This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234382e302f32342d3234203d3e203532353039.roa File: 3133382e3230342e3234382e302f32342d3234203d3e203532353039.roa (raw, json) Hash identifier: Q3X7NKIMlvkdYQxUyHslIdVzcDqlEd8avO9+uk9o2lo= Subject key identifier: BC:49:25:C8:75:03:ED:DD:BE:47:01:95:39:03:0E:BF:C9:4C:F8:AB Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC Certificate serial: 13118209EAD69AA4F375992CD6FA2DF967EF8E56 Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234382e302f32342d3234203d3e203532353039.roa Signing time: Tue 06 Jan 2026 19:29:32 +0000 ROA not before: Tue 06 Jan 2026 19:24:32 +0000 ROA not after: Tue 05 Jan 2027 19:29:32 +0000 asID: 52509 IP address blocks: 138.204.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 20:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:11:82:09:ea:d6:9a:a4:f3:75:99:2c:d6:fa:2d:f9:67:ef:8e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC Validity Not Before: Jan 6 19:24:32 2026 GMT Not After : Jan 5 19:29:32 2027 GMT Subject: CN=BC4925C87503EDDDBE47019539030EBFC94CF8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:07:a8:74:69:63:43:1d:9a:50:1d:11:be: 15:b6:e4:07:5f:f3:2b:c8:14:2e:dc:dd:0e:66:98: f5:7d:a0:8d:0d:71:6f:bc:8d:fd:14:ea:b8:d6:50: fd:0b:8f:df:7a:e3:a6:91:73:7d:f3:1d:14:c8:ec: 72:b7:e3:4f:7d:d7:f7:47:e2:aa:50:d3:55:d6:47: 8f:11:35:6e:ec:45:57:74:a9:21:48:ef:cf:bf:bb: 3b:9c:59:a2:79:cc:ad:44:4b:25:8d:9d:55:82:82: a3:0a:1d:41:73:6b:1a:0b:6f:e1:bc:1b:8e:53:b4: c1:71:9c:4c:40:a1:da:35:2b:3f:64:37:53:db:3b: 8e:ae:54:f1:a4:f5:76:5f:45:df:a9:38:f4:f0:62: 9f:6b:1f:90:78:e5:bd:94:c5:88:07:70:b6:bd:61: cd:0e:86:68:ee:f1:ea:82:26:ca:4f:a9:58:82:32: 3e:84:1f:80:41:6b:55:ee:40:59:da:6b:87:81:43: 11:8b:b4:f5:f4:e9:d6:0d:3b:f1:42:ad:40:69:1c: 4f:38:84:9f:a6:c7:45:e3:6b:7e:2b:1b:44:e7:27: 03:ca:2b:e7:c6:30:6f:68:c8:de:00:82:91:a5:3f: b3:74:e7:3b:d9:57:93:70:25:9f:f3:11:46:bd:d5: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:25:C8:75:03:ED:DD:BE:47:01:95:39:03:0E:BF:C9:4C:F8:AB X509v3 Authority Key Identifier: keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234382e302f32342d3234203d3e203532353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.248.0/24 Signature Algorithm: sha256WithRSAEncryption b2:d0:d9:80:e5:18:cc:92:e1:bc:af:de:a4:68:c2:67:77:f0: e9:91:9a:ba:bb:e4:08:cf:5f:95:a9:a9:d5:7f:a7:72:cd:5f: 51:7a:d4:ce:20:98:c7:c2:61:a7:49:b8:6f:84:69:5d:da:0e: 6f:18:3a:c6:7f:e2:36:aa:06:d5:7e:89:0c:a2:2b:d9:3b:ed: fe:fd:fa:02:52:bd:8f:12:26:fd:41:70:f2:9b:7f:75:60:19: 66:13:e1:04:79:87:cf:92:ea:0c:37:6c:e0:ff:11:ea:fe:c0: aa:d3:b5:2e:98:59:76:34:73:91:9a:5d:d5:fa:fb:3f:01:9a: c7:75:11:27:fb:e2:38:19:74:df:07:84:72:1d:95:b0:fd:f1: 43:80:4d:8c:e7:9f:6e:3e:b5:c2:0f:6c:d9:83:ff:b7:be:76: dd:ca:a4:2b:e3:f3:94:f0:9f:c2:c8:1f:de:d1:c8:e7:d2:53: d9:e8:6d:d9:69:8d:5a:5d:99:ed:92:e3:26:a1:5d:4f:e9:18: 4b:9f:14:1f:68:b0:ae:a7:a6:a2:56:72:82:d7:f1:56:4d:cc: be:1f:39:5e:33:35:56:de:fd:24:d1:b3:4d:5e:02:b4:20:fb: de:3e:80:47:2e:90:b8:a7:5a:8e:82:aa:94:ea:ab:66:df:92: 23:04:6c:23 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUExGCCerWmqTzdZks1vot+WfvjlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5 REIzNjlGQzAeFw0yNjAxMDYxOTI0MzJaFw0yNzAxMDUxOTI5MzJaMDMxMTAvBgNV BAMTKEJDNDkyNUM4NzUwM0VERERCRTQ3MDE5NTM5MDMwRUJGQzk0Q0Y4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvQeodGljQx2aUB0RvhW25Adf 8yvIFC7c3Q5mmPV9oI0NcW+8jf0U6rjWUP0Lj99646aRc33zHRTI7HK340991/dH 4qpQ01XWR48RNW7sRVd0qSFI78+/uzucWaJ5zK1ESyWNnVWCgqMKHUFzaxoLb+G8 G45TtMFxnExAodo1Kz9kN1PbO46uVPGk9XZfRd+pOPTwYp9rH5B45b2UxYgHcLa9 Yc0Ohmju8eqCJspPqViCMj6EH4BBa1XuQFnaa4eBQxGLtPX06dYNO/FCrUBpHE84 hJ+mx0Xja34rG0TnJwPKK+fGMG9oyN4AgpGlP7N05zvZV5NwJZ/zEUa91UK9AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUvEklyHUD7d2+RwGVOQMOv8lM+KswHwYDVR0j BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMxMzMzODJlMzIzMDM0MmUzMjM0Mzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzMDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisz4 MA0GCSqGSIb3DQEBCwUAA4IBAQCy0NmA5RjMkuG8r96kaMJnd/DpkZq6u+QIz1+V qanVf6dyzV9RetTOIJjHwmGnSbhvhGld2g5vGDrGf+I2qgbVfokMoivZO+3+/foC Ur2PEib9QXDym391YBlmE+EEeYfPkuoMN2zg/xHq/sCq07UumFl2NHORml3V+vs/ AZrHdREn++I4GXTfB4RyHZWw/fFDgE2M559uPrXCD2zZg/+3vnbdyqQr4/OU8J/C yB/e0cjn0lPZ6G3ZaY1aXZntkuMmoV1P6RhLnxQfaLCup6aiVnKC1/FWTcy+Hzle MzVW3v0k0bNNXgK0IPvePoBHLpC4p1qOgqqU6qtm35IjBGwj -----END CERTIFICATE-----Generated at Tue Jan 13 22:15:28 2026 by rpki-client