This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa File: 3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa (raw, json) Hash identifier: gCS3cmpXuvYKdRrNS3FQLGwDiVrNigHWFBGEH004830= Subject key identifier: 03:E3:B3:1E:52:43:55:CD:44:09:E7:2E:2F:C4:98:C8:68:40:CD:7E Certificate issuer: /CN=24CF67069E9BB589E3A34EDAE398737367CE3473 Certificate serial: 301A209740F4C2F6B88F3F812FA31E0252F35E3C Authority key identifier: 24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa Signing time: Tue 06 Jan 2026 19:41:31 +0000 ROA not before: Tue 06 Jan 2026 19:36:31 +0000 ROA not after: Tue 05 Jan 2027 19:41:31 +0000 asID: 267685 IP address blocks: 160.20.225.0/24 maxlen: 26 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 09:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1a:20:97:40:f4:c2:f6:b8:8f:3f:81:2f:a3:1e:02:52:f3:5e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24CF67069E9BB589E3A34EDAE398737367CE3473 Validity Not Before: Jan 6 19:36:31 2026 GMT Not After : Jan 5 19:41:31 2027 GMT Subject: CN=03E3B31E524355CD4409E72E2FC498C86840CD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:65:25:ef:43:5c:d3:de:ee:a8:64:39:9d: 8e:75:7e:67:1f:f7:4b:a6:8c:11:52:65:be:06:95: fc:9d:20:10:0d:6e:39:be:85:c8:38:31:2c:70:e0: 0a:be:76:76:24:b5:d4:3f:27:9a:06:cd:b7:d7:46: c2:f3:81:89:68:24:b6:bf:2c:37:f4:44:f6:f2:e3: ce:98:54:df:3e:6f:ae:c6:7c:39:e3:47:4f:c8:97: 00:c8:d6:7a:f4:f8:92:d7:b7:88:f1:d1:bb:4a:7d: 87:fd:43:58:f4:f0:0b:17:18:28:cd:b4:fa:df:d5: f9:4b:1b:50:03:6b:47:90:8e:64:94:30:7a:a6:38: 3c:b8:61:2e:f2:f1:4e:8e:9f:65:6f:08:a1:45:8a: a1:27:2c:9d:43:87:88:9f:d8:8a:98:4b:e4:57:e8: 49:23:13:70:03:10:72:a2:d5:62:87:f7:12:89:e6: 0c:3e:06:73:3e:e6:8e:b3:dc:ac:a0:d2:61:b6:c1: 83:f5:af:41:2b:cb:a6:54:90:70:2d:30:bd:32:cf: 24:60:e3:8f:15:3e:66:ef:7c:53:26:ca:53:74:d6: 4a:3a:53:c0:11:83:32:cf:38:31:1f:02:ca:6f:44: 45:bb:28:15:5d:71:02:bb:d6:da:15:87:7a:4b:50: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:B3:1E:52:43:55:CD:44:09:E7:2E:2F:C4:98:C8:68:40:CD:7E X509v3 Authority Key Identifier: keyid:24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.225.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:c3:1a:42:84:8a:51:ea:a6:e6:76:b8:9f:6d:f6:5d:3b:0a: 90:57:e6:07:c4:c5:ed:7c:83:3e:2e:02:f5:50:3f:81:5c:61: f5:03:a5:b6:ec:94:e5:45:bb:3d:01:a8:98:7c:c5:07:67:74: 22:22:5c:69:99:9a:79:ef:82:42:c2:38:ff:d8:35:87:43:3c: d3:22:36:71:43:5d:2d:e2:8b:21:71:cc:d1:81:b3:35:a5:ac: b9:a9:0a:26:6a:81:aa:46:dd:a6:5a:46:b3:60:1f:0a:89:13: 5b:ce:96:49:46:75:fa:a1:11:06:97:ab:7e:e2:06:a8:b5:0b: 56:23:3a:fd:72:f3:1d:7c:f7:cf:27:f6:cf:34:29:78:fb:2d: d5:20:f8:d8:12:01:df:ee:25:59:fc:b7:1b:f2:7b:c3:51:c9: f8:b0:f9:35:f0:76:7c:68:8f:bb:a5:b5:33:46:e4:ee:2d:57: da:fe:ea:49:a8:0e:ff:f2:d5:b8:e8:8c:e0:97:0e:12:72:4c: 53:7e:3d:45:46:7d:6a:f2:f6:08:4f:51:4b:fb:67:9f:2e:32: 4c:d1:bd:52:35:dc:10:d6:0f:9d:79:84:77:16:ce:ee:82:e3: 65:0a:0e:24:46:24:90:b0:2f:8a:7e:17:94:1e:28:90:66:42: 2b:c0:4a:d9 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUMBogl0D0wva4jz+BL6MeAlLzXjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDRjY3MDY5RTlCQjU4OUUzQTM0RURBRTM5ODczNzM2 N0NFMzQ3MzAeFw0yNjAxMDYxOTM2MzFaFw0yNzAxMDUxOTQxMzFaMDMxMTAvBgNV BAMTKDAzRTNCMzFFNTI0MzU1Q0Q0NDA5RTcyRTJGQzQ5OEM4Njg0MENEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHWUl70Nc097uqGQ5nY51fmcf 90umjBFSZb4GlfydIBANbjm+hcg4MSxw4Aq+dnYktdQ/J5oGzbfXRsLzgYloJLa/ LDf0RPby486YVN8+b67GfDnjR0/IlwDI1nr0+JLXt4jx0btKfYf9Q1j08AsXGCjN tPrf1flLG1ADa0eQjmSUMHqmODy4YS7y8U6On2VvCKFFiqEnLJ1Dh4if2IqYS+RX 6EkjE3ADEHKi1WKH9xKJ5gw+BnM+5o6z3Kyg0mG2wYP1r0Ery6ZUkHAtML0yzyRg 448VPmbvfFMmylN01ko6U8ARgzLPODEfAspvREW7KBVdcQK71toVh3pLUGarAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUA+OzHlJDVc1ECecuL8SYyGhAzX4wHwYDVR0j BBgwFoAUJM9nBp6btYnjo07a45hzc2fONHMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQkYwRkQ1MDgzNTlFNDg2MjIyNjg1NEUyMjIxQTE1QTQ2 MkQzQjFCQzY1NDQ3MjMwMkU3RDRGRDVCQjM1RDI3LzAvMjRDRjY3MDY5RTlCQjU4 OUUzQTM0RURBRTM5ODczNzM2N0NFMzQ3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENGNjcwNjlFOUJCNTg5RTNB MzRFREFFMzk4NzM3MzY3Q0UzNDczLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUJGMEZENTA4MzU5RTQ4NjIyMjY4NTRFMjIyMUExNUE0NjJEM0IxQkM2 NTQ0NzIzMDJFN0Q0RkQ1QkIzNUQyNy8wLzMxMzYzMDJlMzIzMDJlMzIzMjM1MmUz MDJmMzIzNDJkMzIzNjIwM2QzZTIwMzIzNjM3MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBTh MA0GCSqGSIb3DQEBCwUAA4IBAQAKwxpChIpR6qbmdrifbfZdOwqQV+YHxMXtfIM+ LgL1UD+BXGH1A6W27JTlRbs9AaiYfMUHZ3QiIlxpmZp574JCwjj/2DWHQzzTIjZx Q10t4oshcczRgbM1pay5qQomaoGqRt2mWkazYB8KiRNbzpZJRnX6oREGl6t+4gao tQtWIzr9cvMdfPfPJ/bPNCl4+y3VIPjYEgHf7iVZ/Lcb8nvDUcn4sPk18HZ8aI+7 pbUzRuTuLVfa/upJqA7/8tW46Izglw4SckxTfj1FRn1q8vYIT1FL+2efLjJM0b1S NdwQ1g+deYR3Fs7uguNlCg4kRiSQsC+KfheUHiiQZkIrwErZ -----END CERTIFICATE-----Generated at Tue Jan 13 08:11:04 2026 by rpki-client