This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa File: 3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa (raw, json) Hash identifier: t0fRAcXtOaX23M5cwqdcayoV5zyRSkw1teN90ZbVVYY= Subject key identifier: F4:A3:0E:30:BF:A5:6F:F6:3D:4B:DB:7E:D8:DE:6D:4B:C7:50:B5:AB Certificate issuer: /CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD Certificate serial: 4F37B2BCAF700B6D99DA29FE179C05674C3C86C6 Authority key identifier: 5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa Signing time: Tue 06 Jan 2026 19:02:10 +0000 ROA not before: Tue 06 Jan 2026 18:57:10 +0000 ROA not after: Tue 05 Jan 2027 19:02:10 +0000 asID: 265509 IP address blocks: 168.195.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:37:b2:bc:af:70:0b:6d:99:da:29:fe:17:9c:05:67:4c:3c:86:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD Validity Not Before: Jan 6 18:57:10 2026 GMT Not After : Jan 5 19:02:10 2027 GMT Subject: CN=F4A30E30BFA56FF63D4BDB7ED8DE6D4BC750B5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:6e:14:8f:9a:56:55:ec:65:d2:94:59:23: e1:3d:60:fd:75:96:b7:14:a8:c3:39:e9:13:67:d3: d4:81:cc:2b:67:2f:a0:02:35:7f:8e:51:3a:9b:a4: 44:fc:7d:cc:4d:1a:66:3d:5a:2a:a7:b3:f2:42:48: b1:87:6e:64:6b:5a:4a:6a:c8:80:ad:f3:48:bf:f6: 2b:a8:39:09:1b:b2:3d:13:eb:60:22:a8:e3:66:fe: 0d:42:c4:7e:fc:3d:d8:04:fe:ed:fe:5c:f5:0d:45: 11:a7:37:a4:a0:e2:d8:45:c8:97:0c:15:12:92:e6: 4e:81:e5:37:88:77:17:47:f3:c8:ec:9f:6f:00:d6: 7b:e9:ad:2c:c7:c9:1a:cd:a8:99:90:61:3c:59:a6: 37:59:bc:9c:e9:02:de:96:43:c8:7a:7a:70:5d:70: 32:95:cf:d9:b5:2c:da:0b:76:c8:0d:c9:28:cd:55: 62:dd:34:2e:c8:32:6c:f9:8e:fd:41:02:8d:ca:32: f0:cf:60:ff:2e:d9:e4:68:b2:47:2e:23:50:a0:e4: 91:0e:3e:a5:10:aa:78:ab:dc:49:50:ba:90:94:6d: a6:61:d6:9e:1b:d8:52:cd:bf:c7:98:92:fd:f8:1c: 6c:48:41:c2:19:b6:38:ff:76:c3:8c:e4:6c:df:61: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A3:0E:30:BF:A5:6F:F6:3D:4B:DB:7E:D8:DE:6D:4B:C7:50:B5:AB X509v3 Authority Key Identifier: keyid:5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.204.0/22 Signature Algorithm: sha256WithRSAEncryption 33:a9:71:80:29:c1:9a:65:d5:9e:5c:86:c6:15:40:df:7e:bb: 35:c8:20:df:8d:6c:ae:7a:c5:d8:f9:d0:3d:b5:34:3b:fe:9f: 56:e5:fe:49:c9:70:4c:42:c5:c5:66:7e:f9:bb:07:8f:23:e7: 6b:5e:48:4b:58:9f:c4:ed:b7:4f:e9:4e:43:75:c6:61:ff:25: fb:50:bc:39:9d:82:7f:eb:d2:1e:b3:84:18:0f:55:4c:90:ea: 0a:a0:c8:ee:5e:84:b0:e9:74:ed:3f:5e:65:1e:7b:89:fd:75: e3:4e:53:00:3c:a7:71:22:c2:12:44:0b:2c:f6:17:f3:38:10: fa:92:47:59:51:a6:b9:44:93:07:72:6f:c0:63:f1:d1:3e:30: 33:a3:20:4e:75:cb:78:a4:16:e3:8e:8e:06:58:73:fe:4e:94: 70:40:48:45:a7:c7:67:ab:c5:f7:52:56:1b:90:b1:f8:60:be: d2:e3:38:31:91:f4:0f:1a:75:bd:96:7c:17:13:95:cd:7a:81: 44:9b:24:20:8f:46:7a:cd:c0:65:22:04:40:02:b0:fb:7e:22: f6:ce:d9:ee:f7:3b:b6:6b:af:8d:5f:45:b5:fd:be:b8:43:27: f8:72:29:a4:1f:ab:fa:36:49:e0:41:7a:b6:a8:93:31:ff:3e: e2:ef:86:60 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUTzeyvK9wC22Z2in+F5wFZ0w8hsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCMjQ5OEJFQzA4ODE5RkE1QTMyM0JEM0M1RUMxRThB RUU2ODNCRDAeFw0yNjAxMDYxODU3MTBaFw0yNzAxMDUxOTAyMTBaMDMxMTAvBgNV BAMTKEY0QTMwRTMwQkZBNTZGRjYzRDRCREI3RUQ4REU2RDRCQzc1MEI1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1am4Uj5pWVexl0pRZI+E9YP11 lrcUqMM56RNn09SBzCtnL6ACNX+OUTqbpET8fcxNGmY9Wiqns/JCSLGHbmRrWkpq yICt80i/9iuoOQkbsj0T62AiqONm/g1CxH78PdgE/u3+XPUNRRGnN6Sg4thFyJcM FRKS5k6B5TeIdxdH88jsn28A1nvprSzHyRrNqJmQYTxZpjdZvJzpAt6WQ8h6enBd cDKVz9m1LNoLdsgNySjNVWLdNC7IMmz5jv1BAo3KMvDPYP8u2eRoskcuI1Cg5JEO PqUQqnir3ElQupCUbaZh1p4b2FLNv8eYkv34HGxIQcIZtjj/dsOM5GzfYa+TAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQU9KMOML+lb/Y9S9t+2N5tS8dQtaswHwYDVR0j BBgwFoAUX7JJi+wIgZ+loyO9PF7B6K7mg70wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOEM4QTY4NzA0REQ4QjczRTRERTM5RUVDMkVFNDBDMTg2 ODEzRkU1MzdBQzQ5NEY5NkY0RkQ0REMwOUVENzFBLzAvNUZCMjQ5OEJFQzA4ODE5 RkE1QTMyM0JEM0M1RUMxRThBRUU2ODNCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RkIyNDk4QkVDMDg4MTlGQTVB MzIzQkQzQzVFQzFFOEFFRTY4M0JELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjhDOEE2ODcwNEREOEI3M0U0REUzOUVFQzJFRTQwQzE4NjgxM0ZFNTM3 QUM0OTRGOTZGNEZENERDMDlFRDcxQS8wLzMxMzYzODJlMzEzOTM1MmUzMjMwMzQy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNTMwMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo w8wwDQYJKoZIhvcNAQELBQADggEBADOpcYApwZpl1Z5chsYVQN9+uzXIIN+NbK56 xdj50D21NDv+n1bl/knJcExCxcVmfvm7B48j52teSEtYn8Ttt0/pTkN1xmH/JftQ vDmdgn/r0h6zhBgPVUyQ6gqgyO5ehLDpdO0/XmUee4n9deNOUwA8p3EiwhJECyz2 F/M4EPqSR1lRprlEkwdyb8Bj8dE+MDOjIE51y3ikFuOOjgZYc/5OlHBASEWnx2er xfdSVhuQsfhgvtLjODGR9A8adb2WfBcTlc16gUSbJCCPRnrNwGUiBEACsPt+IvbO 2e73O7Zrr41fRbX9vrhDJ/hyKaQfq/o2SeBBeraokzH/PuLvhmA= -----END CERTIFICATE-----Generated at Tue Jan 13 01:38:31 2026 by rpki-client