This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa File: 3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa (raw, json) Hash identifier: 49XRn+HzGmOkyH0I3gzCvIsd/EMmxYTGZeHmZFXJzUU= Subject key identifier: BC:F5:F8:87:FB:53:14:88:FD:9B:A6:38:F0:E5:FD:7B:1D:85:65:4A Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 7B34536A0B45D007647ACE6DD6C87B84C7DF438A Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:41 +0000 ROA not before: Tue 06 Jan 2026 19:27:41 +0000 ROA not after: Tue 05 Jan 2027 19:32:41 +0000 asID: 22122 IP address blocks: 148.209.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Jan 2026 02:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:34:53:6a:0b:45:d0:07:64:7a:ce:6d:d6:c8:7b:84:c7:df:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:41 2026 GMT Not After : Jan 5 19:32:41 2027 GMT Subject: CN=BCF5F887FB531488FD9BA638F0E5FD7B1D85654A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:e0:32:be:5c:6b:24:66:5d:82:0f:c6:be: e0:3a:0d:f8:ea:4d:c0:ae:44:c6:d3:ed:81:29:bb: 4d:44:8b:dc:21:9b:5a:a8:79:d6:a8:aa:c4:a0:19: 1b:f6:7c:40:6b:db:5b:62:59:02:46:59:73:a4:34: 5c:c8:3a:da:bd:0c:59:e3:c2:1f:e4:1d:75:ce:4c: 04:d7:aa:09:a9:44:32:3d:bf:36:3c:34:53:b4:f4: b4:40:cb:63:52:f8:ba:c3:cf:56:2c:10:d3:cf:bc: 1d:a7:be:c6:46:d5:86:fe:c8:23:3c:5d:7d:b6:e8: 2c:a8:55:8a:fb:cd:95:cc:31:39:3d:c2:da:fe:53: 3b:a3:cd:a0:2e:fe:c7:49:23:89:52:3e:07:4d:27: e7:39:ee:b2:e7:c2:6a:68:fa:0f:d3:f8:ca:cc:44: fc:b3:ba:49:00:55:eb:44:e3:41:d9:14:a2:0e:de: f7:21:53:93:8c:26:07:3f:b4:3e:7e:04:31:b7:3d: 84:73:61:06:ea:ed:e2:25:06:9b:35:63:41:44:24: cb:58:52:02:bd:3e:6c:09:ed:c2:53:78:51:8c:d9: 86:f5:e0:75:54:ed:3d:d1:f4:11:2e:37:bd:59:3c: b7:1f:df:dc:a9:37:20:11:4f:1c:3e:20:26:18:28: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F5:F8:87:FB:53:14:88:FD:9B:A6:38:F0:E5:FD:7B:1D:85:65:4A X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.208.0/23 Signature Algorithm: sha256WithRSAEncryption 98:4a:2d:ee:cc:e1:05:82:84:ad:76:b6:73:e4:85:4d:16:e1: a2:a3:f8:c1:fd:29:39:7c:7f:ee:dd:83:4d:f8:35:ad:eb:7e: d7:f6:2b:64:f4:14:15:53:0a:b0:8b:ea:05:72:c6:e6:3a:dd: 75:2b:78:4b:76:d7:8a:8a:08:de:a8:ce:d4:eb:a0:88:6b:e3: 08:2c:57:11:c8:03:ee:49:27:b2:2a:13:cb:f1:e6:93:be:d7: c5:68:79:ce:02:3f:6f:71:a7:af:22:aa:b8:fd:93:44:23:ee: 23:6c:c5:2d:3a:0c:cf:c5:76:76:ac:58:8d:3f:67:52:93:1a: 85:da:b6:32:03:e2:80:b1:86:68:44:ac:e1:5e:41:1c:fc:dc: 7f:5e:f3:5b:e1:97:f0:07:ec:73:2d:5f:d3:71:9a:3a:45:00: e3:fc:63:f0:d6:13:7c:ae:08:13:c1:78:6a:96:24:0b:41:c0: d2:5e:86:60:d3:c7:68:3b:71:8a:21:ff:92:d5:27:f8:6b:1b: 27:89:68:de:20:62:80:f4:75:0e:fb:5a:c7:81:8b:2b:a3:fb: 74:a0:f2:97:30:33:af:5c:02:bb:0e:70:7a:77:b5:0f:c5:b8: 83:39:9e:94:20:e7:40:73:fd:6a:8b:3b:62:c0:9e:4e:de:01: e2:d6:a7:b2 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUezRTagtF0Adkes5t1sh7hMffQ4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NDFaFw0yNzAxMDUxOTMyNDFaMDMxMTAvBgNV BAMTKEJDRjVGODg3RkI1MzE0ODhGRDlCQTYzOEYwRTVGRDdCMUQ4NTY1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaO+AyvlxrJGZdgg/GvuA6Dfjq TcCuRMbT7YEpu01Ei9whm1qoedaoqsSgGRv2fEBr21tiWQJGWXOkNFzIOtq9DFnj wh/kHXXOTATXqgmpRDI9vzY8NFO09LRAy2NS+LrDz1YsENPPvB2nvsZG1Yb+yCM8 XX226CyoVYr7zZXMMTk9wtr+UzujzaAu/sdJI4lSPgdNJ+c57rLnwmpo+g/T+MrM RPyzukkAVetE40HZFKIO3vchU5OMJgc/tD5+BDG3PYRzYQbq7eIlBps1Y0FEJMtY UgK9PmwJ7cJTeFGM2Yb14HVU7T3R9BEuN71ZPLcf39ypNyARTxw+ICYYKDlNAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUvPX4h/tTFIj9m6Y48OX9ex2FZUowHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMwMzgy ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHQ MA0GCSqGSIb3DQEBCwUAA4IBAQCYSi3uzOEFgoStdrZz5IVNFuGio/jB/Sk5fH/u 3YNN+DWt637X9itk9BQVUwqwi+oFcsbmOt11K3hLdteKigjeqM7U66CIa+MILFcR yAPuSSeyKhPL8eaTvtfFaHnOAj9vcaevIqq4/ZNEI+4jbMUtOgzPxXZ2rFiNP2dS kxqF2rYyA+KAsYZoRKzhXkEc/Nx/XvNb4ZfwB+xzLV/TcZo6RQDj/GPw1hN8rggT wXhqliQLQcDSXoZg08doO3GKIf+S1Sf4axsniWjeIGKA9HUO+1rHgYsro/t0oPKX MDOvXAK7DnB6d7UPxbiDOZ6UIOdAc/1qiztiwJ5O3gHi1qey -----END CERTIFICATE-----Generated at Tue Jan 13 23:17:22 2026 by rpki-client