This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137322e302f32322d3234203d3e20323632313636.roa File: 3136382e3233342e3137322e302f32322d3234203d3e20323632313636.roa (raw, json) Hash identifier: 71cod3E2nRhYvi2FIjHNC1Q5hvzqVz62EBEf4Ohiius= Subject key identifier: BF:B8:44:5D:16:F9:DC:29:D9:A5:11:25:7B:AB:54:DD:24:E5:BF:48 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 498D3D27E64025FE953892A51C2AA802E7463E87 Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137322e302f32322d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:06 +0000 ROA not before: Tue 06 Jan 2026 18:53:06 +0000 ROA not after: Tue 05 Jan 2027 18:58:06 +0000 asID: 262166 IP address blocks: 168.234.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8d:3d:27:e6:40:25:fe:95:38:92:a5:1c:2a:a8:02:e7:46:3e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:06 2026 GMT Not After : Jan 5 18:58:06 2027 GMT Subject: CN=BFB8445D16F9DC29D9A511257BAB54DD24E5BF48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:6e:81:30:38:0a:69:05:2c:f2:6c:ff:54: 62:89:04:e1:ad:2c:6d:28:de:6b:c1:95:c3:a7:ac: e1:95:80:99:36:f0:5e:e7:f6:81:fa:25:07:a2:92: 84:fb:55:56:d6:2e:34:c7:1d:1a:e4:5b:19:18:4d: 25:07:46:cb:2b:cc:c6:d0:f3:b1:55:ba:64:bf:15: 39:98:c3:a6:bb:86:3b:30:50:b1:8b:92:9b:90:ee: 19:5b:09:f4:d0:82:9c:2d:75:b9:06:d7:f8:4a:73: bf:ac:cf:11:08:07:77:da:45:fb:90:34:af:b5:03: 0d:f2:59:92:e9:7a:8e:7c:d3:59:2a:41:1b:27:18: f9:ba:7e:a0:32:86:bd:d3:c7:fa:9a:5d:c9:81:0c: 51:af:03:fc:b1:7c:2e:8d:48:10:0a:85:5c:1a:31: 06:7a:b2:7d:c1:39:69:ae:1a:81:e0:2f:fc:bd:a7: 83:18:d3:d8:f5:d1:e5:b9:1d:14:2d:a0:70:6f:5d: 7a:44:34:cd:96:d0:6a:05:d3:6a:f2:52:46:f0:f3: 36:53:64:30:5a:ce:c5:88:88:c7:96:45:db:a9:49: c5:9e:34:2c:a5:f2:f1:db:f7:c0:66:b7:fa:21:6d: 33:33:db:34:ac:b6:7e:8d:5b:12:2f:3c:0b:44:7a: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:44:5D:16:F9:DC:29:D9:A5:11:25:7B:AB:54:DD:24:E5:BF:48 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137322e302f32322d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:3a:ba:fb:f8:77:4d:29:6b:c6:bd:0b:24:c5:70:b7:1d:f6: b8:67:93:1c:33:e0:7c:8c:eb:78:b5:c8:0e:f8:8e:a0:0e:b0: 95:6c:10:f9:b1:a1:1d:de:21:a9:58:d6:88:f9:53:f3:14:ce: 0d:90:38:0f:c3:73:36:86:0b:ce:fc:f6:0e:cd:c8:e5:d4:7c: 9f:cd:b4:34:c7:3b:c7:df:21:09:13:be:14:f5:92:6e:91:27: d9:81:95:d1:87:3a:11:8b:9f:5a:54:d3:82:89:78:ad:ae:a0: 9a:70:36:d9:65:9b:a9:7b:1c:11:43:6c:71:79:5d:4a:c7:4b: 7e:28:9e:68:3d:17:11:fd:fd:66:c1:84:b2:b2:50:ce:cb:6d: 2c:45:79:d9:84:da:3b:ca:d9:cb:cb:1a:66:91:b9:b7:b1:03: 68:85:fa:6c:77:2e:5e:24:3b:25:ac:e4:85:5b:d3:75:b2:2e: 6a:32:03:a5:f5:95:37:96:4e:6a:52:7b:db:31:db:9a:52:e3: 7c:93:11:2d:dd:0e:f4:93:9d:09:46:04:ce:a0:3e:98:f3:54: d5:05:06:ab:4c:35:09:5e:4c:70:b4:fe:c6:b0:0b:5d:c8:6d: 43:51:33:06:9c:8e:75:4d:0d:63:ec:16:2f:6d:55:48:6e:90: b9:be:e4:6d -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUSY09J+ZAJf6VOJKlHCqoAudGPocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMDZaFw0yNzAxMDUxODU4MDZaMDMxMTAvBgNV BAMTKEJGQjg0NDVEMTZGOURDMjlEOUE1MTEyNTdCQUI1NEREMjRFNUJGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpG6BMDgKaQUs8mz/VGKJBOGt LG0o3mvBlcOnrOGVgJk28F7n9oH6JQeikoT7VVbWLjTHHRrkWxkYTSUHRssrzMbQ 87FVumS/FTmYw6a7hjswULGLkpuQ7hlbCfTQgpwtdbkG1/hKc7+szxEIB3faRfuQ NK+1Aw3yWZLpeo5801kqQRsnGPm6fqAyhr3Tx/qaXcmBDFGvA/yxfC6NSBAKhVwa MQZ6sn3BOWmuGoHgL/y9p4MY09j10eW5HRQtoHBvXXpENM2W0GoF02ryUkbw8zZT ZDBazsWIiMeWRdupScWeNCyl8vHb98Bmt/ohbTMz2zSstn6NWxIvPAtEeuTHAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUv7hEXRb53CnZpREle6tU3STlv0gwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM3MzIy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo 6qwwDQYJKoZIhvcNAQELBQADggEBADw6uvv4d00pa8a9CyTFcLcd9rhnkxwz4HyM 63i1yA74jqAOsJVsEPmxoR3eIalY1oj5U/MUzg2QOA/DczaGC8789g7NyOXUfJ/N tDTHO8ffIQkTvhT1km6RJ9mBldGHOhGLn1pU04KJeK2uoJpwNtllm6l7HBFDbHF5 XUrHS34onmg9FxH9/WbBhLKyUM7LbSxFedmE2jvK2cvLGmaRubexA2iF+mx3Ll4k OyWs5IVb03WyLmoyA6X1lTeWTmpSe9sx25pS43yTES3dDvSTnQlGBM6gPpjzVNUF BqtMNQleTHC0/sawC13IbUNRMwacjnVNDWPsFi9tVUhukLm+5G0= -----END CERTIFICATE-----Generated at Mon Jan 12 09:17:58 2026 by rpki-client