This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133322e302f32342d3234203d3e203232313232.roa File: 3134382e3230392e3133322e302f32342d3234203d3e203232313232.roa (raw, json) Hash identifier: xPi3H0AKBpsmYzja5lrOB2XSs3GgSvHT0nXjm0FAb4M= Subject key identifier: BD:08:35:AC:DA:79:66:B8:D0:4E:F4:58:6F:8B:21:98:68:C9:7D:0E Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 47D1F4ECD00BEE5A06130DCEF0C07AFF5571D385 Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133322e302f32342d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:38 +0000 ROA not before: Tue 06 Jan 2026 19:27:38 +0000 ROA not after: Tue 05 Jan 2027 19:32:38 +0000 asID: 22122 IP address blocks: 148.209.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 18:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d1:f4:ec:d0:0b:ee:5a:06:13:0d:ce:f0:c0:7a:ff:55:71:d3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:38 2026 GMT Not After : Jan 5 19:32:38 2027 GMT Subject: CN=BD0835ACDA7966B8D04EF4586F8B219868C97D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:0a:71:b0:a3:3a:f4:45:6f:08:29:b3:89: 28:8c:2a:2e:73:9d:3a:a6:5d:8e:30:b3:35:2b:a8: d8:1b:fa:c8:d7:34:1b:67:a6:d0:d8:27:5f:9e:b7: 63:6b:4a:5d:81:ac:d6:7b:cb:9f:9f:ef:12:a8:cc: 81:38:78:bd:e5:94:d7:7d:85:38:21:e9:64:06:7d: ef:ed:7e:b9:14:16:da:0b:6b:31:7a:25:32:e4:7f: 88:dd:00:b0:8d:30:2e:66:d0:a9:91:20:0c:b6:fb: b6:37:b6:48:c2:d3:dd:0b:df:76:e6:d7:2a:f0:ff: 48:4f:20:0b:cb:df:4f:fe:55:f1:13:a7:08:f5:fe: e0:af:b9:2c:5b:24:5f:b4:c5:1b:d4:dc:3f:94:53: 12:7d:3d:41:18:00:b4:ed:10:3f:4b:a1:52:b1:a5: 35:a8:ba:73:38:2f:9e:98:fe:9e:4f:50:50:40:54: 32:e5:10:c9:6b:e6:cd:36:d8:d5:f6:5a:fb:a7:ee: 2e:9e:84:6b:22:fa:49:3e:c0:7c:ef:18:a2:dc:a1: 56:67:f1:d6:07:42:9c:16:cf:99:dd:d5:f7:aa:89: d5:44:cf:68:7a:d2:93:39:cc:5b:c2:e8:6e:71:aa: 63:b4:98:4a:a7:fd:1f:9b:61:72:35:78:d5:ac:26: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:35:AC:DA:79:66:B8:D0:4E:F4:58:6F:8B:21:98:68:C9:7D:0E X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133322e302f32342d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.132.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:1b:29:0e:7a:4b:8a:ba:b4:5d:34:36:25:0d:a5:9d:b7:9b: 76:af:8f:a1:90:eb:56:04:77:a0:16:41:13:f6:9d:83:0a:d8: e1:df:c0:67:5d:60:fd:c3:50:a2:a5:0f:e6:41:b4:3d:78:70: 15:81:e1:45:97:02:db:03:84:26:86:58:39:a5:45:c6:08:32: ae:d6:a3:12:4e:94:0a:ef:59:f0:f7:4c:00:7c:60:11:df:d8: 47:57:75:99:63:c8:ed:f8:02:77:3b:15:71:d9:01:44:2e:9a: 5e:0a:eb:ae:98:82:da:01:a1:24:96:11:fb:80:08:51:2e:4d: de:33:43:8f:28:89:87:42:46:c4:05:16:91:40:0a:8a:c0:0f: 2d:2f:5d:92:aa:04:78:3c:38:d1:db:84:60:b4:00:57:13:93: e0:25:1a:52:b7:c9:86:84:0f:0e:e6:ba:76:f7:cb:50:37:64: 78:0b:45:24:5d:52:74:8d:85:35:a4:48:12:95:53:6b:e5:51: 4c:ae:31:40:85:42:56:c9:68:d4:87:5e:b5:a5:6b:7d:47:87: 37:6c:d0:e8:9c:50:0f:f7:80:cf:89:a8:c6:4e:da:ac:d5:71: 5e:f4:5d:5f:35:e8:9a:f0:a9:bc:e2:0b:34:9b:5b:43:2a:f5: 0e:b3:45:c9 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUR9H07NAL7loGEw3O8MB6/1Vx04UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3MzhaFw0yNzAxMDUxOTMyMzhaMDMxMTAvBgNV BAMTKEJEMDgzNUFDREE3OTY2QjhEMDRFRjQ1ODZGOEIyMTk4NjhDOTdEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6ApxsKM69EVvCCmziSiMKi5z nTqmXY4wszUrqNgb+sjXNBtnptDYJ1+et2NrSl2BrNZ7y5+f7xKozIE4eL3llNd9 hTgh6WQGfe/tfrkUFtoLazF6JTLkf4jdALCNMC5m0KmRIAy2+7Y3tkjC090L33bm 1yrw/0hPIAvL30/+VfETpwj1/uCvuSxbJF+0xRvU3D+UUxJ9PUEYALTtED9LoVKx pTWounM4L56Y/p5PUFBAVDLlEMlr5s022NX2Wvun7i6ehGsi+kk+wHzvGKLcoVZn 8dYHQpwWz5nd1feqidVEz2h60pM5zFvC6G5xqmO0mEqn/R+bYXI1eNWsJmzrAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUvQg1rNp5ZrjQTvRYb4shmGjJfQ4wHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTMzMzIy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNGE MA0GCSqGSIb3DQEBCwUAA4IBAQCcGykOekuKurRdNDYlDaWdt5t2r4+hkOtWBHeg FkET9p2DCtjh38BnXWD9w1CipQ/mQbQ9eHAVgeFFlwLbA4Qmhlg5pUXGCDKu1qMS TpQK71nw90wAfGAR39hHV3WZY8jt+AJ3OxVx2QFELppeCuuumILaAaEklhH7gAhR Lk3eM0OPKImHQkbEBRaRQAqKwA8tL12SqgR4PDjR24RgtABXE5PgJRpSt8mGhA8O 5rp298tQN2R4C0UkXVJ0jYU1pEgSlVNr5VFMrjFAhUJWyWjUh161pWt9R4c3bNDo nFAP94DPiajGTtqs1XFe9F1fNeia8Km84gs0m1tDKvUOs0XJ -----END CERTIFICATE-----Generated at Mon Jan 12 17:25:03 2026 by rpki-client