This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa File: 3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa (raw, json) Hash identifier: zvOn0oGtZBR2aiC8ocV58z6/YQPj8ol/mWlA1KZlMu8= Subject key identifier: AE:56:32:92:36:A5:0A:E2:38:E7:B9:CC:03:65:9E:3A:D8:A8:40:22 Certificate issuer: /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3 Certificate serial: 3DC9ADFDF11B42C715B0C62D23233211EFC0D3BA Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa Signing time: Tue 06 Jan 2026 19:33:50 +0000 ROA not before: Tue 06 Jan 2026 19:28:50 +0000 ROA not after: Tue 05 Jan 2027 19:33:50 +0000 asID: 271906 IP address blocks: 200.85.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c9:ad:fd:f1:1b:42:c7:15:b0:c6:2d:23:23:32:11:ef:c0:d3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3 Validity Not Before: Jan 6 19:28:50 2026 GMT Not After : Jan 5 19:33:50 2027 GMT Subject: CN=AE56329236A50AE238E7B9CC03659E3AD8A84022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:b3:98:1c:c4:47:21:c1:8f:27:3b:fc:c8: c0:f5:a8:9e:c9:03:5b:6a:15:da:94:bc:84:28:3b: 5f:bb:19:b2:21:08:a0:30:1c:ae:26:26:7f:8c:c4: 87:13:6f:6c:20:ec:e8:35:9a:0c:ad:10:70:48:21: 42:0b:da:eb:fa:8e:f2:7c:9e:27:16:6f:09:41:69: 3b:48:f0:f6:32:96:74:95:d0:05:0b:a1:69:01:a3: b3:03:4d:3b:eb:41:86:f5:f4:a5:b2:a5:98:83:c0: b3:26:44:42:00:5c:e4:c0:09:66:1b:05:df:67:d7: 41:6d:f1:0b:33:21:7a:1f:20:4a:ae:fc:36:30:d6: 96:73:bd:72:42:7e:1c:98:fd:3d:c7:e2:a5:87:b0: 2b:32:d3:40:66:79:c7:21:5e:22:2c:1b:0e:c6:eb: 25:f5:b0:61:05:96:ac:ce:6c:f7:8c:37:dd:08:0a: d6:9f:b1:04:00:12:6b:58:1f:87:93:48:af:6c:30: d3:52:bb:1e:9e:49:9a:88:eb:54:44:ec:c2:f5:98: d3:f4:b2:d8:6e:73:d6:af:2d:1a:56:9b:15:96:1f: ea:0d:ed:a4:b4:2b:40:15:91:81:fb:d6:21:68:4d: d6:39:40:c9:7b:89:16:9c:a2:bb:a9:ab:91:0e:e0: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:32:92:36:A5:0A:E2:38:E7:B9:CC:03:65:9E:3A:D8:A8:40:22 X509v3 Authority Key Identifier: keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.85.128.0/21 Signature Algorithm: sha256WithRSAEncryption 28:2b:9a:d9:38:9c:d9:53:5d:56:4f:b1:f5:df:5e:2e:34:a9: 4c:8a:5d:fd:29:49:92:d3:55:54:b0:0b:49:35:73:fa:74:33: bf:e8:b3:b5:08:a8:51:6f:d4:bb:c5:b2:8e:5c:04:e9:be:aa: b5:23:4e:39:3e:ed:5b:9c:17:e5:85:f2:b0:08:7f:15:35:e5: 91:2a:5f:aa:c2:ab:ce:f4:2a:82:4a:46:81:72:20:1c:87:ed: 35:c3:bb:c4:44:33:38:61:a1:5d:0a:be:2a:b7:25:3b:2e:f2: 79:4a:a5:93:96:59:6a:ff:ed:ae:17:12:2a:53:dd:e2:af:4f: c5:df:d9:f3:e6:24:52:75:d8:82:7c:f2:b8:da:2a:6a:c4:2a: 31:9c:fe:bf:fd:ee:f0:cd:7c:4f:a5:e8:22:b7:23:78:ec:8e: c0:95:98:46:f5:a7:a9:4a:de:f6:d8:1f:8c:09:af:9d:38:9d: 38:6b:50:39:95:4b:bd:b2:4d:cb:07:20:64:4d:47:b0:9f:19: 53:e3:ed:d2:07:84:49:11:a9:59:31:c6:e0:a6:cb:02:e9:3a: cf:ee:f4:27:4b:99:f3:e9:68:2a:90:e1:4e:9f:b7:c4:71:22: be:1b:75:4f:0a:c2:a5:f7:c1:cc:74:47:5b:33:ec:ec:c7:69: b4:f1:cb:90 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUPcmt/fEbQscVsMYtIyMyEe/A07owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEVERkU5RUZDOTc1QUY4OTJBQzkyQjZBRTE5MTRB M0IyRDBEMzAeFw0yNjAxMDYxOTI4NTBaFw0yNzAxMDUxOTMzNTBaMDMxMTAvBgNV BAMTKEFFNTYzMjkyMzZBNTBBRTIzOEU3QjlDQzAzNjU5RTNBRDhBODQwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMLOYHMRHIcGPJzv8yMD1qJ7J A1tqFdqUvIQoO1+7GbIhCKAwHK4mJn+MxIcTb2wg7Og1mgytEHBIIUIL2uv6jvJ8 nicWbwlBaTtI8PYylnSV0AULoWkBo7MDTTvrQYb19KWypZiDwLMmREIAXOTACWYb Bd9n10Ft8QszIXofIEqu/DYw1pZzvXJCfhyY/T3H4qWHsCsy00BmecchXiIsGw7G 6yX1sGEFlqzObPeMN90ICtafsQQAEmtYH4eTSK9sMNNSux6eSZqI61RE7ML1mNP0 sthuc9avLRpWmxWWH+oN7aS0K0AVkYH71iFoTdY5QMl7iRacorupq5EO4M/PAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUrlYykjalCuI457nMA2WeOtioQCIwHwYDVR0j BBgwFoAUrGjt/p78l1r4kqyStq4ZFKOy0NMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQThGQjlCNTBCRDZGNkJEQjkwNUQ0RjUyOTVFMzlFNzc3 MEJFQUJDMjQ3MUYyQjQ1OTg5QjM2MTk4Q0ZBRjY3LzAvQUM2OEVERkU5RUZDOTc1 QUY4OTJBQzkyQjZBRTE5MTRBM0IyRDBEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzY4RURGRTlFRkM5NzVBRjg5 MkFDOTJCNkFFMTkxNEEzQjJEMEQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUE4RkI5QjUwQkQ2RjZCREI5MDVENEY1Mjk1RTM5RTc3NzBCRUFCQzI0 NzFGMkI0NTk4OUIzNjE5OENGQUY2Ny8wLzMyMzAzMDJlMzgzNTJlMzEzMjM4MmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyFWA MA0GCSqGSIb3DQEBCwUAA4IBAQAoK5rZOJzZU11WT7H1314uNKlMil39KUmS01VU sAtJNXP6dDO/6LO1CKhRb9S7xbKOXATpvqq1I045Pu1bnBflhfKwCH8VNeWRKl+q wqvO9CqCSkaBciAch+01w7vERDM4YaFdCr4qtyU7LvJ5SqWTlllq/+2uFxIqU93i r0/F39nz5iRSddiCfPK42ipqxCoxnP6//e7wzXxPpegityN47I7AlZhG9aepSt72 2B+MCa+dOJ04a1A5lUu9sk3LByBkTUewnxlT4+3SB4RJEalZMcbgpssC6TrP7vQn S5nz6WgqkOFOn7fEcSK+G3VPCsKl98HMdEdbM+zsx2m08cuQ -----END CERTIFICATE-----Generated at Tue Jan 13 11:06:56 2026 by rpki-client