This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3438203d3e20323635383438.roa File: 323830333a346132303a3a2f33322d3438203d3e20323635383438.roa (raw, json) Hash identifier: lht6e9EhMwJ+EaxrB6aipbBelHpXI2dCPQ9d9c/l7pk= Subject key identifier: 08:2E:82:3E:07:19:9D:F5:94:3D:0E:68:AF:EF:7E:AC:80:3A:44:60 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 3DA4FBDC24D657AACFFBAD006A741929A51E4BF2 Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3438203d3e20323635383438.roa Signing time: Tue 09 Dec 2025 16:05:00 +0000 ROA not before: Tue 09 Dec 2025 16:00:00 +0000 ROA not after: Tue 08 Dec 2026 16:05:00 +0000 asID: 265848 IP address blocks: 2803:4a20::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 16:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:fb:dc:24:d6:57:aa:cf:fb:ad:00:6a:74:19:29:a5:1e:4b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Dec 9 16:00:00 2025 GMT Not After : Dec 8 16:05:00 2026 GMT Subject: CN=082E823E07199DF5943D0E68AFEF7EAC803A4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:20:ac:6d:53:94:00:0a:05:e6:ba:86:a4: f4:ff:40:fa:63:97:94:c8:0b:f7:59:98:5b:35:8f: 92:06:61:73:3a:65:ef:1a:00:7a:35:59:6d:98:4e: 9e:20:b6:ac:db:3c:1e:b5:cf:b7:fe:df:66:5e:69: d7:bb:f4:0c:c1:1a:13:d6:e0:db:f3:8d:ca:83:27: 08:23:e3:e8:87:fa:26:9c:6e:15:34:f6:81:c8:d5: ed:e7:cc:9f:86:bb:14:ee:97:b8:e6:34:04:a7:e0: 4f:dc:8b:55:81:c5:f9:97:6c:d2:77:d5:06:59:65: 50:a8:15:4f:da:56:36:ca:7d:59:bd:22:2f:de:63: bf:8c:96:6e:ec:8e:b9:d2:cb:21:06:c4:fb:e0:c6: 3f:89:d3:cd:43:f9:b4:c1:7c:e5:3f:cc:8d:31:79: 5a:73:3d:48:8d:84:d7:fa:b4:f1:a7:fd:39:e8:90: 20:43:25:cc:22:c6:90:0c:e7:3b:6b:90:20:e4:5a: e1:e8:b9:d1:aa:b3:e4:3d:44:90:58:72:c1:28:95: 48:fa:37:5f:96:f7:58:38:68:31:bc:7e:2a:bf:a0: 9d:2b:13:4b:37:15:0e:4c:35:d1:6f:da:e6:5d:f8: 2f:ba:d9:28:4e:43:0c:40:ef:79:42:bd:08:c5:a4: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2E:82:3E:07:19:9D:F5:94:3D:0E:68:AF:EF:7E:AC:80:3A:44:60 X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3438203d3e20323635383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4a20::/32 Signature Algorithm: sha256WithRSAEncryption 45:51:00:4d:b5:65:4a:f4:70:11:02:5f:7f:0f:1d:b6:96:a7: f5:b5:2d:4a:cd:e1:d0:92:59:bf:20:8f:25:f4:4a:da:5f:4b: ee:af:8d:83:0e:6d:c3:93:b6:9d:f2:87:c7:b2:22:96:09:3d: 9b:c4:c4:91:c6:e8:88:0d:21:63:fe:b3:72:c7:29:4c:15:30: 80:18:f5:cc:11:0c:26:20:99:8e:c0:9e:47:77:60:e8:5b:f7: ed:8f:b1:9b:2e:d2:c2:43:34:65:85:58:07:1b:0e:2b:7a:1b: 1c:a7:48:b6:47:13:0b:a8:27:15:04:16:34:1a:34:75:1c:e3: 36:09:ec:21:4b:0f:75:b0:7e:d4:19:f9:e6:9c:96:21:41:ac: 74:0a:f0:7d:ee:0a:e0:7f:f4:0b:5d:dd:49:2a:69:71:df:4b: 7b:e4:89:0f:49:55:6d:98:aa:31:34:3c:2b:56:69:dd:dc:45: 8d:e6:c9:51:bd:db:cb:00:c3:25:d4:06:95:48:10:de:3b:81: 69:f5:7b:91:86:4a:6e:77:4e:73:12:c8:1b:ad:6f:aa:51:a4: 6a:f2:6a:a4:5d:33:9c:79:71:6d:66:6b:4e:bc:55:b9:e0:08: 30:e4:20:ca:44:8c:ae:cc:fa:59:9d:5b:7b:78:9f:ea:e8:4c: 90:24:50:cf -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUPaT73CTWV6rP+60AanQZKaUeS/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNTEyMDkxNjAwMDBaFw0yNjEyMDgxNjA1MDBaMDMxMTAvBgNV BAMTKDA4MkU4MjNFMDcxOTlERjU5NDNEMEU2OEFGRUY3RUFDODAzQTQ0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsiCsbVOUAAoF5rqGpPT/QPpj l5TIC/dZmFs1j5IGYXM6Ze8aAHo1WW2YTp4gtqzbPB61z7f+32Zeade79AzBGhPW 4NvzjcqDJwgj4+iH+iacbhU09oHI1e3nzJ+GuxTul7jmNASn4E/ci1WBxfmXbNJ3 1QZZZVCoFU/aVjbKfVm9Ii/eY7+Mlm7sjrnSyyEGxPvgxj+J081D+bTBfOU/zI0x eVpzPUiNhNf6tPGn/TnokCBDJcwixpAM5ztrkCDkWuHoudGqs+Q9RJBYcsEolUj6 N1+W91g4aDG8fiq/oJ0rE0s3FQ5MNdFv2uZd+C+62ShOQwxA73lCvQjFpKBHAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUCC6CPgcZnfWUPQ5or+9+rIA6RGAwHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzMyMzgzMDMzM2EzNDYxMzIzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM4MzQzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSiAw DQYJKoZIhvcNAQELBQADggEBAEVRAE21ZUr0cBECX38PHbaWp/W1LUrN4dCSWb8g jyX0StpfS+6vjYMObcOTtp3yh8eyIpYJPZvExJHG6IgNIWP+s3LHKUwVMIAY9cwR DCYgmY7Ankd3YOhb9+2PsZsu0sJDNGWFWAcbDit6GxynSLZHEwuoJxUEFjQaNHUc 4zYJ7CFLD3WwftQZ+eacliFBrHQK8H3uCuB/9Atd3UkqaXHfS3vkiQ9JVW2YqjE0 PCtWad3cRY3myVG928sAwyXUBpVIEN47gWn1e5GGSm53TnMSyButb6pRpGryaqRd M5x5cW1ma068VbngCDDkIMpEjK7M+lmdW3t4n+roTJAkUM8= -----END CERTIFICATE-----Generated at Sat Dec 13 02:32:57 2025 by rpki-client