This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa File: 323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa (raw, json) Hash identifier: Ee7fYU7AkLaPl431+4ccVap1noNGtIMgp4aFlNWUY9I= Subject key identifier: 24:D1:E2:3E:A4:32:41:A4:F4:16:17:20:12:39:42:9A:49:92:59:C0 Certificate issuer: /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Certificate serial: 57F6A54A4B90ED5C54D149EB6C11D1A15B65E74B Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa Signing time: Wed 12 Nov 2025 20:52:24 +0000 ROA not before: Wed 12 Nov 2025 20:47:24 +0000 ROA not after: Wed 11 Nov 2026 20:52:24 +0000 asID: 273177 IP address blocks: 2803:ca50:2c02::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 11:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f6:a5:4a:4b:90:ed:5c:54:d1:49:eb:6c:11:d1:a1:5b:65:e7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Validity Not Before: Nov 12 20:47:24 2025 GMT Not After : Nov 11 20:52:24 2026 GMT Subject: CN=24D1E23EA43241A4F41617201239429A499259C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:a8:c6:34:fa:3e:1f:1c:51:6e:01:33:78: b9:d4:ad:91:16:0c:85:f2:e9:aa:4c:ef:6f:b2:ef: 70:06:39:ca:09:dc:8a:6f:03:24:ac:87:32:3e:25: 97:3d:88:66:3a:ac:72:4f:f2:f5:8a:f2:98:68:41: c4:66:0b:ee:05:3b:bc:77:c9:95:c1:c2:19:65:c2: db:26:e3:90:3b:0c:ae:6b:3d:98:a5:dd:2c:36:9d: 80:47:65:93:5c:d5:d2:77:87:d9:4d:c9:82:80:65: 2e:de:da:10:80:fd:64:e3:f2:b9:b6:9a:d9:22:1f: 64:c1:bd:e6:90:e6:86:08:4d:73:d4:08:35:f2:8c: e0:59:6a:24:da:43:31:4d:c4:d8:e0:e2:ca:03:0d: 59:bd:09:79:c9:5a:5d:e0:d8:9f:b1:3b:e4:ea:79: 09:4d:17:0d:9f:e8:8b:e0:d8:22:b7:1f:f6:ff:62: 9f:5c:23:39:22:38:73:89:2e:16:9f:87:18:47:08: bc:d0:a5:da:c1:05:18:60:ed:c6:60:33:94:58:31: 07:14:76:73:d4:aa:cb:ff:16:04:a7:2e:9c:af:3b: f2:c0:f2:bb:94:fc:23:b4:0d:e8:7e:e9:53:36:ab: 62:b6:d7:35:e8:74:f9:6c:8a:8f:f5:ce:1e:ad:ec: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D1:E2:3E:A4:32:41:A4:F4:16:17:20:12:39:42:9A:49:92:59:C0 X509v3 Authority Key Identifier: keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca50:2c02::/48 Signature Algorithm: sha256WithRSAEncryption af:f1:f2:45:82:f3:79:70:97:9f:12:a5:0b:68:f2:6e:59:6b: 0d:1a:1a:10:ef:26:d9:bb:ae:72:24:ad:75:c6:e5:fe:68:1c: 7b:cc:a4:ed:4d:ed:0a:5d:aa:c2:7d:61:34:9d:a2:c8:86:d7: 14:d4:4e:50:34:0b:9b:f0:7b:56:5b:7e:c0:88:2e:ea:7d:de: 9a:fa:57:31:4e:de:d5:30:b9:c9:ae:70:f8:3f:6e:26:95:7c: c2:09:cb:bd:c5:f6:55:de:b5:de:35:a1:4c:c0:f9:df:c1:ac: dc:3f:cb:9b:7e:e2:56:8d:9d:22:87:ad:5c:29:c9:37:18:3f: 2e:fa:9a:fa:fe:30:6d:b9:eb:b0:c0:d0:10:81:a9:4c:ea:66: a7:e0:aa:92:44:cb:ea:6c:4e:8e:05:b1:81:0b:97:43:0a:d2: 00:16:5b:ee:38:c3:e8:30:ae:bc:7b:1b:5c:c3:44:4e:3a:f9: 1e:91:f0:f4:f3:64:3d:48:3c:8e:78:cc:2d:4f:93:d7:71:bc: ce:c5:0b:82:e4:0f:4c:00:b8:e2:71:cb:3f:c4:66:a2:71:f3: db:51:af:e5:87:47:ff:b9:82:43:77:3d:92:73:34:af:34:95: 7b:af:1c:de:60:da:d0:4c:cb:53:ed:21:91:5a:54:09:b3:6f: f6:45:c2:b4 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUV/alSkuQ7VxU0UnrbBHRoVtl50swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4 QTBDQkNENjAeFw0yNTExMTIyMDQ3MjRaFw0yNjExMTEyMDUyMjRaMDMxMTAvBgNV BAMTKDI0RDFFMjNFQTQzMjQxQTRGNDE2MTcyMDEyMzk0MjlBNDk5MjU5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSajGNPo+HxxRbgEzeLnUrZEW DIXy6apM72+y73AGOcoJ3IpvAySshzI+JZc9iGY6rHJP8vWK8phoQcRmC+4FO7x3 yZXBwhllwtsm45A7DK5rPZil3Sw2nYBHZZNc1dJ3h9lNyYKAZS7e2hCA/WTj8rm2 mtkiH2TBveaQ5oYITXPUCDXyjOBZaiTaQzFNxNjg4soDDVm9CXnJWl3g2J+xO+Tq eQlNFw2f6Ivg2CK3H/b/Yp9cIzkiOHOJLhafhxhHCLzQpdrBBRhg7cZgM5RYMQcU dnPUqsv/FgSnLpyvO/LA8ruU/CO0Deh+6VM2q2K21zXodPlsio/1zh6t7JDLAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUJNHiPqQyQaT0FhcgEjlCmkmSWcAwHwYDVR0j BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2 Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzI2 MzMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8pQLAIwDQYJKoZIhvcNAQELBQADggEBAK/x8kWC83lwl58SpQto8m5Z aw0aGhDvJtm7rnIkrXXG5f5oHHvMpO1N7QpdqsJ9YTSdosiG1xTUTlA0C5vwe1Zb fsCILup93pr6VzFO3tUwucmucPg/biaVfMIJy73F9lXetd41oUzA+d/BrNw/y5t+ 4laNnSKHrVwpyTcYPy76mvr+MG2567DA0BCBqUzqZqfgqpJEy+psTo4FsYELl0MK 0gAWW+44w+gwrrx7G1zDRE46+R6R8PTzZD1IPI54zC1Pk9dxvM7FC4LkD0wAuOJx yz/EZqJx89tRr+WHR/+5gkN3PZJzNK80lXuvHN5g2tBMy1PtIZFaVAmzb/ZFwrQ= -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:32 2025 by rpki-client