:39:62:47:e2:66:64: d5:37:04:05:d0:43:9e:58:44:1d:81:f5:63:65:6d: 9d:d1:a8:27:f1:67:14:99:b1:c6:6d:a4:7e:04:83: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:2E:CF:70:8F:F0:5C:C1:77:85:E5:7E:52:1C:01:B4:3F:01:D0 X509v3 Authority Key Identifier: keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630313a3a2f34382d3438203d3e20323733313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca50:1f01::/48 Signature Algorithm: sha256WithRSAEncryption 82:2a:ee:6e:6f:8d:aa:9a:63:d8:b1:70:85:69:01:bc:0b:74: 90:17:b5:d9:e8:bf:4f:3f:62:46:95:91:8c:09:aa:04:9d:3e: b2:cb:8d:97:ce:0c:82:23:9c:8e:d1:a8:f5:98:6a:26:ac:0b: 57:a0:e2:60:86:d6:e2:95:b9:21:3c:48:de:84:0a:ac:8e:c7: aa:95:9a:d1:1c:88:39:fb:ee:f8:64:1b:ae:45:cb:19:4b:d3: 0f:3c:ec:4e:e6:18:ec:45:f3:63:35:54:b5:e0:a9:9a:2b:9d: a2:e1:68:64:a1:3a:5e:fa:20:95:07:5d:0d:f1:fe:a6:4c:29: eb:29:9b:3a:7d:7e:68:58:67:96:67:86:33:04:72:5e:4c:24: 01:b9:a2:e3:a5:3e:6b:62:4c:fc:9d:38:0b:c6:39:b7:fa:c5: da:99:f9:89:b4:4b:da:ff:55:40:c8:c4:26:16:4b:90:ca:39: c3:90:de:f1:34:4c:b6:52:95:83:e6:ef:9a:e9:50:7b:f7:63: c9:34:21:5b:46:c6:5d:49:f2:65:af:f2:ba:3c:08:18:1c:f0: d6:22:26:8d:79:8a:77:b7:d1:7f:27:bf:96:02:18:3f:bb:41: 3e:83:ab:62:bb:26:18:84:04:3d:5c:9c:4d:c5:f3:4a:6e:12: 73:5e:1b:9b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUcyhmSUIArENlzH5he/db/HBM2E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4 QTBDQkNENjAeFw0yNTExMTIyMDQ3MjVaFw0yNjExMTEyMDUyMjVaMDMxMTAvBgNV BAMTKDBFQzgyRUNGNzA4RkYwNUNDMTc3ODVFNTdFNTIxQzAxQjQzRjAxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17/xDl74qTenBKEUGpluHxRo4 aWi5UKZ7a2y3mPPDuHa9z6KSW4/RLaZ5YUtzNbpzDcrNzBQi8Wap8In+2TIWHAEl 9oIC1JSS8moWkRv8SeNSokZ4nX3CJ2eODdqypJ8296g2vl94hHRq8mhNuPkSM6/d chgqTCSTJdlnDXbaacR09Q07DxN5xFMGbpxWqOKrSwzJDmIavCxUghub0165x4WX VMsjTP5Ljwu1dGfGuEFP1LMgeBA/5zwHyGxoa4htP5gAkRviTJWr1/7JtNacqd9I mVbdh0sTzzliR+JmZNU3BAXQQ55YRB2B9WNlbZ3RqCfxZxSZscZtpH4Eg2UZAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUDsguz3CP8FzBd4XlflIcAbQ/AdAwHwYDVR0j BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2 Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzE2 NjMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8pQHwEwDQYJKoZIhvcNAQELBQADggEBAIIq7m5vjaqaY9ixcIVpAbwL dJAXtdnov08/YkaVkYwJqgSdPrLLjZfODIIjnI7RqPWYaiasC1eg4mCG1uKVuSE8 SN6ECqyOx6qVmtEciDn77vhkG65FyxlL0w887E7mGOxF82M1VLXgqZornaLhaGSh Ol76IJUHXQ3x/qZMKespmzp9fmhYZ5ZnhjMEcl5MJAG5ouOlPmtiTPydOAvGObf6 xdqZ+Ym0S9r/VUDIxCYWS5DKOcOQ3vE0TLZSlYPm75rpUHv3Y8k0IVtGxl1J8mWv 8ro8CBgc8NYiJo15ine30X8nv5YCGD+7QT6Dq2K7JhiEBD1cnE3F80puEnNeG5s= -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:32 2025 by rpki-client