This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e32392e3233322e302f32312d3234203d3e203237393431.roa File: 3230302e32392e3233322e302f32312d3234203d3e203237393431.roa (raw, json) Hash identifier: 64CnbgXkUaiLUFTbQFcKB7GfjTdkso16qjM82eWdfzU= Subject key identifier: 1D:0E:86:3A:F2:F0:D1:61:E0:11:D9:58:C7:35:C9:CF:A1:F3:5A:92 Certificate issuer: /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369 Certificate serial: 3DBCEE9574CB18B6115915D97700EDED4F6A82E3 Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e32392e3233322e302f32312d3234203d3e203237393431.roa Signing time: Tue 06 Jan 2026 18:59:56 +0000 ROA not before: Tue 06 Jan 2026 18:54:56 +0000 ROA not after: Tue 05 Jan 2027 18:59:56 +0000 asID: 27941 IP address blocks: 200.29.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bc:ee:95:74:cb:18:b6:11:59:15:d9:77:00:ed:ed:4f:6a:82:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369 Validity Not Before: Jan 6 18:54:56 2026 GMT Not After : Jan 5 18:59:56 2027 GMT Subject: CN=1D0E863AF2F0D161E011D958C735C9CFA1F35A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:bd:53:57:e9:96:0f:ef:27:c0:da:91:a4: da:6c:a7:77:94:69:37:f7:51:03:70:0b:78:49:16: e3:87:bc:48:eb:26:00:4f:ad:cd:ae:c1:23:c0:95: 49:42:51:75:92:d8:be:05:cd:d4:ed:37:ac:54:b7: 82:41:a8:b7:40:bd:24:ed:08:ab:5b:a0:92:bb:e4: 64:0f:0f:f4:73:76:0a:e6:d2:3f:e7:79:a1:ee:7b: 5d:46:c7:c1:ee:8d:c1:d5:17:ad:7f:6e:48:b7:42: 6b:50:ec:fc:a6:c9:75:a8:9d:80:61:9a:ff:cd:70: ea:dc:21:26:22:b4:17:18:ee:00:35:e2:b3:d3:8d: 17:aa:3a:87:b6:92:5f:f7:9f:f6:f7:98:4c:dd:32: e5:8e:97:90:5a:11:31:cb:37:95:9c:fb:d0:63:ab: f3:6b:2a:7a:60:1e:3e:af:0c:d0:a9:c1:84:64:84: 5d:94:8a:f7:eb:75:4b:f6:73:34:8b:32:8e:09:1e: 1d:1f:29:1a:38:53:72:cb:b7:90:13:b9:14:e2:db: b1:ec:c4:4e:49:da:7f:53:d5:32:b2:bc:1a:2c:a4: c9:b2:4d:9a:ab:a3:74:b2:dc:3b:91:1b:a7:89:a8: e8:1c:66:97:d6:11:9e:1a:60:4d:25:fd:1f:c3:aa: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0E:86:3A:F2:F0:D1:61:E0:11:D9:58:C7:35:C9:CF:A1:F3:5A:92 X509v3 Authority Key Identifier: keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e32392e3233322e302f32312d3234203d3e203237393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.29.232.0/21 Signature Algorithm: sha256WithRSAEncryption 82:bb:39:68:74:4a:05:c3:0d:a6:fc:11:8a:93:64:5c:9d:80: 8d:b0:f3:2f:83:f9:12:b9:04:1d:c8:41:4d:d7:d3:de:90:e9: e8:18:07:49:61:91:90:4f:b6:4d:75:33:94:31:98:d6:28:ce: 49:0c:6e:be:29:b1:99:c1:2d:63:ab:97:35:64:c0:00:70:c3: b8:86:da:1c:c3:62:b2:ef:5a:2c:a6:22:12:c7:d2:fd:ad:19: 09:da:09:e4:89:65:54:32:82:77:fa:bc:2d:3e:95:fb:e2:e3: f2:11:0e:8f:6c:a0:8a:f7:47:5f:22:f9:9d:9d:5d:5b:eb:90: f8:b7:12:6d:dd:88:f7:2a:bd:30:03:4c:40:09:a8:15:c8:bf: de:d1:7c:1a:e9:9a:ff:1f:6b:9d:45:a7:4a:6e:63:56:52:d1: f4:9f:4d:26:29:a0:8b:6f:fc:46:94:b1:ed:6f:fe:42:6c:45: e3:e1:e8:46:04:0b:e1:11:1f:6c:ff:a5:86:b2:02:a5:2c:75: 0b:79:49:11:64:76:d3:8d:6d:95:7d:c5:3c:d6:21:09:3b:87: eb:e6:ce:b1:f0:9f:13:6f:ed:8c:5f:70:8b:d2:10:fc:44:fb: 75:1b:1e:64:42:da:e8:98:61:6c:3d:7e:1a:5e:fa:2e:7a:f1: dd:34:b2:61 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUPbzulXTLGLYRWRXZdwDt7U9qguMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDODFFNkI4MUY0RUFEQzJCREJFMzM5QzgxRkREQjI3 NUUxOTM2OTAeFw0yNjAxMDYxODU0NTZaFw0yNzAxMDUxODU5NTZaMDMxMTAvBgNV BAMTKDFEMEU4NjNBRjJGMEQxNjFFMDExRDk1OEM3MzVDOUNGQTFGMzVBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTBb1TV+mWD+8nwNqRpNpsp3eU aTf3UQNwC3hJFuOHvEjrJgBPrc2uwSPAlUlCUXWS2L4FzdTtN6xUt4JBqLdAvSTt CKtboJK75GQPD/Rzdgrm0j/neaHue11Gx8HujcHVF61/bki3QmtQ7PymyXWonYBh mv/NcOrcISYitBcY7gA14rPTjReqOoe2kl/3n/b3mEzdMuWOl5BaETHLN5Wc+9Bj q/NrKnpgHj6vDNCpwYRkhF2UivfrdUv2czSLMo4JHh0fKRo4U3LLt5ATuRTi27Hs xE5J2n9T1TKyvBospMmyTZqro3Sy3DuRG6eJqOgcZpfWEZ4aYE0l/R/Dquz7AgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUHQ6GOvLw0WHgEdlYxzXJz6HzWpIwHwYDVR0j BBgwFoAUS8gea4H06twr2+M5yB/dsnXhk2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OTcxRTg4NDgzMzJFMzJFQTc0RDUzNjRENjM4Mjc1NjI0 NTA3NzUxNDZGMjA0Nzc2RDUxNTQ4RjA5OEUzMzYyLzAvNEJDODFFNkI4MUY0RUFE QzJCREJFMzM5QzgxRkREQjI3NUUxOTM2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QkM4MUU2QjgxRjRFQURDMkJE QkUzMzlDODFGRERCMjc1RTE5MzY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTk3MUU4ODQ4MzMyRTMyRUE3NEQ1MzY0RDYzODI3NTYyNDUwNzc1MTQ2 RjIwNDc3NkQ1MTU0OEYwOThFMzM2Mi8wLzMyMzAzMDJlMzIzOTJlMzIzMzMyMmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gd6DAN BgkqhkiG9w0BAQsFAAOCAQEAgrs5aHRKBcMNpvwRipNkXJ2AjbDzL4P5ErkEHchB TdfT3pDp6BgHSWGRkE+2TXUzlDGY1ijOSQxuvimxmcEtY6uXNWTAAHDDuIbaHMNi su9aLKYiEsfS/a0ZCdoJ5IllVDKCd/q8LT6V++Lj8hEOj2ygivdHXyL5nZ1dW+uQ +LcSbd2I9yq9MANMQAmoFci/3tF8Guma/x9rnUWnSm5jVlLR9J9NJimgi2/8RpSx 7W/+QmxF4+HoRgQL4REfbP+lhrICpSx1C3lJEWR2041tlX3FPNYhCTuH6+bOsfCf E2/tjF9wi9IQ/ET7dRseZELa6JhhbD1+Gl76Lnrx3TSyYQ== -----END CERTIFICATE-----Generated at Mon Jan 12 10:05:18 2026 by rpki-client