This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/323830363a3432643a3a2f33322d3332203d3e20323732343039.roa File: 323830363a3432643a3a2f33322d3332203d3e20323732343039.roa (raw, json) Hash identifier: uN6tty7mkQaQxkU5KfULDNMRU1kOAAd04903zpBkwZs= Subject key identifier: 0C:B9:8E:81:35:68:1E:CE:67:25:F2:84:2C:71:4D:4F:C1:37:2E:8C Certificate issuer: /CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Certificate serial: 4F6A75EC3B5CF80055B7FDC43540D29A7D8224AE Authority key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/323830363a3432643a3a2f33322d3332203d3e20323732343039.roa Signing time: Thu 11 Dec 2025 05:35:00 +0000 ROA not before: Thu 11 Dec 2025 05:30:00 +0000 ROA not after: Thu 10 Dec 2026 05:35:00 +0000 asID: 272409 IP address blocks: 2806:42d::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 13:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:6a:75:ec:3b:5c:f8:00:55:b7:fd:c4:35:40:d2:9a:7d:82:24:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Validity Not Before: Dec 11 05:30:00 2025 GMT Not After : Dec 10 05:35:00 2026 GMT Subject: CN=0CB98E8135681ECE6725F2842C714D4FC1372E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:45:38:19:f2:57:d8:d2:a1:db:a3:69:8b: 44:b1:b2:e6:d4:ca:2e:60:9c:ed:0a:c0:e4:c0:33: 21:45:23:01:93:4d:01:24:bb:c6:8f:98:a8:ac:7c: 8b:72:3d:e9:d1:38:f8:a8:a0:9f:94:84:aa:8d:e6: 1a:68:4d:c3:f3:5e:f3:03:40:75:5b:fc:05:91:af: f6:9d:53:93:44:96:16:d7:fb:5b:b0:ee:90:20:62: 0a:3a:19:5b:23:d7:c3:38:8f:cf:3b:9e:5c:e6:1c: 42:11:63:6a:a3:3e:d3:a2:24:a5:54:4e:c3:5b:82: 90:b2:12:37:02:15:27:0e:5e:a8:a0:51:ae:55:a9: da:08:d4:9a:21:95:11:c3:1f:1b:b3:90:cc:26:ea: ae:0b:e1:94:23:3c:c9:c9:79:fa:5d:2b:3b:ff:4f: 0b:93:cf:db:45:95:45:8d:ab:7b:43:3d:0b:e7:4c: 51:b1:08:14:8d:fa:3e:68:ef:3a:a0:66:73:95:d9: e6:41:d4:c2:fb:cb:a7:4b:06:4f:b0:99:80:b3:00: 88:cf:48:92:fa:e4:f5:03:cb:b3:fa:9f:7d:30:2c: 61:c5:8a:62:14:9f:ac:98:86:25:0e:5e:cb:a0:59: 5e:e9:3d:f0:67:c6:ad:c6:97:69:62:e4:30:34:6b: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B9:8E:81:35:68:1E:CE:67:25:F2:84:2C:71:4D:4F:C1:37:2E:8C X509v3 Authority Key Identifier: keyid:64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/323830363a3432643a3a2f33322d3332203d3e20323732343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:42d::/32 Signature Algorithm: sha256WithRSAEncryption 75:39:28:ab:50:9e:88:e8:39:0d:3e:7b:55:70:0c:14:77:25: 88:25:ad:be:7a:4a:77:20:d6:1d:10:1f:f0:f4:ed:61:7e:12: 3d:f7:42:b5:c6:39:73:40:c5:c4:1d:6e:d9:9e:b6:53:54:a7: 50:ff:e8:91:63:6b:92:30:55:60:77:70:6c:ec:cf:3c:27:12: fd:ea:d9:3f:4f:c3:cc:d1:c2:4f:c8:51:c7:d4:8f:4a:8f:e3: fc:dc:23:3d:fa:65:2d:30:ad:1a:28:ef:ae:10:b0:5d:ed:16: 60:d0:1f:50:82:9d:0a:a1:2f:78:6c:4f:45:53:14:3a:bd:3d: 2f:4b:1f:4a:4e:19:7a:72:40:cc:eb:db:3d:a6:60:82:a0:c8: 85:2e:6d:7f:ae:2a:3c:a4:70:ba:66:d1:67:4b:f1:bf:03:0d: e0:c3:fd:08:d3:e0:92:56:a9:46:d7:f8:59:7f:2e:4b:d7:0e: c6:82:3d:e8:73:39:92:20:2a:45:96:f0:33:8c:ed:13:35:39: 9a:70:ef:c4:a1:6e:70:d0:7d:60:73:e1:21:77:e9:89:2a:f0: 4e:b6:c9:09:df:0d:bd:d0:82:7d:2c:8d:26:b0:d7:37:e2:bb: a5:67:e0:72:91:b7:58:44:5f:c4:4b:7b:2b:15:3c:7b:77:90: cd:61:6e:8c -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUT2p17Dtc+ABVt/3ENUDSmn2CJK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4RkI1MzVFRDhERjQ0NkQwMjdEMjNCQTA0RTZBQ0Y2 QUNCRkI3QzAeFw0yNTEyMTEwNTMwMDBaFw0yNjEyMTAwNTM1MDBaMDMxMTAvBgNV BAMTKDBDQjk4RTgxMzU2ODFFQ0U2NzI1RjI4NDJDNzE0RDRGQzEzNzJFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEf0U4GfJX2NKh26Npi0SxsubU yi5gnO0KwOTAMyFFIwGTTQEku8aPmKisfItyPenROPiooJ+UhKqN5hpoTcPzXvMD QHVb/AWRr/adU5NElhbX+1uw7pAgYgo6GVsj18M4j887nlzmHEIRY2qjPtOiJKVU TsNbgpCyEjcCFScOXqigUa5VqdoI1JohlRHDHxuzkMwm6q4L4ZQjPMnJefpdKzv/ TwuTz9tFlUWNq3tDPQvnTFGxCBSN+j5o7zqgZnOV2eZB1ML7y6dLBk+wmYCzAIjP SJL65PUDy7P6n30wLGHFimIUn6yYhiUOXsugWV7pPfBnxq3Gl2li5DA0awvXAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUDLmOgTVoHs5nJfKELHFNT8E3LowwHwYDVR0j BBgwFoAUZI+1Ne2N9EbQJ9I7oE5qz2rL+3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDg5RkFDRDAxODVDMDcyMTZGRjVDQkVCMzc5MTg2NzRE QTQ3OTdDQTYzRDhEOTM2MzhERTNGNEIyNUVGRURFLzAvNjQ4RkI1MzVFRDhERjQ0 NkQwMjdEMjNCQTA0RTZBQ0Y2QUNCRkI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDhGQjUzNUVEOERGNDQ2RDAy N0QyM0JBMDRFNkFDRjZBQ0JGQjdDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ4OUZBQ0QwMTg1QzA3MjE2RkY1Q0JFQjM3OTE4Njc0REE0Nzk3Q0E2 M0Q4RDkzNjM4REUzRjRCMjVFRkVERS8wLzMyMzgzMDM2M2EzNDMyNjQzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzIzNDMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgQtMA0G CSqGSIb3DQEBCwUAA4IBAQB1OSirUJ6I6DkNPntVcAwUdyWIJa2+ekp3INYdEB/w 9O1hfhI990K1xjlzQMXEHW7ZnrZTVKdQ/+iRY2uSMFVgd3Bs7M88JxL96tk/T8PM 0cJPyFHH1I9Kj+P83CM9+mUtMK0aKO+uELBd7RZg0B9Qgp0KoS94bE9FUxQ6vT0v Sx9KThl6ckDM69s9pmCCoMiFLm1/rio8pHC6ZtFnS/G/Aw3gw/0I0+CSVqlG1/hZ fy5L1w7Ggj3oczmSICpFlvAzjO0TNTmacO/EoW5w0H1gc+Ehd+mJKvBOtskJ3w29 0IJ9LI0msNc34rulZ+BykbdYRF/ES3srFTx7d5DNYW6M -----END CERTIFICATE-----Generated at Wed Dec 17 07:37:24 2025 by rpki-client