This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135382e302f32332d3234203d3e20323632313636.roa File: 3136382e3233342e3135382e302f32332d3234203d3e20323632313636.roa (raw, json) Hash identifier: ubSr5VmM9+pO4NGIK4PTQJqHb6cJFTw6eIiXFbxo6Vg= Subject key identifier: 89:7D:96:C9:9A:06:4F:BA:B5:EB:B5:50:DD:1B:3E:40:7C:E7:B1:79 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 2995E54E01594CC636635D74F06EA322083BEA95 Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135382e302f32332d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:02 +0000 ROA not before: Tue 06 Jan 2026 18:53:02 +0000 ROA not after: Tue 05 Jan 2027 18:58:02 +0000 asID: 262166 IP address blocks: 168.234.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:95:e5:4e:01:59:4c:c6:36:63:5d:74:f0:6e:a3:22:08:3b:ea:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:02 2026 GMT Not After : Jan 5 18:58:02 2027 GMT Subject: CN=897D96C99A064FBAB5EBB550DD1B3E407CE7B179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:a0:0b:c3:dd:b0:47:5e:0a:6f:81:21:23: 27:82:21:d0:e8:2f:0d:6d:30:39:bd:38:30:8b:03: e8:2a:c5:b6:9a:9f:c1:6d:63:47:f6:d8:ea:ca:ee: 8d:66:d3:52:33:9b:5b:89:76:a6:c5:46:38:90:75: 27:66:39:84:2d:27:cb:e7:af:73:02:31:52:50:37: 85:7a:61:ed:fc:c6:d5:a9:28:a0:11:43:ef:f4:a3: c9:55:e2:c5:4f:3a:c5:94:8a:42:0f:0a:7f:f4:d1: 27:7c:ac:5d:42:8e:15:71:38:b5:bc:7a:0a:4f:53: 79:e5:58:2c:a7:30:8c:44:f3:8f:41:98:79:ab:a4: 72:34:12:81:63:f0:15:3c:92:af:1b:97:7f:bf:5c: ab:02:47:34:3e:a3:e9:88:5c:40:d6:d6:1e:16:79: bb:12:7a:6d:61:32:e7:4b:c4:80:0b:54:ca:85:3c: bf:6e:46:3a:a8:40:ba:50:b4:f1:f6:cd:6b:35:8a: 02:a2:9f:57:33:88:83:82:8f:6c:2c:b5:f3:c8:a1: da:61:b3:47:ff:10:95:f2:64:41:ec:a3:3d:2d:47: 2a:d8:23:57:a5:09:9c:93:81:be:7f:11:f9:db:6c: 03:b2:30:52:c2:fd:41:f1:21:95:b1:91:1e:8c:82: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7D:96:C9:9A:06:4F:BA:B5:EB:B5:50:DD:1B:3E:40:7C:E7:B1:79 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135382e302f32332d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.158.0/23 Signature Algorithm: sha256WithRSAEncryption 40:ea:85:ea:37:3f:81:4c:71:b0:de:a9:98:f6:56:81:d2:ce: 95:7d:7a:cd:9e:bb:04:5e:7d:6b:ef:5a:cc:1f:7a:4e:61:43: 43:f3:37:0f:48:7d:70:26:8e:a8:22:d1:40:be:3d:76:63:47: 86:22:2d:19:ca:e1:44:57:c8:ac:76:be:3a:a4:86:53:01:0f: fa:a8:1f:b9:05:13:dc:31:f8:ec:38:c1:02:6d:4a:42:25:10: 13:80:41:c2:9c:58:fc:d9:0a:c1:4e:a5:d5:5e:54:37:11:b1: 18:0f:4e:9a:c5:8b:fb:bd:85:e4:05:3d:38:72:ad:78:6d:dd: 22:3d:9d:ae:f9:6b:71:c2:2c:08:74:85:af:7a:29:80:f8:c5: a3:27:ee:94:20:c6:78:33:f8:72:5b:04:ca:c2:ec:11:55:b7: 31:85:2f:d1:eb:e0:f4:df:36:04:f2:1c:9c:41:04:85:3c:41: 47:bf:2c:10:4f:6d:a3:e5:38:42:b7:06:4d:48:bd:24:e1:19: 63:ce:1d:0c:09:98:6b:15:ff:2e:07:db:ac:75:b9:db:89:79: 7f:87:04:d3:8b:70:1a:4b:c1:f7:7a:f8:a7:e0:f9:cb:e9:99: 58:5b:d1:be:01:cb:07:a2:cd:dd:7f:96:8f:a9:de:b6:e3:30: 64:0c:35:5b -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUKZXlTgFZTMY2Y1108G6jIgg76pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMDJaFw0yNzAxMDUxODU4MDJaMDMxMTAvBgNV BAMTKDg5N0Q5NkM5OUEwNjRGQkFCNUVCQjU1MEREMUIzRTQwN0NFN0IxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSaALw92wR14Kb4EhIyeCIdDo Lw1tMDm9ODCLA+gqxbaan8FtY0f22OrK7o1m01Izm1uJdqbFRjiQdSdmOYQtJ8vn r3MCMVJQN4V6Ye38xtWpKKARQ+/0o8lV4sVPOsWUikIPCn/00Sd8rF1CjhVxOLW8 egpPU3nlWCynMIxE849BmHmrpHI0EoFj8BU8kq8bl3+/XKsCRzQ+o+mIXEDW1h4W ebsSem1hMudLxIALVMqFPL9uRjqoQLpQtPH2zWs1igKin1cziIOCj2wstfPIodph s0f/EJXyZEHsoz0tRyrYI1elCZyTgb5/EfnbbAOyMFLC/UHxIZWxkR6Mgph/AgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUiX2WyZoGT7q167VQ3Rs+QHznsXkwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM1Mzgy ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo 6p4wDQYJKoZIhvcNAQELBQADggEBAEDqheo3P4FMcbDeqZj2VoHSzpV9es2euwRe fWvvWswfek5hQ0PzNw9IfXAmjqgi0UC+PXZjR4YiLRnK4URXyKx2vjqkhlMBD/qo H7kFE9wx+Ow4wQJtSkIlEBOAQcKcWPzZCsFOpdVeVDcRsRgPTprFi/u9heQFPThy rXht3SI9na75a3HCLAh0ha96KYD4xaMn7pQgxngz+HJbBMrC7BFVtzGFL9Hr4PTf NgTyHJxBBIU8QUe/LBBPbaPlOEK3Bk1IvSThGWPOHQwJmGsV/y4H26x1uduJeX+H BNOLcBpLwfd6+Kfg+cvpmVhb0b4Byweizd1/lo+p3rbjMGQMNVs= -----END CERTIFICATE-----Generated at Mon Jan 12 15:03:12 2026 by rpki-client