This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa File: 323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa (raw, json) Hash identifier: 4a0QfkKoVtc8UA3OMvAhREXCC7rFnbz9yWHnmYj6OIU= Subject key identifier: D3:BB:C1:B1:5F:5C:10:07:A8:93:7F:B7:B7:AD:81:26:67:78:DD:D9 Certificate issuer: /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Certificate serial: 018B32ED7EF1BC77752F7610BC7D8A359AC5389A Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa Signing time: Wed 12 Nov 2025 20:52:27 +0000 ROA not before: Wed 12 Nov 2025 20:47:27 +0000 ROA not after: Wed 11 Nov 2026 20:52:27 +0000 asID: 273177 IP address blocks: 2803:ca50:3f00::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 11:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:32:ed:7e:f1:bc:77:75:2f:76:10:bc:7d:8a:35:9a:c5:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6 Validity Not Before: Nov 12 20:47:27 2025 GMT Not After : Nov 11 20:52:27 2026 GMT Subject: CN=D3BBC1B15F5C1007A8937FB7B7AD81266778DDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:3a:c1:bb:f5:87:45:4d:87:70:59:d2:2b: 3d:ef:50:ef:22:4d:2d:24:cb:55:d0:48:f5:e7:5b: fc:54:e5:1c:19:ba:59:33:07:24:78:4e:10:08:ca: 5f:49:36:44:e7:7b:c5:e0:2c:e8:4b:00:83:c6:30: 14:fe:df:ec:db:ff:b2:be:f6:a6:66:06:e0:b6:a8: ab:d8:fb:6d:85:5d:98:7f:16:a8:81:7f:f8:16:92: 6d:3e:7f:d8:87:b9:55:cf:f1:40:66:ce:20:bb:d9: 9a:66:6f:34:ae:2f:18:f9:52:4e:4e:0d:53:4d:5e: b4:cb:07:9e:d3:73:b4:5f:c2:f5:f1:15:d6:dd:53: 47:22:c2:f3:94:80:34:28:ae:06:ae:b2:f0:4d:9f: b2:49:ce:c0:7e:76:0b:af:da:72:cd:1b:0b:f7:91: f2:dc:34:9e:eb:f6:72:2b:70:d5:2f:e0:7e:20:6c: 38:38:2e:4d:94:cf:1c:10:98:f1:29:3f:c5:65:14: 5b:54:13:9c:e3:15:56:66:13:8c:09:c8:ec:cf:d8: 84:b6:74:5a:5e:e8:2f:4c:46:0d:b0:81:6b:f1:3d: 9a:4f:51:7e:81:c6:ac:e9:57:d2:57:a2:72:9a:4a: 45:c2:d1:44:29:db:1b:d6:f7:8a:bc:0c:7c:e9:15: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:C1:B1:5F:5C:10:07:A8:93:7F:B7:B7:AD:81:26:67:78:DD:D9 X509v3 Authority Key Identifier: keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca50:3f00::/48 Signature Algorithm: sha256WithRSAEncryption 78:ab:82:60:01:de:e2:94:da:86:ae:23:2f:a4:c9:a8:e1:38: c1:ba:8b:e8:3f:f6:fc:f3:6e:0b:56:a9:d8:24:b2:d3:98:b7: e9:bd:70:ce:3d:e1:c4:22:d1:bf:d7:11:9a:ca:98:03:cc:9b: 57:86:62:a9:03:29:b6:d2:e0:d0:d7:0c:a6:5b:5a:2d:b5:86: ee:af:c6:a2:d0:59:b4:57:ef:1d:ff:3e:9f:b7:7e:69:96:9a: 28:d8:ef:6f:6b:d3:77:a1:70:7f:4f:ba:7c:86:1e:cd:b2:0a: a3:34:28:d0:e2:96:42:a7:a9:bc:c1:3b:42:3a:ba:a0:24:5e: cd:ff:33:5f:11:fb:58:e8:9f:4d:e6:d1:46:8a:9a:ab:aa:91: 05:6a:38:66:eb:09:25:27:55:e6:05:9c:fe:95:7d:7e:64:05: 6a:5c:f4:63:ab:4f:68:b9:16:d5:3f:52:fd:1f:bf:04:c7:a6: be:e2:d1:1d:19:35:1d:d8:e8:94:e7:51:e6:69:dc:d8:50:4b: 26:d7:fb:b5:a6:96:71:32:f3:3a:42:37:e5:a3:5c:7b:eb:61: a4:b3:19:1a:ad:0c:b5:46:ec:d2:1d:a2:be:ba:b1:23:3a:05: e0:8d:35:10:0a:ca:05:13:23:44:5d:08:34:89:61:51:34:43: 9e:49:8b:f3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUAYsy7X7xvHd1L3YQvH2KNZrFOJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxM0MyNjBGNTZCRjdCMUUyQjczMjNGNDdCMzI2RkI4 QTBDQkNENjAeFw0yNTExMTIyMDQ3MjdaFw0yNjExMTEyMDUyMjdaMDMxMTAvBgNV BAMTKEQzQkJDMUIxNUY1QzEwMDdBODkzN0ZCN0I3QUQ4MTI2Njc3OERERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOZjrBu/WHRU2HcFnSKz3vUO8i TS0ky1XQSPXnW/xU5RwZulkzByR4ThAIyl9JNkTne8XgLOhLAIPGMBT+3+zb/7K+ 9qZmBuC2qKvY+22FXZh/FqiBf/gWkm0+f9iHuVXP8UBmziC72ZpmbzSuLxj5Uk5O DVNNXrTLB57Tc7RfwvXxFdbdU0ciwvOUgDQorgausvBNn7JJzsB+dguv2nLNGwv3 kfLcNJ7r9nIrcNUv4H4gbDg4Lk2UzxwQmPEpP8VlFFtUE5zjFVZmE4wJyOzP2IS2 dFpe6C9MRg2wgWvxPZpPUX6BxqzpV9JXonKaSkXC0UQp2xvW94q8DHzpFam9AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU07vBsV9cEAeok3+3t62BJmd43dkwHwYDVR0j BBgwFoAUuRPCYPVr97HitzI/R7Mm+4oMvNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkY3QjdGNTc3MEM0RUREN0Q2QjhFNEVFMDFDM0E0QjVC OTJFOTlDNzY2Nzg4RDczMzBFNkMyNzZDMEYzMDg4LzAvQjkxM0MyNjBGNTZCRjdC MUUyQjczMjNGNDdCMzI2RkI4QTBDQkNENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTEzQzI2MEY1NkJGN0IxRTJC NzMyM0Y0N0IzMjZGQjhBMENCQ0Q2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZGN0I3RjU3NzBDNEVERDdENkI4RTRFRTAxQzNBNEI1QjkyRTk5Qzc2 Njc4OEQ3MzMwRTZDMjc2QzBGMzA4OC8wLzMyMzgzMDMzM2E2MzYxMzUzMDNhMzM2 NjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM3Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8pQPwAwDQYJKoZIhvcNAQELBQADggEBAHirgmAB3uKU2oauIy+kyajh OMG6i+g/9vzzbgtWqdgkstOYt+m9cM494cQi0b/XEZrKmAPMm1eGYqkDKbbS4NDX DKZbWi21hu6vxqLQWbRX7x3/Pp+3fmmWmijY729r03ehcH9PunyGHs2yCqM0KNDi lkKnqbzBO0I6uqAkXs3/M18R+1jon03m0UaKmquqkQVqOGbrCSUnVeYFnP6VfX5k BWpc9GOrT2i5FtU/Uv0fvwTHpr7i0R0ZNR3Y6JTnUeZp3NhQSybX+7WmlnEy8zpC N+WjXHvrYaSzGRqtDLVG7NIdor66sSM6BeCNNRAKygUTI0RdCDSJYVE0Q55Ji/M= -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:31 2025 by rpki-client