This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa File: 323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa (raw, json) Hash identifier: dKE73873/Pxf5Bh6OlP9f8K98CmEpUd2PswZG54DmjQ= Subject key identifier: 0F:5D:C3:E8:E4:74:6C:FC:5E:A0:A6:BA:14:72:DB:D8:B7:F9:06:56 Certificate issuer: /CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Certificate serial: 5B2C90E958EC410A7FD08BA9161154434ED6233C Authority key identifier: 83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa Signing time: Tue 18 Nov 2025 00:52:59 +0000 ROA not before: Tue 18 Nov 2025 00:47:59 +0000 ROA not after: Tue 17 Nov 2026 00:52:59 +0000 asID: 273090 IP address blocks: 2803:8050:4000::/40 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Nov 2025 20:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2c:90:e9:58:ec:41:0a:7f:d0:8b:a9:16:11:54:43:4e:d6:23:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FF6BF78A661262789ABB6D53B59E4B553F45BC Validity Not Before: Nov 18 00:47:59 2025 GMT Not After : Nov 17 00:52:59 2026 GMT Subject: CN=0F5DC3E8E4746CFC5EA0A6BA1472DBD8B7F90656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:5f:46:0c:8a:d2:dc:d7:2d:13:e8:8c:9e: ff:bb:f9:04:9b:e0:bf:4a:20:2a:19:8f:82:29:01: ae:a8:df:9e:7a:d8:61:0e:e2:f5:31:a8:a3:c1:fe: ec:5f:4f:cc:0f:67:1a:e6:82:f9:5b:f3:19:43:94: d9:fe:ab:c9:52:68:50:b3:8b:4f:5b:13:61:19:ec: 24:a1:2a:7f:27:69:5c:9d:a5:dc:44:a2:0c:f5:61: cb:d3:1c:73:95:52:f7:b2:a1:cd:ec:39:c7:12:5b: a5:d3:b9:11:d8:77:eb:57:1a:6d:ae:c1:88:9e:27: a1:39:13:1c:52:cb:16:f1:68:6b:5f:01:66:52:30: ae:65:d3:80:13:8d:72:f9:b7:86:95:d7:4a:e1:cf: f9:ba:ae:06:48:29:e3:1c:bb:03:c1:99:f5:cc:eb: b7:c2:64:28:45:a7:04:21:02:29:57:d6:ba:64:db: 4e:42:bf:7c:9a:8c:07:34:cd:23:00:a0:16:a3:94: 0f:e3:1f:99:c7:9e:aa:6b:84:d6:8b:24:0c:d8:4e: 72:ae:51:26:1c:79:33:91:83:ff:d8:ed:48:d6:83: 12:e7:69:91:17:20:fd:e9:3b:fc:1c:7b:0c:98:fd: cd:7f:2d:91:71:9b:47:fc:7d:a3:e9:57:d0:5b:65: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:C3:E8:E4:74:6C:FC:5E:A0:A6:BA:14:72:DB:D8:B7:F9:06:56 X509v3 Authority Key Identifier: keyid:83:FF:6B:F7:8A:66:12:62:78:9A:BB:6D:53:B5:9E:4B:55:3F:45:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83FF6BF78A661262789ABB6D53B59E4B553F45BC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCB60AC9EFA584B742892EF53EC4195F891D189DBFAE247F374A43D67E306B65/0/323830333a383035303a343030303a3a2f34302d3634203d3e20323733303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8050:4000::/40 Signature Algorithm: sha256WithRSAEncryption 54:b9:aa:78:d9:98:fe:15:67:d8:3a:0e:76:8f:e5:c1:0f:a0: b5:15:20:06:2e:c2:95:54:32:46:8f:9a:da:a7:72:2b:b7:ed: 79:c2:e2:23:9c:9b:6c:f6:3b:6f:9f:02:ca:2e:a9:2f:5b:e9: 47:95:d8:4c:7c:cc:db:80:85:e6:6d:64:8f:14:82:f2:44:1f: 5c:7b:24:85:3b:d0:1e:ac:c5:c5:cb:30:7b:70:4b:bb:57:47: 03:ec:a6:48:6c:b4:75:4c:c4:7c:29:de:30:0f:5f:51:5d:e4: 28:85:e0:d8:e5:a2:61:d2:40:b6:2c:0e:f2:a9:f0:67:1b:f5: 6b:6e:e3:f8:ce:65:f2:68:e6:77:8c:d0:5d:50:ee:a2:cc:80: eb:b9:7b:cd:4a:bf:8d:80:a7:75:42:d0:ea:ed:12:15:4a:60: 46:17:88:62:cd:0b:03:cd:b1:64:fe:a3:ed:00:f9:7b:01:96: c1:8e:0e:9c:71:a7:66:18:f6:f3:4e:25:43:b3:e1:e6:3b:91: c8:95:be:ab:bb:41:0b:88:f8:53:d1:21:24:55:66:5b:cd:21: bb:d6:f8:4f:8c:6d:92:d5:a9:d4:ab:ee:6f:ff:5b:30:da:5a: 17:97:a9:b9:4f:f6:8f:d3:6c:36:3c:3c:48:6b:ac:4d:35:e3: b9:ba:e0:d6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUWyyQ6VjsQQp/0IupFhFUQ07WIzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGRjZCRjc4QTY2MTI2Mjc4OUFCQjZENTNCNTlFNEI1 NTNGNDVCQzAeFw0yNTExMTgwMDQ3NTlaFw0yNjExMTcwMDUyNTlaMDMxMTAvBgNV BAMTKDBGNURDM0U4RTQ3NDZDRkM1RUEwQTZCQTE0NzJEQkQ4QjdGOTA2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjV9GDIrS3NctE+iMnv+7+QSb 4L9KICoZj4IpAa6o35562GEO4vUxqKPB/uxfT8wPZxrmgvlb8xlDlNn+q8lSaFCz i09bE2EZ7CShKn8naVydpdxEogz1YcvTHHOVUveyoc3sOccSW6XTuRHYd+tXGm2u wYieJ6E5ExxSyxbxaGtfAWZSMK5l04ATjXL5t4aV10rhz/m6rgZIKeMcuwPBmfXM 67fCZChFpwQhAilX1rpk205Cv3yajAc0zSMAoBajlA/jH5nHnqprhNaLJAzYTnKu USYceTORg//Y7UjWgxLnaZEXIP3pO/wcewyY/c1/LZFxm0f8faPpV9BbZdcdAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUD13D6OR0bPxeoKa6FHLb2Lf5BlYwHwYDVR0j BBgwFoAUg/9r94pmEmJ4mrttU7WeS1U/RbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQ0I2MEFDOUVGQTU4NEI3NDI4OTJFRjUzRUM0MTk1Rjg5 MUQxODlEQkZBRTI0N0YzNzRBNDNENjdFMzA2QjY1LzAvODNGRjZCRjc4QTY2MTI2 Mjc4OUFCQjZENTNCNTlFNEI1NTNGNDVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0ZGNkJGNzhBNjYxMjYyNzg5 QUJCNkQ1M0I1OUU0QjU1M0Y0NUJDLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkNCNjBBQzlFRkE1ODRCNzQyODkyRUY1M0VDNDE5NUY4OTFEMTg5REJG QUUyNDdGMzc0QTQzRDY3RTMwNkI2NS8wLzMyMzgzMDMzM2EzODMwMzUzMDNhMzQz MDMwMzAzYTNhMmYzNDMwMmQzNjM0MjAzZDNlMjAzMjM3MzMzMDM5MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA4BQQDANBgkqhkiG9w0BAQsFAAOCAQEAVLmqeNmY/hVn2DoOdo/lwQ+g tRUgBi7ClVQyRo+a2qdyK7ftecLiI5ybbPY7b58Cyi6pL1vpR5XYTHzM24CF5m1k jxSC8kQfXHskhTvQHqzFxcswe3BLu1dHA+ymSGy0dUzEfCneMA9fUV3kKIXg2OWi YdJAtiwO8qnwZxv1a27j+M5l8mjmd4zQXVDuosyA67l7zUq/jYCndULQ6u0SFUpg RheIYs0LA82xZP6j7QD5ewGWwY4OnHGnZhj2804lQ7Ph5juRyJW+q7tBC4j4U9Eh JFVmW80hu9b4T4xtktWp1Kvub/9bMNpaF5epuU/2j9NsNjw8SGusTTXjubrg1g== -----END CERTIFICATE-----Generated at Tue Nov 25 18:45:43 2025 by rpki-client