This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a333030303a3a2f34302d3634203d3e20323733303930.roa File: 323830333a383035303a333030303a3a2f34302d3634203d3e20323733303930.roa (raw, json) Hash identifier: R0VMCPX2SgmQjuItlWd8DSeRkw2q+9zkWfe6fSIC0sU= Subject key identifier: 0E:11:01:C2:F2:93:3D:DD:FE:44:54:73:84:C7:79:75:39:DE:78:63 Certificate issuer: /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Certificate serial: 2BA13BF24DEB86139B3A8A4DBC309681A889A389 Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a333030303a3a2f34302d3634203d3e20323733303930.roa Signing time: Tue 18 Nov 2025 00:52:59 +0000 ROA not before: Tue 18 Nov 2025 00:47:59 +0000 ROA not after: Tue 17 Nov 2026 00:52:59 +0000 asID: 273090 IP address blocks: 2803:8050:3000::/40 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Nov 2025 20:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a1:3b:f2:4d:eb:86:13:9b:3a:8a:4d:bc:30:96:81:a8:89:a3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Validity Not Before: Nov 18 00:47:59 2025 GMT Not After : Nov 17 00:52:59 2026 GMT Subject: CN=0E1101C2F2933DDDFE44547384C7797539DE7863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:b6:03:9d:68:42:78:ab:93:82:3c:38:62: 5f:95:d7:6c:3d:0a:5c:09:58:43:b8:f6:c9:fc:fd: a6:15:4a:b8:05:d4:a7:f0:76:2c:86:8e:90:6d:d7: ea:d3:37:ba:49:c1:4d:a8:ad:4b:a2:71:2b:90:de: 55:84:b5:53:17:dc:4a:1b:eb:3c:c3:9a:3e:ea:de: 96:b8:07:5e:e0:15:f0:89:05:73:5b:6e:b4:b0:b5: 0c:c6:49:95:5d:e3:6a:75:84:ee:bc:47:9b:c6:13: e8:19:5d:a5:21:8c:0b:1b:aa:00:06:00:cd:a9:1e: e7:d7:63:3c:dd:96:fe:b4:f0:b4:49:e3:64:46:46: c2:d3:b0:f5:c9:13:61:47:e7:71:3e:f1:fd:63:07: c7:fa:58:e2:08:e4:8e:94:4a:a6:f7:4b:9e:09:ef: a4:22:81:85:35:bd:7b:8d:3a:4e:dc:48:bf:fe:ca: d4:32:4d:c2:31:88:f3:b2:e5:c1:3d:12:57:76:dc: a3:a6:b0:0d:95:82:1d:4d:89:2b:2e:23:16:43:42: e1:8f:6b:13:c0:51:84:18:ea:4e:90:dc:fd:45:32: 27:a6:4e:a1:b4:c6:b8:e9:fc:7b:c2:ba:d5:2e:47: 37:e1:93:6c:a3:d5:10:d1:94:90:db:1d:7b:68:1c: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:01:C2:F2:93:3D:DD:FE:44:54:73:84:C7:79:75:39:DE:78:63 X509v3 Authority Key Identifier: keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a333030303a3a2f34302d3634203d3e20323733303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8050:3000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:7e:58:2d:a8:09:13:b6:5b:a1:29:91:97:21:23:64:64:a1: 17:58:e2:c4:aa:d8:3b:e6:e0:59:81:65:b2:03:e2:20:d0:90: a2:41:24:82:fd:7b:f0:34:2c:fa:11:1c:b1:f4:e3:61:fd:37: 58:ab:33:37:9f:b6:34:47:35:ca:05:ef:64:fb:66:2e:ad:bd: bc:0a:0c:1c:13:98:a9:6b:29:bc:49:cd:5b:a8:5f:a8:65:51: 05:c2:56:04:88:fc:8d:7b:8f:bf:c0:20:d0:0b:c2:56:29:55: 2d:3a:50:3d:9f:91:9d:4e:80:bc:77:a7:c2:48:37:0e:97:c0: 0f:eb:f4:b1:37:af:bb:49:d8:d3:1a:0d:21:b1:8b:ee:99:ed: 60:de:2b:b3:fb:73:62:51:5e:42:1c:7e:10:ab:67:b4:e7:09: 65:0a:a3:ad:ec:72:65:d7:d0:c8:65:8b:ec:7b:b6:ac:eb:56: 76:a3:83:04:65:94:42:1b:53:ef:97:fb:87:84:cc:e1:ff:b9: dc:56:1b:f4:01:51:65:19:fe:75:f9:ba:b0:6d:2f:05:6b:df: d9:6f:ad:2a:6f:29:84:9f:f4:67:ee:0a:b0:9d:3d:11:bd:27: cb:5a:89:27:74:4c:43:1c:85:4c:44:f5:d7:5b:cc:1c:f0:89: 01:90:24:55 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUK6E78k3rhhObOopNvDCWgaiJo4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGRjZCRjc4QTY2MTI2Mjc4OUFCQjZENTNCNTlFNEI1 NTNGNDVCQzAeFw0yNTExMTgwMDQ3NTlaFw0yNjExMTcwMDUyNTlaMDMxMTAvBgNV BAMTKDBFMTEwMUMyRjI5MzNERERGRTQ0NTQ3Mzg0Qzc3OTc1MzlERTc4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8LYDnWhCeKuTgjw4Yl+V12w9 ClwJWEO49sn8/aYVSrgF1KfwdiyGjpBt1+rTN7pJwU2orUuicSuQ3lWEtVMX3Eob 6zzDmj7q3pa4B17gFfCJBXNbbrSwtQzGSZVd42p1hO68R5vGE+gZXaUhjAsbqgAG AM2pHufXYzzdlv608LRJ42RGRsLTsPXJE2FH53E+8f1jB8f6WOII5I6USqb3S54J 76QigYU1vXuNOk7cSL/+ytQyTcIxiPOy5cE9Eld23KOmsA2Vgh1NiSsuIxZDQuGP axPAUYQY6k6Q3P1FMiemTqG0xrjp/HvCutUuRzfhk2yj1RDRlJDbHXtoHINFAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUDhEBwvKTPd3+RFRzhMd5dTneeGMwHwYDVR0j BBgwFoAUg/9r94pmEmJ4mrttU7WeS1U/RbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQ0I2MEFDOUVGQTU4NEI3NDI4OTJFRjUzRUM0MTk1Rjg5 MUQxODlEQkZBRTI0N0YzNzRBNDNENjdFMzA2QjY1LzAvODNGRjZCRjc4QTY2MTI2 Mjc4OUFCQjZENTNCNTlFNEI1NTNGNDVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0ZGNkJGNzhBNjYxMjYyNzg5 QUJCNkQ1M0I1OUU0QjU1M0Y0NUJDLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkNCNjBBQzlFRkE1ODRCNzQyODkyRUY1M0VDNDE5NUY4OTFEMTg5REJG QUUyNDdGMzc0QTQzRDY3RTMwNkI2NS8wLzMyMzgzMDMzM2EzODMwMzUzMDNhMzMz MDMwMzAzYTNhMmYzNDMwMmQzNjM0MjAzZDNlMjAzMjM3MzMzMDM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA4BQMDANBgkqhkiG9w0BAQsFAAOCAQEAD35YLagJE7ZboSmRlyEjZGSh F1jixKrYO+bgWYFlsgPiINCQokEkgv178DQs+hEcsfTjYf03WKszN5+2NEc1ygXv ZPtmLq29vAoMHBOYqWspvEnNW6hfqGVRBcJWBIj8jXuPv8Ag0AvCVilVLTpQPZ+R nU6AvHenwkg3DpfAD+v0sTevu0nY0xoNIbGL7pntYN4rs/tzYlFeQhx+EKtntOcJ ZQqjrexyZdfQyGWL7Hu2rOtWdqODBGWUQhtT75f7h4TM4f+53FYb9AFRZRn+dfm6 sG0vBWvf2W+tKm8phJ/0Z+4KsJ09Eb0ny1qJJ3RMQxyFTET111vMHPCJAZAkVQ== -----END CERTIFICATE-----Generated at Tue Nov 25 18:45:44 2025 by rpki-client