This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa File: 3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa (raw, json) Hash identifier: on1p7Vsulu9Xf0F9pG71LlJsl6XkFseMqBox5UVLocg= Subject key identifier: 39:87:E7:61:73:0C:70:52:FC:E9:D0:AF:62:22:5C:8B:63:CA:B2:4F Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 44C196A18A15376E06AA09EFCBD752EFF6A7BCFE Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:14 +0000 ROA not before: Tue 06 Jan 2026 18:53:14 +0000 ROA not after: Tue 05 Jan 2027 18:58:14 +0000 asID: 262166 IP address blocks: 168.234.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 08:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c1:96:a1:8a:15:37:6e:06:aa:09:ef:cb:d7:52:ef:f6:a7:bc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:14 2026 GMT Not After : Jan 5 18:58:14 2027 GMT Subject: CN=3987E761730C7052FCE9D0AF62225C8B63CAB24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:21:d1:e2:7e:cd:a9:7f:69:c4:f5:9f:ca: 8a:f6:5e:d7:0d:c8:17:50:be:99:b0:75:eb:a9:d9: 4b:80:6e:fb:e2:de:f6:e0:1a:bd:0a:39:e9:51:54: fa:89:2c:ff:ae:83:13:19:91:4f:e8:7f:f0:40:f1: d2:f6:90:f2:33:ec:f3:25:5e:67:89:a2:c5:56:21: 2b:72:88:6a:7b:5a:aa:8b:b7:e9:8c:b5:f5:be:b1: cf:c6:15:5a:b5:dd:ca:60:e2:a4:7c:89:34:fb:5f: 0e:d0:90:b7:8f:b5:71:47:c8:79:4d:98:5b:b5:1d: ae:24:ec:82:40:f9:1f:c4:30:41:75:fa:8c:f4:95: 98:d8:55:8b:10:6f:91:91:5c:1b:e7:8e:45:c2:8d: a1:6e:ea:66:69:cf:96:72:35:6c:5f:60:8a:dd:36: ce:13:3d:c4:2c:be:3d:2b:f9:e1:40:e5:89:2a:90: 5b:bf:5e:3f:b1:91:e8:55:20:43:12:fe:f0:18:f8: 09:19:21:ca:84:a1:2c:24:dd:ab:98:fa:22:b6:0a: f6:74:4d:b1:b0:6b:c1:77:57:79:11:89:f4:db:c8: 26:22:e8:ab:df:f8:73:80:9c:13:d4:ec:e1:93:c7: 2d:f8:5b:65:be:10:56:1d:4d:2b:c3:02:2e:14:23: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:E7:61:73:0C:70:52:FC:E9:D0:AF:62:22:5C:8B:63:CA:B2:4F X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.20.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:db:14:21:04:2d:14:89:a7:61:49:60:45:da:d9:ec:6f:cf: 44:93:2e:aa:5b:fd:18:95:27:f0:a5:6d:fd:ea:e3:c9:b7:a7: c1:38:28:f6:fe:5e:34:9e:dd:1d:94:55:b1:d2:eb:ef:57:69: 5d:fd:f8:6d:92:16:e6:29:44:1d:12:99:dc:a6:2d:35:53:e2: 81:3e:4b:61:2f:65:15:84:a8:8b:5e:bb:6f:b1:54:a6:a0:a3: f2:c7:d4:f9:e1:8f:a1:2c:52:46:80:2c:46:94:c0:f6:2f:e5: 4a:be:0c:b2:3d:c9:9a:c2:5c:ea:a6:cc:6b:1e:e9:d6:94:9c: ec:a2:7e:2c:39:6c:4c:cb:5a:06:64:84:68:11:c5:20:ab:bd: ea:00:3a:91:1a:27:ec:df:c7:49:93:95:aa:5b:8b:8e:53:69: bd:a8:b6:3c:43:e4:e2:7c:59:bc:d8:f8:4d:72:d6:7d:05:4f: 5a:da:67:ee:68:94:bc:0a:6d:04:db:68:d2:f6:fd:79:46:56: ff:38:7c:a3:81:5e:c4:14:bd:82:d9:7d:97:d2:d7:e7:0b:42: 51:0d:23:3f:52:7a:21:6f:3e:53:7a:a8:03:a3:6c:21:db:18: e6:f4:d1:82:28:09:20:2f:55:58:52:70:78:25:f9:0c:47:ea: b9:4e:55:84 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIURMGWoYoVN24Gqgnvy9dS7/anvP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMTRaFw0yNzAxMDUxODU4MTRaMDMxMTAvBgNV BAMTKDM5ODdFNzYxNzMwQzcwNTJGQ0U5RDBBRjYyMjI1QzhCNjNDQUIyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMfiHR4n7NqX9pxPWfyor2XtcN yBdQvpmwdeup2UuAbvvi3vbgGr0KOelRVPqJLP+ugxMZkU/of/BA8dL2kPIz7PMl XmeJosVWIStyiGp7WqqLt+mMtfW+sc/GFVq13cpg4qR8iTT7Xw7QkLePtXFHyHlN mFu1Ha4k7IJA+R/EMEF1+oz0lZjYVYsQb5GRXBvnjkXCjaFu6mZpz5ZyNWxfYIrd Ns4TPcQsvj0r+eFA5YkqkFu/Xj+xkehVIEMS/vAY+AkZIcqEoSwk3auY+iK2CvZ0 TbGwa8F3V3kRifTbyCYi6Kvf+HOAnBPU7OGTxy34W2W+EFYdTSvDAi4UI1UhAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUOYfnYXMMcFL86dCvYiJci2PKsk8wHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMjMwMmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqOoU MA0GCSqGSIb3DQEBCwUAA4IBAQCN2xQhBC0UiadhSWBF2tnsb89Eky6qW/0YlSfw pW396uPJt6fBOCj2/l40nt0dlFWx0uvvV2ld/fhtkhbmKUQdEpncpi01U+KBPkth L2UVhKiLXrtvsVSmoKPyx9T54Y+hLFJGgCxGlMD2L+VKvgyyPcmawlzqpsxrHunW lJzson4sOWxMy1oGZIRoEcUgq73qADqRGifs38dJk5WqW4uOU2m9qLY8Q+TifFm8 2PhNctZ9BU9a2mfuaJS8Cm0E22jS9v15Rlb/OHyjgV7EFL2C2X2X0tfnC0JRDSM/ Unohbz5TeqgDo2wh2xjm9NGCKAkgL1VYUnB4JfkMR+q5TlWE -----END CERTIFICATE-----Generated at Wed Jan 7 02:39:33 2026 by rpki-client