This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3339203d3e20323733393537.roa File: 323830333a376635303a353230303a3a2f33392d3339203d3e20323733393537.roa (raw, json) Hash identifier: 9t04LP9TDpEC4HcSeA6B/5ENdlsBjoh9CKO+OjEk5EI= Subject key identifier: 37:AA:74:ED:AC:11:15:7D:FC:32:A7:1D:39:FD:22:73:DE:31:99:A7 Certificate issuer: /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46 Certificate serial: 0819071569F2ED8D980BBB06C7A6A612383FA741 Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3339203d3e20323733393537.roa Signing time: Fri 07 Nov 2025 20:40:00 +0000 ROA not before: Fri 07 Nov 2025 20:35:00 +0000 ROA not after: Fri 06 Nov 2026 20:40:00 +0000 asID: 273957 IP address blocks: 2803:7f50:5200::/39 maxlen: 39 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 12:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:19:07:15:69:f2:ed:8d:98:0b:bb:06:c7:a6:a6:12:38:3f:a7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46 Validity Not Before: Nov 7 20:35:00 2025 GMT Not After : Nov 6 20:40:00 2026 GMT Subject: CN=37AA74EDAC11157DFC32A71D39FD2273DE3199A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:c9:33:41:0b:85:05:72:bc:9b:76:f7:54: 56:3c:53:56:0e:59:3b:16:9e:cd:c6:2f:03:25:8b: b6:fc:df:c0:d2:f4:9c:82:6c:b5:d2:80:c1:fb:8c: c9:77:b7:0f:57:90:ec:53:cb:57:62:cb:fa:e4:76: cf:12:e9:1c:09:0a:7c:3f:62:35:5a:e0:f6:9c:c3: 94:3b:36:b4:9a:31:5b:85:cc:97:d5:4e:b9:44:c6: 38:17:5c:8e:e1:30:25:d5:cc:62:47:37:9e:65:4f: 40:45:99:b3:4a:6d:58:eb:20:aa:71:6a:d8:55:4e: fe:eb:85:6c:cb:fd:a7:be:34:46:6a:54:75:75:08: 52:c5:9c:d0:db:bb:ad:8e:a1:22:eb:ed:17:53:58: 17:1a:5e:4a:da:53:b9:95:32:fc:c7:a4:bb:25:11: de:42:3c:23:b1:ec:ac:46:05:a9:14:57:bf:62:4c: e4:53:27:28:ef:c6:5b:74:0e:1a:6e:13:65:63:7b: 3a:08:87:30:01:f8:08:7f:22:b6:0b:cf:8d:a5:6d: 56:ec:fa:dd:6f:a5:9d:80:88:b1:98:03:eb:fb:05: 1e:66:46:01:37:f4:72:64:ff:ea:51:b2:71:67:34: 9b:6b:a4:e3:84:fd:68:62:64:ff:2a:32:12:e5:10: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AA:74:ED:AC:11:15:7D:FC:32:A7:1D:39:FD:22:73:DE:31:99:A7 X509v3 Authority Key Identifier: keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3339203d3e20323733393537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7f50:5200::/39 Signature Algorithm: sha256WithRSAEncryption 4b:7b:c8:1b:86:bb:44:6d:97:97:58:d3:f7:3d:f1:34:e8:04: 55:1b:42:b4:b0:24:3f:11:a3:35:ff:90:e4:c0:c1:06:05:7e: 1e:e2:e1:b4:45:7b:28:68:8e:93:b3:47:41:ea:3f:cc:99:17: 19:20:bf:76:69:91:cd:63:a0:bb:24:aa:d2:e7:2a:8a:ad:f5: c6:22:b1:37:5f:81:4f:54:b1:f7:99:0f:34:25:87:e4:13:6b: bd:1a:e0:31:f6:6f:60:30:97:6a:1a:e9:a7:a0:9d:ef:d0:15: 17:57:05:b8:e1:4c:cd:cd:7c:8f:0a:ed:f5:6c:ad:c8:12:5b: 40:25:d7:71:63:a2:bf:f2:e0:ea:2c:45:09:8d:48:80:96:08: 58:b2:9a:66:c2:42:cc:eb:d4:b0:1b:33:79:5b:88:ae:b9:a8: c4:3d:03:57:24:11:59:2a:e8:a7:14:f4:f2:1a:bc:cc:f9:3b: ea:34:64:85:7a:97:bd:17:ac:f3:64:f7:61:c1:af:69:b9:b0: b4:e3:c1:d1:94:17:f6:68:5f:d5:8d:b4:09:c3:7e:88:db:d0: 2a:5b:66:a0:71:12:c4:4a:20:53:8e:26:94:15:63:b2:e5:30: 79:6c:7b:71:20:a7:f5:b6:24:dd:bb:ed:2f:d3:dc:5c:dd:3f: 2d:01:70:77 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUCBkHFWny7Y2YC7sGx6amEjg/p0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5MDAzMUNBMDM5MTVBOUIzRDU4MjBGMEFBQTQ1MzNB QTIxOUQ0NjAeFw0yNTExMDcyMDM1MDBaFw0yNjExMDYyMDQwMDBaMDMxMTAvBgNV BAMTKDM3QUE3NEVEQUMxMTE1N0RGQzMyQTcxRDM5RkQyMjczREUzMTk5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCta8kzQQuFBXK8m3b3VFY8U1YO WTsWns3GLwMli7b838DS9JyCbLXSgMH7jMl3tw9XkOxTy1diy/rkds8S6RwJCnw/ YjVa4Pacw5Q7NrSaMVuFzJfVTrlExjgXXI7hMCXVzGJHN55lT0BFmbNKbVjrIKpx athVTv7rhWzL/ae+NEZqVHV1CFLFnNDbu62OoSLr7RdTWBcaXkraU7mVMvzHpLsl Ed5CPCOx7KxGBakUV79iTORTJyjvxlt0DhpuE2VjezoIhzAB+Ah/IrYLz42lbVbs +t1vpZ2AiLGYA+v7BR5mRgE39HJk/+pRsnFnNJtrpOOE/WhiZP8qMhLlEL/NAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUN6p07awRFX38MqcdOf0ic94xmacwHwYDVR0j BBgwFoAU85ADHKA5Famz1YIPCqpFM6ohnUYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MTBCRTM2MkJCRjU3M0VENzdFMkVDNkM4MDYyNDYyRUNG Q0NBOUU1MjRENDA3MTQ1NUJBNEFGOTZGNDJGMzE2LzAvRjM5MDAzMUNBMDM5MTVB OUIzRDU4MjBGMEFBQTQ1MzNBQTIxOUQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzkwMDMxQ0EwMzkxNUE5QjNE NTgyMEYwQUFBNDUzM0FBMjE5RDQ2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTEwQkUzNjJCQkY1NzNFRDc3RTJFQzZDODA2MjQ2MkVDRkNDQTlFNTI0 RDQwNzE0NTVCQTRBRjk2RjQyRjMxNi8wLzMyMzgzMDMzM2EzNzY2MzUzMDNhMzUz MjMwMzAzYTNhMmYzMzM5MmQzMzM5MjAzZDNlMjAzMjM3MzMzOTM1Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEoA39QUjANBgkqhkiG9w0BAQsFAAOCAQEAS3vIG4a7RG2Xl1jT9z3xNOgE VRtCtLAkPxGjNf+Q5MDBBgV+HuLhtEV7KGiOk7NHQeo/zJkXGSC/dmmRzWOguySq 0ucqiq31xiKxN1+BT1Sx95kPNCWH5BNrvRrgMfZvYDCXahrpp6Cd79AVF1cFuOFM zc18jwrt9WytyBJbQCXXcWOiv/Lg6ixFCY1IgJYIWLKaZsJCzOvUsBszeVuIrrmo xD0DVyQRWSropxT08hq8zPk76jRkhXqXvRes82T3YcGvabmwtOPB0ZQX9mhf1Y20 CcN+iNvQKltmoHESxEogU44mlBVjsuUweWx7cSCn9bYk3bvtL9PcXN0/LQFwdw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:08:45 2025 by rpki-client