This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336330303a3a2f34382d3438203d3e20323733313737.roa File: 323830333a636135303a336330303a3a2f34382d3438203d3e20323733313737.roa (raw, json) Hash identifier: jae6QKFxyYk2kGjr21O31eMgeVTSBISQUqjex9Qfq28= Subject key identifier: 72:4F:E2:04:11:C7:A4:EB:5D:E4:72:D0:05:B8:0E:6C:2D:B0:D4:62 Certificate issuer: /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Certificate serial: 66C655326A8B22891489D92005260C4AA1A0FCC6 Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336330303a3a2f34382d3438203d3e20323733313737.roa Signing time: Wed 12 Nov 2025 20:52:26 +0000 ROA not before: Wed 12 Nov 2025 20:47:26 +0000 ROA not after: Wed 11 Nov 2026 20:52:26 +0000 asID: 273177 IP address blocks: 2803:ca50:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 11:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:55:32:6a:8b:22:89:14:89:d9:20:05:26:0c:4a:a1:a0:fc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Validity Not Before: Nov 12 20:47:26 2025 GMT Not After : Nov 11 20:52:26 2026 GMT Subject: CN=724FE20411C7A4EB5DE472D005B80E6C2DB0D462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:a3:45:25:8b:74:37:af:2b:27:a8:4e:46: fe:a6:02:66:22:a9:bf:3c:14:f1:26:61:6d:09:47: 1b:e8:4a:98:2f:92:15:b3:58:57:54:4a:5f:4a:be: 45:76:f5:5e:ae:5a:4d:7c:7c:58:bf:af:ee:f2:d9: 72:65:bc:c7:97:18:16:6a:60:a0:67:9c:c0:fd:38: 4f:b0:2e:49:d1:00:31:79:c7:e3:b3:50:52:12:b3: 8b:16:e9:62:df:94:60:2a:f3:88:d4:6f:da:8c:07: 99:dd:37:fc:2f:2c:ae:2a:77:82:4c:d0:08:47:72: ae:86:e3:b8:ca:12:78:e1:d1:dd:27:fb:a8:99:17: e4:54:89:c0:96:99:6f:ea:d5:e7:0c:f6:dc:f6:02: fe:3a:f3:60:f7:a0:c2:cd:61:a1:e5:f2:72:e1:58: 39:25:b2:2c:69:2c:dc:3c:b7:8a:c0:98:8d:2d:3f: 7b:7c:8b:65:62:6e:29:d2:b4:84:9b:18:60:bc:64: 0e:3a:39:92:3c:f5:a7:b9:9a:68:1f:a6:7c:6f:31: 70:67:8f:1e:19:ec:45:55:cb:5c:4b:e7:18:9c:3f: 4f:fc:6e:70:80:d6:62:c8:5d:dc:8a:3f:59:73:1d: 04:e2:16:f1:6e:97:ea:8d:b6:75:b9:ce:09:23:72: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:E2:04:11:C7:A4:EB:5D:E4:72:D0:05:B8:0E:6C:2D:B0:D4:62 X509v3 Authority Key Identifier: keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336330303a3a2f34382d3438203d3e20323733313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca50:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 96:bc:15:75:9f:d8:04:c8:88:b4:74:cc:d8:b2:44:6f:40:9a: 04:e2:44:a7:4e:b6:e7:67:19:ab:08:c4:14:8a:43:c4:f4:80: 96:43:95:15:52:3d:51:45:21:51:87:e0:7a:64:6f:33:72:c0: 6c:ac:0a:bd:b2:15:c1:aa:e4:34:42:62:58:1a:d6:ff:b5:62: cc:d9:98:d9:c0:1e:35:4e:d7:02:75:ed:56:d4:6a:4d:99:e0: 2f:cc:fa:7b:b0:09:a4:a9:47:4c:e0:4f:cd:a9:5a:4c:92:ee: 49:c9:f1:11:e8:ab:49:e3:d5:24:18:ce:32:c1:8b:dd:0b:04: 19:09:04:3d:32:16:95:d7:bb:af:6b:d1:6d:85:1d:46:bb:0f: 45:7c:7e:d1:18:06:e0:f1:cd:3c:52:30:d6:12:1a:a7:e4:9e: d3:01:6c:74:0b:3b:b5:cd:26:87:80:17:bf:61:a6:c1:9b:c1: 88:1e:27:e6:e1:dc:65:cb:0e:5e:e3:07:88:e5:f3:78:fa:c8: 89:fd:a1:68:e5:b7:78:af:37:b1:05:48:6d:50:88:c4:b4:5d: 8b:2d:37:68:7d:df:22:23:1e:8e:90:29:99:db:7a:2a:ed:92: 3d:12:98:27:6c:c1:a2:25:96:99:3c:08:a6:25:12:8a:1a:1f: 8e:d8:61:3c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUZsZVMmqLIokUidkgBSYMSqGg/MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4 QTBDQkNENjAeFw0yNTExMTIyMDQ3MjZaFw0yNjExMTEyMDUyMjZaMDMxMTAvBgNV BAMTKDcyNEZFMjA0MTFDN0E0RUI1REU0NzJEMDA1QjgwRTZDMkRCMEQ0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEKNFJYt0N68rJ6hORv6mAmYi qb88FPEmYW0JRxvoSpgvkhWzWFdUSl9KvkV29V6uWk18fFi/r+7y2XJlvMeXGBZq YKBnnMD9OE+wLknRADF5x+OzUFISs4sW6WLflGAq84jUb9qMB5ndN/wvLK4qd4JM 0AhHcq6G47jKEnjh0d0n+6iZF+RUicCWmW/q1ecM9tz2Av4682D3oMLNYaHl8nLh WDklsixpLNw8t4rAmI0tP3t8i2VibinStISbGGC8ZA46OZI89ae5mmgfpnxvMXBn jx4Z7EVVy1xL5xicP0/8bnCA1mLIXdyKP1lzHQTiFvFul+qNtnW5zgkjcvu1AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUck/iBBHHpOtd5HLQBbgObC2w1GIwHwYDVR0j BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2 Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzM2 MzMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8pQPAAwDQYJKoZIhvcNAQELBQADggEBAJa8FXWf2ATIiLR0zNiyRG9A mgTiRKdOtudnGasIxBSKQ8T0gJZDlRVSPVFFIVGH4HpkbzNywGysCr2yFcGq5DRC Ylga1v+1YszZmNnAHjVO1wJ17VbUak2Z4C/M+nuwCaSpR0zgT82pWkyS7knJ8RHo q0nj1SQYzjLBi90LBBkJBD0yFpXXu69r0W2FHUa7D0V8ftEYBuDxzTxSMNYSGqfk ntMBbHQLO7XNJoeAF79hpsGbwYgeJ+bh3GXLDl7jB4jl83j6yIn9oWjlt3ivN7EF SG1QiMS0XYstN2h93yIjHo6QKZnbeirtkj0SmCdswaIllpk8CKYlEooaH47YYTw= -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:32 2025 by rpki-client