This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa File: 3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa (raw, json) Hash identifier: ON5W26mTO68P29+/pjygrLkDzUrrBvmQd6gRWWNeaVA= Subject key identifier: 67:EA:9D:2C:6E:2B:BE:20:39:0F:8A:17:BE:4E:66:EB:B8:74:6E:B8 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 3A15DF297F7733BA4FAFCAA33D6E43E3FA5C0903 Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:04 +0000 ROA not before: Tue 06 Jan 2026 18:53:04 +0000 ROA not after: Tue 05 Jan 2027 18:58:04 +0000 asID: 262166 IP address blocks: 168.234.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 21:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:15:df:29:7f:77:33:ba:4f:af:ca:a3:3d:6e:43:e3:fa:5c:09:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:04 2026 GMT Not After : Jan 5 18:58:04 2027 GMT Subject: CN=67EA9D2C6E2BBE20390F8A17BE4E66EBB8746EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:a6:d6:77:a4:5d:c5:bd:32:c1:9e:04:d1: 43:e0:fb:c6:34:6a:6d:c8:19:cb:8e:17:2f:1c:b5: cd:98:b7:b2:0c:9b:87:5d:eb:57:3c:06:7f:7f:57: a8:4e:70:ad:c4:92:45:72:bd:bc:65:8f:fc:30:ac: 74:5b:e1:bf:67:02:9f:ba:82:f7:18:53:a9:f7:c5: 96:6a:68:7a:a8:fd:18:e2:96:f4:4e:72:03:c1:e5: 05:20:38:9b:8a:26:c4:d1:15:ae:4c:a9:ec:d9:87: 27:c1:c6:cb:b0:a6:71:37:ea:4b:54:67:c4:29:a3: 04:92:28:49:7d:ed:e4:89:36:d5:5d:1b:cb:56:5f: 2f:bf:2a:79:bd:cd:bc:fb:2b:ad:05:6d:8d:5f:91: 3d:be:46:e2:74:d2:28:b3:50:51:d3:69:77:f4:dd: fb:0a:b1:37:27:76:21:e4:4a:df:41:4d:d1:8d:2e: 5a:30:8c:f9:fb:e8:1d:93:d6:d2:78:7c:c4:a2:6e: bb:58:c3:74:48:74:36:66:47:c9:a7:ee:65:88:7c: a0:7c:47:29:75:eb:bf:42:18:e4:30:8d:47:09:0e: 18:a9:a2:44:75:ab:88:50:e6:e8:02:16:8c:a2:e9: 35:c3:ce:ee:4b:9c:70:d2:1a:18:0a:2b:1c:ef:50: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EA:9D:2C:6E:2B:BE:20:39:0F:8A:17:BE:4E:66:EB:B8:74:6E:B8 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.24.0/21 Signature Algorithm: sha256WithRSAEncryption 57:f6:0b:05:e5:f8:08:90:f5:63:6a:6a:56:e7:8a:4b:7b:64: f4:a1:bc:a6:59:ca:c6:d6:21:e7:b8:5f:7b:55:61:49:5c:15: ba:91:31:b0:b1:eb:24:31:7b:ca:33:71:61:25:51:d5:fc:ac: b5:22:cb:68:5f:63:d4:fa:3a:ce:7b:86:05:cf:26:7d:61:c4: 63:79:0c:d2:cc:ad:08:51:c1:b7:76:d8:a7:78:76:44:ca:7f: f2:cd:02:6a:37:19:f2:1b:5c:2d:94:c8:56:90:23:28:01:d9: bd:78:2b:e3:65:cf:f9:61:ec:00:26:f6:d3:5b:40:a6:7b:78: e3:fa:1b:9b:31:37:2e:3c:84:95:7b:16:8a:76:44:9f:bc:8f: e4:d3:25:f0:87:43:b2:61:4f:0e:a6:50:37:ea:75:d9:8a:e9: 5c:3e:a1:de:71:12:8e:35:b1:c9:b6:fa:f9:92:b5:8b:f5:ae: d7:84:e8:bf:6a:5e:8b:73:d8:b3:40:36:92:c6:fd:8a:23:df: e3:39:fc:45:b6:4f:e5:ec:d9:f8:76:02:93:c9:7d:7d:16:56: 02:46:2f:dd:44:e2:57:4f:73:7c:62:37:10:42:28:d4:77:70: 53:37:58:a3:29:84:b2:55:61:49:f1:e8:d3:25:a6:0e:2c:e4: b7:1c:ea:46 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUOhXfKX93M7pPr8qjPW5D4/pcCQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMDRaFw0yNzAxMDUxODU4MDRaMDMxMTAvBgNV BAMTKDY3RUE5RDJDNkUyQkJFMjAzOTBGOEExN0JFNEU2NkVCQjg3NDZFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVqbWd6Rdxb0ywZ4E0UPg+8Y0 am3IGcuOFy8ctc2Yt7IMm4dd61c8Bn9/V6hOcK3EkkVyvbxlj/wwrHRb4b9nAp+6 gvcYU6n3xZZqaHqo/RjilvROcgPB5QUgOJuKJsTRFa5MqezZhyfBxsuwpnE36ktU Z8QpowSSKEl97eSJNtVdG8tWXy+/Knm9zbz7K60FbY1fkT2+RuJ00iizUFHTaXf0 3fsKsTcndiHkSt9BTdGNLlowjPn76B2T1tJ4fMSibrtYw3RIdDZmR8mn7mWIfKB8 Ryl1679CGOQwjUcJDhipokR1q4hQ5ugCFoyi6TXDzu5LnHDSGhgKKxzvUHDfAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUZ+qdLG4rviA5D4oXvk5m67h0brgwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMjM0MmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqOoY MA0GCSqGSIb3DQEBCwUAA4IBAQBX9gsF5fgIkPVjampW54pLe2T0obymWcrG1iHn uF97VWFJXBW6kTGwseskMXvKM3FhJVHV/Ky1IstoX2PU+jrOe4YFzyZ9YcRjeQzS zK0IUcG3dtineHZEyn/yzQJqNxnyG1wtlMhWkCMoAdm9eCvjZc/5YewAJvbTW0Cm e3jj+hubMTcuPISVexaKdkSfvI/k0yXwh0OyYU8OplA36nXZiulcPqHecRKONbHJ tvr5krWL9a7XhOi/al6Lc9izQDaSxv2KI9/jOfxFtk/l7Nn4dgKTyX19FlYCRi/d ROJXT3N8YjcQQijUd3BTN1ijKYSyVWFJ8ejTJaYOLOS3HOpG -----END CERTIFICATE-----Generated at Tue Jan 13 12:35:02 2026 by rpki-client