This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330313a3a2f34382d3438203d3e20323733313737.roa File: 323830333a636135303a326330313a3a2f34382d3438203d3e20323733313737.roa (raw, json) Hash identifier: Ft8NA+CQA+cm3gDHa/Dk1tvghnG1Fk7sIhJrup8Sclg= Subject key identifier: A9:E3:A1:65:8B:84:1B:CF:9C:A8:D0:A5:AB:16:10:E8:73:90:99:F3 Certificate issuer: /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Certificate serial: 7DA1B6DB1A24649BB7AE2281B7A5898559EABB40 Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330313a3a2f34382d3438203d3e20323733313737.roa Signing time: Wed 12 Nov 2025 20:52:25 +0000 ROA not before: Wed 12 Nov 2025 20:47:25 +0000 ROA not after: Wed 11 Nov 2026 20:52:25 +0000 asID: 273177 IP address blocks: 2803:ca50:2c01::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 11:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a1:b6:db:1a:24:64:9b:b7:ae:22:81:b7:a5:89:85:59:ea:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Validity Not Before: Nov 12 20:47:25 2025 GMT Not After : Nov 11 20:52:25 2026 GMT Subject: CN=A9E3A1658B841BCF9CA8D0A5AB1610E8739099F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:fb:95:32:b8:75:4a:2a:18:ac:73:67:8a: 35:cc:66:ba:84:8f:6b:7c:6e:a2:84:4c:f4:45:d0: 14:66:45:e9:f4:bd:09:fb:f7:09:71:fe:0f:27:48: 77:80:9d:f7:c2:e3:48:83:8c:ea:98:b2:ee:09:e3: 4d:0b:d8:1e:14:01:f3:33:e6:06:7a:7e:97:4f:80: d6:10:37:0f:c2:c6:6d:55:92:e8:fb:2a:fc:54:95: 0b:82:34:89:7d:2b:d0:67:da:64:90:54:00:6b:3f: 1a:b9:ca:7d:c2:14:65:92:c2:57:37:90:0c:8a:49: 6b:f8:37:09:b0:33:a3:67:86:f9:80:81:88:2b:98: 46:f8:b4:a7:fc:1d:8f:be:96:07:3a:05:ac:a0:af: 4f:2c:0f:cc:3a:25:f7:3e:17:85:e4:ff:6e:71:a4: 36:24:9a:a3:50:b3:95:37:3a:9a:c9:dd:9d:8a:be: ad:cd:80:94:fe:0a:90:1c:8f:77:40:c1:d9:2a:02: 93:2b:13:61:11:60:52:4a:9e:e1:28:fb:53:65:69: 6e:30:f6:38:b2:34:5b:0f:66:c2:9d:a9:cc:76:14: 8a:c7:35:49:be:ee:4d:86:49:ab:0e:b6:1f:b4:5b: d4:47:05:88:bf:9b:96:26:8a:28:a0:72:49:0e:e6: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:A1:65:8B:84:1B:CF:9C:A8:D0:A5:AB:16:10:E8:73:90:99:F3 X509v3 Authority Key Identifier: keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330313a3a2f34382d3438203d3e20323733313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca50:2c01::/48 Signature Algorithm: sha256WithRSAEncryption 42:58:f8:ed:9b:c0:d8:6a:b5:59:b4:87:c3:26:1b:70:39:3f: f3:72:a8:77:3c:0f:7c:85:6e:f7:31:26:5d:2c:51:c9:d6:0a: 1b:1b:45:31:a1:da:07:43:22:a7:fd:22:a7:9b:5c:1e:3c:f0: eb:98:87:a8:5a:14:d0:4d:18:ac:7a:3a:cb:59:c2:58:94:b0: a3:7f:f8:5e:5e:71:45:aa:d8:e9:ae:b3:d8:d0:50:fb:d1:90: de:cf:50:b9:23:55:53:55:9b:02:46:42:5d:42:3e:28:63:73: 3e:6d:42:52:4d:19:35:a3:10:25:4c:f7:cb:ac:0e:4a:8c:dc: de:59:ca:d5:10:88:ae:eb:a3:75:fa:6e:d9:74:c5:37:fe:70: 74:2d:0b:1e:09:51:9a:44:ec:ee:0c:01:16:1f:32:d7:3e:80: 19:6f:cf:4d:5d:23:77:59:4f:4a:24:cc:27:36:fa:2a:9c:e1: 13:4b:de:03:05:0e:37:74:4e:80:a4:0a:20:0f:90:9c:23:af: d5:bb:d9:23:72:6c:a4:a5:29:76:32:a0:25:2e:bf:de:ec:6f: 27:6b:d5:ac:e0:1c:11:25:69:b2:20:f6:6d:92:11:37:c1:f8: f5:75:1a:53:97:14:0d:97:e7:cd:4f:58:f6:3b:6c:e3:a1:60: bc:c5:53:2e -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUfaG22xokZJu3riKBt6WJhVnqu0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4 QTBDQkNENjAeFw0yNTExMTIyMDQ3MjVaFw0yNjExMTEyMDUyMjVaMDMxMTAvBgNV BAMTKEE5RTNBMTY1OEI4NDFCQ0Y5Q0E4RDBBNUFCMTYxMEU4NzM5MDk5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasfuVMrh1SioYrHNnijXMZrqE j2t8bqKETPRF0BRmRen0vQn79wlx/g8nSHeAnffC40iDjOqYsu4J400L2B4UAfMz 5gZ6fpdPgNYQNw/Cxm1Vkuj7KvxUlQuCNIl9K9Bn2mSQVABrPxq5yn3CFGWSwlc3 kAyKSWv4NwmwM6NnhvmAgYgrmEb4tKf8HY++lgc6Baygr08sD8w6Jfc+F4Xk/25x pDYkmqNQs5U3OprJ3Z2Kvq3NgJT+CpAcj3dAwdkqApMrE2ERYFJKnuEo+1NlaW4w 9jiyNFsPZsKdqcx2FIrHNUm+7k2GSasOth+0W9RHBYi/m5YmiiigckkO5rU1AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUqeOhZYuEG8+cqNClqxYQ6HOQmfMwHwYDVR0j BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2 Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzI2 MzMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8pQLAEwDQYJKoZIhvcNAQELBQADggEBAEJY+O2bwNhqtVm0h8MmG3A5 P/NyqHc8D3yFbvcxJl0sUcnWChsbRTGh2gdDIqf9IqebXB488OuYh6haFNBNGKx6 OstZwliUsKN/+F5ecUWq2Omus9jQUPvRkN7PULkjVVNVmwJGQl1CPihjcz5tQlJN GTWjECVM98usDkqM3N5ZytUQiK7ro3X6btl0xTf+cHQtCx4JUZpE7O4MARYfMtc+ gBlvz01dI3dZT0okzCc2+iqc4RNL3gMFDjd0ToCkCiAPkJwjr9W72SNybKSlKXYy oCUuv97sbydr1azgHBElabIg9m2SETfB+PV1GlOXFA2X581PWPY7bOOhYLzFUy4= -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:32 2025 by rpki-client