This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36382e302f32322d3234203d3e20323632313636.roa File: 3136382e3233342e36382e302f32322d3234203d3e20323632313636.roa (raw, json) Hash identifier: jiCuTZ96OZhNZtduJHFMO0jbOiq2eB6fUh4O0BWD3sQ= Subject key identifier: F5:2F:DF:BF:8D:63:9F:43:0D:BA:3C:F4:AE:7C:23:D9:83:77:F0:73 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 1BC9D8A0A034F644F68B76908B471295F3E250F7 Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36382e302f32322d3234203d3e20323632313636.roa Signing time: Tue 06 Jan 2026 18:58:13 +0000 ROA not before: Tue 06 Jan 2026 18:53:13 +0000 ROA not after: Tue 05 Jan 2027 18:58:13 +0000 asID: 262166 IP address blocks: 168.234.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c9:d8:a0:a0:34:f6:44:f6:8b:76:90:8b:47:12:95:f3:e2:50:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Jan 6 18:53:13 2026 GMT Not After : Jan 5 18:58:13 2027 GMT Subject: CN=F52FDFBF8D639F430DBA3CF4AE7C23D98377F073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:e4:17:28:d8:3a:c2:a0:bc:87:82:23:8f: 58:79:2b:13:97:c9:78:f1:9c:57:78:a2:3c:e6:cc: ae:e4:aa:61:88:30:80:9b:1c:41:93:90:bc:3d:4b: cd:d3:1d:81:3d:90:cb:a5:54:97:e1:1f:96:86:89: 43:6d:53:b9:86:33:63:32:90:f3:d9:c1:73:a9:57: fa:7e:c5:20:f0:b7:36:88:ad:d2:2b:79:97:14:2e: 8c:f5:75:ad:87:0a:80:3e:93:57:65:f5:40:5e:68: d3:c3:83:c4:ad:f6:58:a7:9e:80:c0:61:da:13:e5: 71:90:2f:71:ca:bb:3c:e6:55:d6:69:4c:d7:39:10: 7a:43:cf:47:8a:23:cb:91:3d:b4:72:c7:b9:3d:68: 9d:39:c5:cb:38:d1:f5:04:4a:11:7d:fe:b1:e7:62: f4:70:c1:57:c2:d7:2b:00:6f:84:57:22:95:ac:16: 88:9b:6a:11:37:f0:1b:79:7a:36:b5:d9:57:e3:43: 6d:27:16:40:08:44:8d:36:f5:9d:b2:38:3c:17:75: a0:82:11:17:03:64:86:8b:bf:92:03:09:e7:63:d4: 36:43:f3:93:a3:3c:90:6f:a7:21:5f:f1:93:50:35: 88:59:3e:72:1c:bb:dd:c6:d1:b6:c6:e0:5e:07:07: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:DF:BF:8D:63:9F:43:0D:BA:3C:F4:AE:7C:23:D9:83:77:F0:73 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36382e302f32322d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.68.0/22 Signature Algorithm: sha256WithRSAEncryption a1:60:1c:00:97:73:c7:56:aa:ce:9e:78:b2:6b:ef:c4:db:df: 57:dc:a7:25:a8:78:eb:d0:a9:b3:ae:5d:8b:7a:8a:8b:b9:25: ea:1d:d4:67:5e:e0:a2:47:7c:31:b1:59:36:a3:37:7a:30:69: 13:b6:29:7b:25:9e:81:cc:5e:09:f9:5a:a5:51:51:be:08:10: da:8b:28:0f:42:be:b8:34:cd:d6:c1:96:75:c9:3b:04:73:2b: 9d:54:d3:68:75:60:a9:d8:7e:e9:8b:fe:af:60:db:b2:19:1e: 37:52:0e:05:4d:c7:b8:0b:3d:de:e4:83:4c:97:c4:cc:96:b8: 16:56:a5:77:b4:b7:3e:e6:35:e7:96:08:42:53:58:1f:62:24: 15:b2:a8:e1:99:eb:c5:37:bb:0f:cc:43:18:56:4a:9c:c6:d9: 08:75:ee:e2:0a:bc:98:08:46:73:20:36:79:1a:db:1c:b9:b1: ce:a9:36:9b:ac:43:d4:7d:e7:68:02:6a:01:e4:30:0b:90:ca: 82:99:c9:d0:f1:be:97:f1:e0:81:9c:b4:5c:78:de:2a:ee:69: ab:0b:33:3a:c3:bb:78:60:24:b5:9f:7e:1e:3f:89:8f:7a:c1: cc:dd:1c:fc:dd:41:f8:19:d9:a5:25:b8:1c:2b:e7:d5:7d:7b: 7b:32:ef:75 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUG8nYoKA09kT2i3aQi0cSlfPiUPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNjAxMDYxODUzMTNaFw0yNzAxMDUxODU4MTNaMDMxMTAvBgNV BAMTKEY1MkZERkJGOEQ2MzlGNDMwREJBM0NGNEFFN0MyM0Q5ODM3N0YwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEueQXKNg6wqC8h4Ijj1h5KxOX yXjxnFd4ojzmzK7kqmGIMICbHEGTkLw9S83THYE9kMulVJfhH5aGiUNtU7mGM2My kPPZwXOpV/p+xSDwtzaIrdIreZcULoz1da2HCoA+k1dl9UBeaNPDg8St9linnoDA YdoT5XGQL3HKuzzmVdZpTNc5EHpDz0eKI8uRPbRyx7k9aJ05xcs40fUEShF9/rHn YvRwwVfC1ysAb4RXIpWsFoibahE38Bt5eja12VfjQ20nFkAIRI029Z2yODwXdaCC ERcDZIaLv5IDCedj1DZD85OjPJBvpyFf8ZNQNYhZPnIcu93G0bbG4F4HB/aNAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU9S/fv41jn0MNujz0rnwj2YN38HMwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzNjM4MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqOpE MA0GCSqGSIb3DQEBCwUAA4IBAQChYBwAl3PHVqrOnniya+/E299X3KclqHjr0Kmz rl2LeoqLuSXqHdRnXuCiR3wxsVk2ozd6MGkTtil7JZ6BzF4J+VqlUVG+CBDaiygP Qr64NM3WwZZ1yTsEcyudVNNodWCp2H7pi/6vYNuyGR43Ug4FTce4Cz3e5INMl8TM lrgWVqV3tLc+5jXnlghCU1gfYiQVsqjhmevFN7sPzEMYVkqcxtkIde7iCryYCEZz IDZ5GtscubHOqTabrEPUfedoAmoB5DALkMqCmcnQ8b6X8eCBnLRceN4q7mmrCzM6 w7t4YCS1n34eP4mPesHM3Rz83UH4GdmlJbgcK+fVfXt7Mu91 -----END CERTIFICATE-----Generated at Mon Jan 12 09:09:20 2026 by rpki-client