This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3430203d3e20323733393537.roa File: 323830333a376635303a353230303a3a2f33392d3430203d3e20323733393537.roa (raw, json) Hash identifier: ZwKGuSBvLcFAwyZFD7uK8hCj8f43Cb5W/hTO9ovnvU8= Subject key identifier: 04:7A:AF:48:F1:8C:94:72:81:D7:40:35:4A:A1:DC:E0:B5:31:C4:15 Certificate issuer: /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46 Certificate serial: 21564B63026D148DB6323478BAC864E65B76A9C2 Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3430203d3e20323733393537.roa Signing time: Fri 07 Nov 2025 21:05:00 +0000 ROA not before: Fri 07 Nov 2025 21:00:00 +0000 ROA not after: Fri 06 Nov 2026 21:05:00 +0000 asID: 273957 IP address blocks: 2803:7f50:5200::/39 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 12:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:56:4b:63:02:6d:14:8d:b6:32:34:78:ba:c8:64:e6:5b:76:a9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46 Validity Not Before: Nov 7 21:00:00 2025 GMT Not After : Nov 6 21:05:00 2026 GMT Subject: CN=047AAF48F18C947281D740354AA1DCE0B531C415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:23:a0:49:99:0f:55:bd:43:87:e9:cf:f8: 04:42:fd:93:60:63:1c:00:74:f1:fe:71:04:19:19: df:57:2a:04:de:f3:73:38:47:29:ce:1d:c2:cc:88: 6f:9a:8e:9d:63:17:85:e3:27:17:a5:2e:d4:91:02: 8d:d7:67:8b:28:39:05:49:86:3d:0a:31:21:b7:b7: 83:42:ff:4e:a2:3f:93:46:13:a7:71:86:57:5d:70: 8e:15:10:ab:a3:60:b9:60:0d:c3:b1:96:fb:e8:f9: b6:1a:47:40:d6:ae:3b:69:d0:1a:4a:7b:5e:9b:8b: 7c:cc:04:e7:5a:3d:5a:26:7d:e1:50:79:b8:44:03: 95:f3:52:6b:5b:13:7c:bb:dd:f4:c5:dc:86:03:b6: 21:fd:0f:2e:a4:4c:da:77:b8:09:0c:59:30:dd:0d: eb:47:12:6a:4b:55:0b:65:38:14:46:7e:fc:09:26: f7:88:7f:e6:b2:fb:05:6e:4a:61:af:bf:2c:67:44: 20:5d:f4:9a:ad:36:b2:03:8b:dd:ef:55:51:56:be: b3:68:47:a5:d7:70:17:50:ae:0b:a5:31:92:5b:ac: 28:17:73:87:61:29:f7:f0:97:a9:e1:15:c0:08:b7: 82:a5:bd:27:69:dc:f5:94:a1:6d:ed:91:cf:cd:1e: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:AF:48:F1:8C:94:72:81:D7:40:35:4A:A1:DC:E0:B5:31:C4:15 X509v3 Authority Key Identifier: keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353230303a3a2f33392d3430203d3e20323733393537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7f50:5200::/39 Signature Algorithm: sha256WithRSAEncryption 31:8f:7e:ce:b5:3d:a9:f2:49:e2:a1:ff:77:67:5b:69:d3:36: cc:91:6e:db:42:38:ed:36:de:5c:5c:ca:91:9f:8b:18:79:b6: ac:a3:cc:72:a6:8e:aa:3f:70:09:d7:91:40:cc:4c:39:88:d7: 1a:a4:63:4d:0e:4e:03:95:92:b6:bb:f0:b8:55:96:73:e6:2d: 63:27:f3:20:f3:d4:3c:f6:a6:8d:b1:0a:f0:2b:d8:90:84:18: 6b:7a:e5:1e:25:e9:6b:d9:88:ca:f6:97:84:59:f1:51:17:ea: 21:d0:b4:23:0c:9c:70:26:94:2d:0a:e9:19:7e:b3:5f:90:ad: f5:b7:bd:c4:7a:e5:5d:f4:a7:47:49:c5:0f:b6:ee:89:13:a4: af:b0:27:7d:54:c8:ce:2c:ee:aa:f2:32:20:66:e2:23:da:a3: ab:ac:59:e3:f8:d9:5b:69:86:e7:73:34:d2:76:8f:a3:c6:b3: 67:a2:ce:e9:39:05:fe:2f:24:45:1a:42:62:44:37:ca:7e:21: 5b:11:d2:09:ab:6a:77:9a:6e:02:94:4a:15:50:d5:9e:6f:8d: e4:b6:37:46:7e:30:24:8d:67:93:97:14:36:c5:dc:92:c2:25: 69:c6:5c:06:37:79:fc:65:71:d2:0b:09:88:01:1d:82:35:4d: 83:08:dc:69 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUIVZLYwJtFI22MjR4ushk5lt2qcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5MDAzMUNBMDM5MTVBOUIzRDU4MjBGMEFBQTQ1MzNB QTIxOUQ0NjAeFw0yNTExMDcyMTAwMDBaFw0yNjExMDYyMTA1MDBaMDMxMTAvBgNV BAMTKDA0N0FBRjQ4RjE4Qzk0NzI4MUQ3NDAzNTRBQTFEQ0UwQjUzMUM0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAciOgSZkPVb1Dh+nP+ARC/ZNg YxwAdPH+cQQZGd9XKgTe83M4RynOHcLMiG+ajp1jF4XjJxelLtSRAo3XZ4soOQVJ hj0KMSG3t4NC/06iP5NGE6dxhlddcI4VEKujYLlgDcOxlvvo+bYaR0DWrjtp0BpK e16bi3zMBOdaPVomfeFQebhEA5XzUmtbE3y73fTF3IYDtiH9Dy6kTNp3uAkMWTDd DetHEmpLVQtlOBRGfvwJJveIf+ay+wVuSmGvvyxnRCBd9JqtNrIDi93vVVFWvrNo R6XXcBdQrgulMZJbrCgXc4dhKffwl6nhFcAIt4KlvSdp3PWUoW3tkc/NHq83AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUBHqvSPGMlHKB10A1SqHc4LUxxBUwHwYDVR0j BBgwFoAU85ADHKA5Famz1YIPCqpFM6ohnUYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MTBCRTM2MkJCRjU3M0VENzdFMkVDNkM4MDYyNDYyRUNG Q0NBOUU1MjRENDA3MTQ1NUJBNEFGOTZGNDJGMzE2LzAvRjM5MDAzMUNBMDM5MTVB OUIzRDU4MjBGMEFBQTQ1MzNBQTIxOUQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzkwMDMxQ0EwMzkxNUE5QjNE NTgyMEYwQUFBNDUzM0FBMjE5RDQ2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTEwQkUzNjJCQkY1NzNFRDc3RTJFQzZDODA2MjQ2MkVDRkNDQTlFNTI0 RDQwNzE0NTVCQTRBRjk2RjQyRjMxNi8wLzMyMzgzMDMzM2EzNzY2MzUzMDNhMzUz MjMwMzAzYTNhMmYzMzM5MmQzNDMwMjAzZDNlMjAzMjM3MzMzOTM1Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEoA39QUjANBgkqhkiG9w0BAQsFAAOCAQEAMY9+zrU9qfJJ4qH/d2dbadM2 zJFu20I47TbeXFzKkZ+LGHm2rKPMcqaOqj9wCdeRQMxMOYjXGqRjTQ5OA5WStrvw uFWWc+YtYyfzIPPUPPamjbEK8CvYkIQYa3rlHiXpa9mIyvaXhFnxURfqIdC0Iwyc cCaULQrpGX6zX5Ct9be9xHrlXfSnR0nFD7buiROkr7AnfVTIzizuqvIyIGbiI9qj q6xZ4/jZW2mG53M00naPo8azZ6LO6TkF/i8kRRpCYkQ3yn4hWxHSCatqd5puApRK FVDVnm+N5LY3Rn4wJI1nk5cUNsXcksIlacZcBjd5/GVx0gsJiAEdgjVNgwjcaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:08:45 2025 by rpki-client