This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa File: 323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa (raw, json) Hash identifier: JcrHDMRlLqnxby+w8xCywGjlgdDin6bh/Oi5QQW89Ck= Subject key identifier: DF:97:34:93:41:72:82:02:74:96:55:94:AE:A1:BC:72:A6:CD:77:45 Certificate issuer: /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85 Certificate serial: 536F24ACC12AEC34DC6323E3C6CC6196D7DB87FD Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa Signing time: Tue 04 Feb 2025 18:11:01 +0000 ROA not before: Tue 04 Feb 2025 18:06:01 +0000 ROA not after: Tue 03 Feb 2026 18:11:01 +0000 asID: 262220 IP address blocks: 2803:6700:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6f:24:ac:c1:2a:ec:34:dc:63:23:e3:c6:cc:61:96:d7:db:87:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85 Validity Not Before: Feb 4 18:06:01 2025 GMT Not After : Feb 3 18:11:01 2026 GMT Subject: CN=DF9734934172820274965594AEA1BC72A6CD7745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:67:93:b8:17:1d:d9:6f:57:3e:c7:33:03: 13:9b:58:07:2d:b5:15:03:22:8e:f0:ec:29:8f:5b: 37:8a:92:e6:91:98:ce:04:aa:f4:a9:1a:bd:e2:23: 8c:0d:79:eb:fc:2f:fb:0d:f3:8a:f2:54:80:4c:1a: 75:6f:1e:dd:fb:e7:58:93:de:21:95:1b:6d:a9:a4: 1e:a9:90:39:1c:7f:5d:1d:a7:91:30:3b:c6:f3:2b: 1e:b1:cd:7c:2b:96:60:5c:2f:ed:8a:68:65:42:a8: b2:f5:98:1e:73:62:11:59:0c:02:f9:2d:93:83:67: e2:59:72:ac:b1:72:ef:bd:83:f1:4a:02:f6:5e:ff: f5:5d:16:10:20:c5:b4:26:a0:fe:b9:3c:96:39:5e: 3e:99:b6:7b:57:9e:34:45:41:df:77:5e:a4:eb:34: 24:47:b8:7b:ac:b1:b2:9d:e7:c8:eb:a1:3b:00:bb: 7d:8d:5d:26:46:87:eb:87:a2:52:3f:9a:b5:09:fb: 91:b1:cf:9b:0d:37:5e:de:ad:0f:80:85:7d:02:c0: a4:98:6b:ba:af:c2:f8:a5:ff:06:90:89:5d:19:c8: b3:1a:fe:45:3d:e5:2e:0a:2b:0c:64:d2:84:44:61: 68:bd:04:ca:be:22:df:5b:2a:ab:62:49:d8:60:b9: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:97:34:93:41:72:82:02:74:96:55:94:AE:A1:BC:72:A6:CD:77:45 X509v3 Authority Key Identifier: keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6700:3000::/40 Signature Algorithm: sha256WithRSAEncryption 42:17:f9:d3:81:d9:d7:30:bf:a6:3b:31:f3:d4:0f:2b:41:13: c4:18:ce:33:f7:f3:ac:30:5c:47:36:c7:f3:c1:7f:a7:f6:b4: 0d:64:cd:8d:b9:30:da:1e:05:19:d7:d6:ec:3f:37:97:e2:36: 1b:26:03:5f:d5:1d:7a:35:3f:08:3b:77:41:f1:92:cb:f2:64: 1f:9e:79:cc:6d:f7:83:e9:e3:02:9c:56:a7:ec:1d:0c:e5:c3: 0e:79:0c:d9:44:60:03:83:cc:e7:87:df:44:ff:f0:65:81:55: 2c:cd:65:e4:50:1c:8c:2d:37:b7:f4:8e:ff:06:9e:11:b8:70: 34:71:f6:5f:cd:63:6a:23:a1:07:f4:ac:91:4b:b8:41:48:a7: 17:b3:f5:7c:24:c1:da:6f:bf:65:34:c6:82:6a:5d:69:8b:f6: 67:2f:bd:e5:bc:db:14:74:22:fd:1f:3c:4d:8a:4c:3b:de:a6: df:1d:d1:e5:31:6f:c0:6d:a8:b0:30:31:15:14:49:69:cc:c9: 18:86:f1:af:c0:0a:e3:70:76:65:fc:a9:f7:ab:c5:25:7e:87: 1e:94:b0:b9:0b:14:a3:77:57:6c:d1:36:3e:44:5e:7e:dc:02: 45:de:8c:2c:4a:9c:38:0b:bd:80:e7:aa:a0:2d:82:60:99:c2: d6:54:a0:59 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUU28krMEq7DTcYyPjxsxhltfbh/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyODNDQTExMzNCRjkwRDJFQjJDQzUyQ0UxRTA4MDQ4 MDNCMEM4NTAeFw0yNTAyMDQxODA2MDFaFw0yNjAyMDMxODExMDFaMDMxMTAvBgNV BAMTKERGOTczNDkzNDE3MjgyMDI3NDk2NTU5NEFFQTFCQzcyQTZDRDc3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPhGeTuBcd2W9XPsczAxObWAct tRUDIo7w7CmPWzeKkuaRmM4EqvSpGr3iI4wNeev8L/sN84ryVIBMGnVvHt3751iT 3iGVG22ppB6pkDkcf10dp5EwO8bzKx6xzXwrlmBcL+2KaGVCqLL1mB5zYhFZDAL5 LZODZ+JZcqyxcu+9g/FKAvZe//VdFhAgxbQmoP65PJY5Xj6ZtntXnjRFQd93XqTr NCRHuHussbKd58jroTsAu32NXSZGh+uHolI/mrUJ+5Gxz5sNN17erQ+AhX0CwKSY a7qvwvil/waQiV0ZyLMa/kU95S4KKwxk0oREYWi9BMq+It9bKqtiSdhgucHZAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU35c0k0FyggJ0llWUrqG8cqbNd0UwHwYDVR0j BBgwFoAUJCg8oRM7+Q0ussxSzh4IBIA7DIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNUMxQ0Y0ODc1NDU1OUZEODk2QTEwRUM4MDJCNzk3QTJB ODYzRkVBQTg1RkMxNzlGNDEwQjU5QTMzMDQ0Q0VDLzAvMjQyODNDQTExMzNCRjkw RDJFQjJDQzUyQ0UxRTA4MDQ4MDNCMEM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDI4M0NBMTEzM0JGOTBEMkVC MkNDNTJDRTFFMDgwNDgwM0IwQzg1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjVDMUNGNDg3NTQ1NTlGRDg5NkExMEVDODAyQjc5N0EyQTg2M0ZFQUE4 NUZDMTc5RjQxMEI1OUEzMzA0NENFQy8wLzMyMzgzMDMzM2EzNjM3MzAzMDNhMzMz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzIzMjMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA2cAMDANBgkqhkiG9w0BAQsFAAOCAQEAQhf504HZ1zC/pjsx89QPK0ET xBjOM/fzrDBcRzbH88F/p/a0DWTNjbkw2h4FGdfW7D83l+I2GyYDX9UdejU/CDt3 QfGSy/JkH555zG33g+njApxWp+wdDOXDDnkM2URgA4PM54ffRP/wZYFVLM1l5FAc jC03t/SO/waeEbhwNHH2X81jaiOhB/SskUu4QUinF7P1fCTB2m+/ZTTGgmpdaYv2 Zy+95bzbFHQi/R88TYpMO96m3x3R5TFvwG2osDAxFRRJaczJGIbxr8AK43B2Zfyp 96vFJX6HHpSwuQsUo3dXbNE2PkReftwCRd6MLEqcOAu9gOeqoC2CYJnC1lSgWQ== -----END CERTIFICATE-----Generated at Thu Dec 4 09:07:33 2025 by rpki-client