This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31362e302f32342d3234203d3e20323632313636.roa File: 3136382e3233342e31362e302f32342d3234203d3e20323632313636.roa (raw, json) Hash identifier: fUaG5F1VOAPTKiSjNTpvPOBh0+Tjd3/7T2c7ReVp+VI= Subject key identifier: 43:66:F5:81:6E:1F:B0:FA:0E:8F:60:F0:B8:DF:37:A0:8A:AE:72:E9 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 57D84C017F794D7A18D2951964093F91541B913B Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31362e302f32342d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:09 +0000 ROA not before: Tue 06 Jan 2026 18:53:09 +0000 ROA not after: Tue 05 Jan 2027 18:58:09 +0000 asID: 262166 IP address blocks: 168.234.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d8:4c:01:7f:79:4d:7a:18:d2:95:19:64:09:3f:91:54:1b:91:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:09 2026 GMT Not After : Jan 5 18:58:09 2027 GMT Subject: CN=4366F5816E1FB0FA0E8F60F0B8DF37A08AAE72E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:38:a1:f8:26:24:f6:7a:a5:6e:0c:da:d5: de:a0:97:66:7d:8b:09:07:4b:e7:57:7a:94:d1:84: fe:8e:ab:1a:e1:4f:0a:f2:49:cf:70:99:24:44:f1: 3b:98:a3:f3:c5:dd:df:f3:52:20:61:a8:fe:58:9d: 23:22:fa:8d:fb:19:b6:ed:67:28:1a:c4:d6:00:7c: cd:d6:b5:8d:99:88:f5:7e:22:95:5c:25:61:d7:1b: 04:7f:5f:35:dd:f2:60:2b:bf:33:58:6c:9f:93:78: 76:09:09:1b:19:01:31:04:46:bf:9e:25:a5:3b:e4: 00:bf:27:39:51:a4:bc:ea:a8:88:cb:2c:0e:c1:77: bb:c9:16:e5:04:6a:4a:43:d8:ed:2f:99:ca:c0:fd: 9a:cf:a3:4e:06:2a:d8:1e:df:b6:20:6c:59:d7:25: 5b:49:c8:ea:84:64:33:b0:cc:ce:c1:7f:e1:71:5c: c2:ff:ad:25:9e:ee:22:ee:1d:79:a8:8b:57:92:ea: af:36:62:f5:20:2b:ca:38:18:4c:59:64:54:c7:38: dc:64:ec:13:8f:0e:f1:99:4c:dd:f9:8e:85:82:bc: b8:f9:e5:42:cf:04:03:7f:eb:85:99:98:85:dd:68: 6b:0c:df:17:12:51:29:96:50:f5:91:a0:06:f9:ee: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:F5:81:6E:1F:B0:FA:0E:8F:60:F0:B8:DF:37:A0:8A:AE:72:E9 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31362e302f32342d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.16.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b9:91:1f:73:dd:42:37:c0:17:ff:9f:43:91:c9:ba:b5:c9: 3d:41:aa:d1:14:bf:97:0f:1b:b3:f4:b8:49:aa:6d:65:01:31: 1f:76:cb:12:48:3a:70:17:69:57:3a:ba:d0:09:de:43:4f:86: 17:dd:72:6d:16:80:55:c8:70:fa:71:78:c8:bc:59:80:47:88: 3b:80:78:af:34:bb:bc:36:88:ad:a3:0a:a3:98:1b:a9:27:2c: 58:19:bf:87:f9:8a:4c:81:7c:7b:0e:f9:4c:64:25:11:85:49: 9b:28:49:88:85:9d:81:22:9c:61:ca:f4:bd:e4:50:b8:85:1c: 0a:3d:f7:98:67:ba:31:3c:f3:4c:38:55:67:f6:15:4b:e8:1c: 7f:bb:3a:37:49:d7:47:9f:85:96:b1:3b:fa:f3:12:34:15:14: 52:8c:a3:59:1d:61:70:9a:1d:42:80:ad:d4:40:82:46:4d:13: 5b:47:bb:a0:48:14:95:72:50:d9:82:fc:21:88:0d:70:ca:9a: b0:8b:15:1e:77:8c:3b:f4:7b:c6:95:b4:93:f2:ba:a9:67:67: 84:6f:da:ad:9b:40:b3:b0:90:03:e6:be:ff:cb:aa:c6:1d:1e: 89:23:f7:80:ee:fc:0d:f5:eb:ad:03:c7:99:2d:49:23:74:99: 0f:94:88:8a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUV9hMAX95TXoY0pUZZAk/kVQbkTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMDlaFw0yNzAxMDUxODU4MDlaMDMxMTAvBgNV BAMTKDQzNjZGNTgxNkUxRkIwRkEwRThGNjBGMEI4REYzN0EwOEFBRTcyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0jih+CYk9nqlbgza1d6gl2Z9 iwkHS+dXepTRhP6OqxrhTwrySc9wmSRE8TuYo/PF3d/zUiBhqP5YnSMi+o37Gbbt ZygaxNYAfM3WtY2ZiPV+IpVcJWHXGwR/XzXd8mArvzNYbJ+TeHYJCRsZATEERr+e JaU75AC/JzlRpLzqqIjLLA7Bd7vJFuUEakpD2O0vmcrA/ZrPo04GKtge37YgbFnX JVtJyOqEZDOwzM7Bf+FxXML/rSWe7iLuHXmoi1eS6q82YvUgK8o4GExZZFTHONxk 7BOPDvGZTN35joWCvLj55ULPBAN/64WZmIXdaGsM3xcSUSmWUPWRoAb57tzXAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUQ2b1gW4fsPoOj2DwuN83oIqucukwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM2MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOoQ MA0GCSqGSIb3DQEBCwUAA4IBAQA7uZEfc91CN8AX/59Dkcm6tck9QarRFL+XDxuz 9LhJqm1lATEfdssSSDpwF2lXOrrQCd5DT4YX3XJtFoBVyHD6cXjIvFmAR4g7gHiv NLu8NoitowqjmBupJyxYGb+H+YpMgXx7DvlMZCURhUmbKEmIhZ2BIpxhyvS95FC4 hRwKPfeYZ7oxPPNMOFVn9hVL6Bx/uzo3SddHn4WWsTv68xI0FRRSjKNZHWFwmh1C gK3UQIJGTRNbR7ugSBSVclDZgvwhiA1wypqwixUed4w79HvGlbST8rqpZ2eEb9qt m0CzsJAD5r7/y6rGHR6JI/eA7vwN9eutA8eZLUkjdJkPlIiK -----END CERTIFICATE-----Generated at Mon Jan 12 09:09:20 2026 by rpki-client