This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a323030303a3a2f34302d3634203d3e20323733303930.roa File: 323830333a383035303a323030303a3a2f34302d3634203d3e20323733303930.roa (raw, json) Hash identifier: Ja4gE6W2qNcpwymgZ/0iCkpcANfPxxp4bZsD3JjZzAg= Subject key identifier: 5B:B8:5F:EE:7D:C9:15:7D:DA:F2:5E:30:70:3A:8E:3E:2B:64:8A:F5 Certificate issuer: /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Certificate serial: 33DF6F3D28C939D520C84C488DC185827E8AE958 Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a323030303a3a2f34302d3634203d3e20323733303930.roa Signing time: Tue 18 Nov 2025 00:52:59 +0000 ROA not before: Tue 18 Nov 2025 00:47:59 +0000 ROA not after: Tue 17 Nov 2026 00:52:59 +0000 asID: 273090 IP address blocks: 2803:8050:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Nov 2025 20:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:df:6f:3d:28:c9:39:d5:20:c8:4c:48:8d:c1:85:82:7e:8a:e9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Validity Not Before: Nov 18 00:47:59 2025 GMT Not After : Nov 17 00:52:59 2026 GMT Subject: CN=5BB85FEE7DC9157DDAF25E30703A8E3E2B648AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:27:2b:04:56:da:ca:75:3b:fc:ce:63:a3: 1e:27:6c:fe:1f:68:da:40:02:75:5a:0b:c2:f6:b9: 6e:0c:e5:b7:6d:f6:ec:97:25:43:7c:dc:9e:40:d6: 4b:4d:b1:98:1d:2a:bc:ae:a6:c2:8f:56:69:29:df: 5b:63:08:2f:76:01:80:b4:79:22:29:79:f1:e7:5a: 78:31:78:ba:69:fe:66:fc:82:8e:db:73:d6:a9:6a: c9:c2:7e:b1:a9:7e:7d:96:9a:db:dd:fe:97:5a:12: 06:d4:5b:dd:75:79:4b:3f:df:4d:98:8b:73:8c:02: 01:6e:b6:e6:35:57:d9:b8:89:e5:df:ae:57:f3:f3: 71:9f:dc:93:01:7e:1e:94:8c:b1:4f:2c:78:ea:fd: a4:cc:4d:75:68:92:37:3e:5b:9e:4c:5c:f6:27:95: fb:6c:3b:b6:e0:95:61:a6:18:ab:03:d0:77:bf:c4: c6:ff:15:f4:f1:5e:ed:8f:a5:cc:23:1f:cd:c0:99: 28:35:ff:9e:09:8f:9c:d1:dc:50:e2:74:55:5a:6a: 6c:8a:68:71:1d:e9:53:af:df:fe:92:15:4f:c9:46: cc:7f:66:a4:91:42:14:e3:18:48:86:f5:2e:ed:8b: 1d:5b:53:98:fe:c3:31:4b:71:89:d3:2a:bb:ed:83: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B8:5F:EE:7D:C9:15:7D:DA:F2:5E:30:70:3A:8E:3E:2B:64:8A:F5 X509v3 Authority Key Identifier: keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a323030303a3a2f34302d3634203d3e20323733303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8050:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:25:7c:e4:27:7b:7c:74:8b:d0:5b:6e:dd:74:d7:97:9e:c7: 39:66:30:01:9c:23:97:a1:9c:d4:e6:22:1a:50:ee:c7:11:7d: fb:93:a8:b9:38:5e:64:3a:2c:07:f7:51:44:1d:0f:9c:a2:05: 1d:86:a2:2d:1e:55:5e:83:21:77:59:8f:62:0d:59:72:cf:08: cd:78:66:43:79:dd:0b:ab:e2:22:12:5d:63:97:2e:90:b6:84: dd:52:46:c7:e3:f9:d0:c0:09:b1:6b:bf:77:15:68:67:d9:28: 0b:ba:6a:8e:0f:62:d8:fc:67:a4:35:cb:c7:ed:fe:c9:ef:a8: dc:9d:a6:a5:1b:34:5a:25:17:8b:32:c1:00:47:0b:be:05:d1: e8:40:f0:6c:b3:86:b0:99:34:1b:cd:92:46:d0:b0:e5:93:76: 49:cb:1a:af:fb:39:72:d2:f3:43:7a:22:86:03:80:14:8d:d9: a7:fc:3c:f7:63:f5:a0:4c:93:28:ca:1f:71:37:48:7b:87:b2: cd:9e:61:dd:7e:52:8d:08:12:6b:09:1d:68:c4:a3:51:4b:35: 9d:0d:66:86:95:4b:c1:a5:d5:49:dd:f5:e4:8b:a6:5e:fd:66: 86:c2:29:25:eb:8f:e8:15:79:78:04:67:53:98:0b:75:46:66: 4f:c8:a2:31 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUM99vPSjJOdUgyExIjcGFgn6K6VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGRjZCRjc4QTY2MTI2Mjc4OUFCQjZENTNCNTlFNEI1 NTNGNDVCQzAeFw0yNTExMTgwMDQ3NTlaFw0yNjExMTcwMDUyNTlaMDMxMTAvBgNV BAMTKDVCQjg1RkVFN0RDOTE1N0REQUYyNUUzMDcwM0E4RTNFMkI2NDhBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7ScrBFbaynU7/M5jox4nbP4f aNpAAnVaC8L2uW4M5bdt9uyXJUN83J5A1ktNsZgdKryupsKPVmkp31tjCC92AYC0 eSIpefHnWngxeLpp/mb8go7bc9apasnCfrGpfn2Wmtvd/pdaEgbUW911eUs/302Y i3OMAgFutuY1V9m4ieXfrlfz83Gf3JMBfh6UjLFPLHjq/aTMTXVokjc+W55MXPYn lftsO7bglWGmGKsD0He/xMb/FfTxXu2PpcwjH83AmSg1/54Jj5zR3FDidFVaamyK aHEd6VOv3/6SFU/JRsx/ZqSRQhTjGEiG9S7tix1bU5j+wzFLcYnTKrvtg5CvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUW7hf7n3JFX3a8l4wcDqOPitkivUwHwYDVR0j BBgwFoAUg/9r94pmEmJ4mrttU7WeS1U/RbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQ0I2MEFDOUVGQTU4NEI3NDI4OTJFRjUzRUM0MTk1Rjg5 MUQxODlEQkZBRTI0N0YzNzRBNDNENjdFMzA2QjY1LzAvODNGRjZCRjc4QTY2MTI2 Mjc4OUFCQjZENTNCNTlFNEI1NTNGNDVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0ZGNkJGNzhBNjYxMjYyNzg5 QUJCNkQ1M0I1OUU0QjU1M0Y0NUJDLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkNCNjBBQzlFRkE1ODRCNzQyODkyRUY1M0VDNDE5NUY4OTFEMTg5REJG QUUyNDdGMzc0QTQzRDY3RTMwNkI2NS8wLzMyMzgzMDMzM2EzODMwMzUzMDNhMzIz MDMwMzAzYTNhMmYzNDMwMmQzNjM0MjAzZDNlMjAzMjM3MzMzMDM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA4BQIDANBgkqhkiG9w0BAQsFAAOCAQEAXiV85Cd7fHSL0Ftu3XTXl57H OWYwAZwjl6Gc1OYiGlDuxxF9+5OouTheZDosB/dRRB0PnKIFHYaiLR5VXoMhd1mP Yg1Zcs8IzXhmQ3ndC6viIhJdY5cukLaE3VJGx+P50MAJsWu/dxVoZ9koC7pqjg9i 2PxnpDXLx+3+ye+o3J2mpRs0WiUXizLBAEcLvgXR6EDwbLOGsJk0G82SRtCw5ZN2 Scsar/s5ctLzQ3oihgOAFI3Zp/w892P1oEyTKMofcTdIe4eyzZ5h3X5SjQgSawkd aMSjUUs1nQ1mhpVLwaXVSd315IumXv1mhsIpJeuP6BV5eARnU5gLdUZmT8iiMQ== -----END CERTIFICATE-----Generated at Tue Nov 25 18:45:43 2025 by rpki-client