This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa File: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (raw, json) Hash identifier: kfkQCaTxorNFWswaaTRSTf0wMkkIV57VsqLm35Sie2k= Subject key identifier: BF:DC:B8:8F:DE:AD:A4:CF:3D:9F:B5:32:F6:52:48:2C:72:8B:D5:62 Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2 Certificate serial: C75BA34E600723CE076FEE766EA007C81D29E9 Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa Signing time: Tue 06 Jan 2026 19:25:10 +0000 ROA not before: Tue 06 Jan 2026 19:20:10 +0000 ROA not after: Tue 05 Jan 2027 19:25:10 +0000 asID: 32034 IP address blocks: 143.208.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 19:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c7:5b:a3:4e:60:07:23:ce:07:6f:ee:76:6e:a0:07:c8:1d:29:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2 Validity Not Before: Jan 6 19:20:10 2026 GMT Not After : Jan 5 19:25:10 2027 GMT Subject: CN=BFDCB88FDEADA4CF3D9FB532F652482C728BD562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:8c:a2:ac:85:ab:df:02:03:35:24:23:14: a0:67:1d:c7:89:86:77:3d:90:5c:f4:d3:d4:a8:ac: ca:4d:4a:c9:43:38:fd:c1:f8:b6:d2:e2:c0:e2:11: 58:8b:99:0f:27:1d:52:0b:c4:17:a7:b7:68:7c:9d: f2:ea:c9:46:a9:41:92:29:b2:74:9f:c0:3f:b7:1e: 94:31:4c:5c:d8:f7:fa:88:7c:12:77:2e:e2:c2:d6: 80:37:1e:af:7a:ab:3d:d4:44:de:dd:4b:c8:9f:60: 86:fc:65:8d:95:fb:7c:90:20:fe:57:28:5d:d6:54: 12:02:d1:35:d6:2e:9f:d8:ae:a2:a8:ab:89:cf:20: e9:8a:47:c5:04:50:1f:bb:ec:4a:b1:59:92:af:9f: f8:d7:35:5d:67:93:20:80:34:b6:06:52:ce:9c:3f: 2d:56:a8:cf:1c:14:0b:f2:46:19:75:08:7a:4b:7c: 7d:6a:e5:19:30:18:ee:65:31:cd:4a:62:76:b2:37: 64:c0:36:72:7b:81:be:59:8e:96:a8:99:b8:1f:a6: e4:6d:5f:73:9e:64:65:7a:b5:91:95:b2:71:3a:59: 6b:03:5d:25:84:b6:f0:37:82:d4:0b:cc:fb:76:b9: fa:8b:fb:a3:22:87:7b:24:65:13:3f:85:3f:56:97: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:B8:8F:DE:AD:A4:CF:3D:9F:B5:32:F6:52:48:2C:72:8B:D5:62 X509v3 Authority Key Identifier: keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:05:04:84:78:85:40:d9:8e:9d:6e:cc:a1:33:68:90:95:29: 05:90:7d:88:df:f6:07:10:73:0e:54:a5:1b:2e:1f:85:1a:02: 68:8c:1d:d8:2f:ee:35:9d:b5:a7:01:d3:e6:97:f9:21:f8:7f: 44:3f:57:38:1c:a2:ba:ad:41:5b:fc:e3:0f:3b:ba:f2:d5:f6: f0:61:ef:5a:68:c2:79:49:23:05:4e:7a:c4:4e:71:72:6b:5b: f2:86:04:21:dc:c1:76:6e:05:73:6e:25:a6:78:19:70:76:d6: 71:1f:62:a6:39:da:9f:05:f2:ef:7e:f0:55:9b:61:7b:c0:94: 19:ce:66:4a:16:33:f1:86:2d:a7:ad:b8:22:69:0a:89:3d:a7: 6e:bf:5a:71:cc:95:0f:98:2e:6d:0e:b7:ef:a9:3f:a1:60:66: 7c:d2:02:3f:61:ec:58:5a:17:77:c4:9b:4c:c1:28:6f:65:0c: 2d:9a:6f:19:c5:cd:48:4e:84:9f:c8:1b:d1:e5:37:e9:80:5d: 49:84:cd:dd:77:78:0c:4e:98:b3:3d:bb:df:0c:c9:65:4f:83: aa:49:dc:03:88:56:c1:91:aa:23:c4:9f:28:fb:9f:26:cc:b0: ab:51:ee:6f:b6:ff:e6:5f:65:07:f3:05:29:73:5f:ad:fc:59: 03:e7:b8:3d -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUAMdbo05gByPOB2/udm6gB8gdKekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREQ0VBNURCRDVEQ0QwMEIwM0MyMUU0RjM0NjlCRjdE MUY4QkNFMjAeFw0yNjAxMDYxOTIwMTBaFw0yNzAxMDUxOTI1MTBaMDMxMTAvBgNV BAMTKEJGRENCODhGREVBREE0Q0YzRDlGQjUzMkY2NTI0ODJDNzI4QkQ1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWYyirIWr3wIDNSQjFKBnHceJ hnc9kFz009SorMpNSslDOP3B+LbS4sDiEViLmQ8nHVILxBent2h8nfLqyUapQZIp snSfwD+3HpQxTFzY9/qIfBJ3LuLC1oA3Hq96qz3URN7dS8ifYIb8ZY2V+3yQIP5X KF3WVBIC0TXWLp/YrqKoq4nPIOmKR8UEUB+77EqxWZKvn/jXNV1nkyCANLYGUs6c Py1WqM8cFAvyRhl1CHpLfH1q5RkwGO5lMc1KYnayN2TANnJ7gb5ZjpaombgfpuRt X3OeZGV6tZGVsnE6WWsDXSWEtvA3gtQLzPt2ufqL+6Mih3skZRM/hT9Wl+8RAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUv9y4j96tpM89n7Uy9lJILHKL1WIwHwYDVR0j BBgwFoAUTdzqXb1dzQCwPCHk80ab99H4vOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOUVDNUY5QjBBNkQ5NTQ4NjREMjc0NEQ1NUNEREUxQkU4 NUQ0NDcxMDAyMURDNkIxRDNGNDJGQUQ4RjRCODdFLzAvNEREQ0VBNURCRDVEQ0Qw MEIwM0MyMUU0RjM0NjlCRjdEMUY4QkNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RERDRUE1REJENURDRDAwQjAz QzIxRTRGMzQ2OUJGN0QxRjhCQ0UyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjlFQzVGOUIwQTZEOTU0ODY0RDI3NDRENTVDRERFMUJFODVENDQ3MTAw MjFEQzZCMUQzRjQyRkFEOEY0Qjg3RS8wLzMxMzQzMzJlMzIzMDM4MmUzNjM0MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzMjMwMzMzNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QQDAN BgkqhkiG9w0BAQsFAAOCAQEAawUEhHiFQNmOnW7MoTNokJUpBZB9iN/2BxBzDlSl Gy4fhRoCaIwd2C/uNZ21pwHT5pf5Ifh/RD9XOByiuq1BW/zjDzu68tX28GHvWmjC eUkjBU56xE5xcmtb8oYEIdzBdm4Fc24lpngZcHbWcR9ipjnanwXy737wVZthe8CU Gc5mShYz8YYtp624ImkKiT2nbr9accyVD5gubQ6376k/oWBmfNICP2HsWFoXd8Sb TMEob2UMLZpvGcXNSE6En8gb0eU36YBdSYTN3Xd4DE6Ysz273wzJZU+DqkncA4hW wZGqI8SfKPufJsywq1Hub7b/5l9lB/MFKXNfrfxZA+e4PQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:49:51 2026 by rpki-client