This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230312e3231392e3234302e302f32312d3234203d3e203237393431.roa File: 3230312e3231392e3234302e302f32312d3234203d3e203237393431.roa (raw, json) Hash identifier: +Xdvx023Tgw9bNkB6UqJE/1wA120+IrXIn/ES4NQt8k= Subject key identifier: C6:24:03:0F:40:75:E7:F5:67:9D:26:AE:18:6C:58:F4:FC:04:FD:26 Certificate issuer: /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369 Certificate serial: 3E4F4A6D5A1124D2CE88B674F106769F4F0CBE2E Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230312e3231392e3234302e302f32312d3234203d3e203237393431.roa Signing time: Tue 06 Jan 2026 18:59:55 +0000 ROA not before: Tue 06 Jan 2026 18:54:55 +0000 ROA not after: Tue 05 Jan 2027 18:59:55 +0000 asID: 27941 IP address blocks: 201.219.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4f:4a:6d:5a:11:24:d2:ce:88:b6:74:f1:06:76:9f:4f:0c:be:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369 Validity Not Before: Jan 6 18:54:55 2026 GMT Not After : Jan 5 18:59:55 2027 GMT Subject: CN=C624030F4075E7F5679D26AE186C58F4FC04FD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:ed:b8:8b:a9:fc:87:34:92:27:3f:70:4d: f7:b6:66:26:09:53:95:12:ec:21:65:94:e6:d2:26: d8:56:e7:e9:c8:6e:3c:46:9d:da:4d:b8:df:86:ac: 99:04:c9:68:ac:51:ca:98:f0:98:cd:d1:89:73:94: 5e:f3:d7:06:38:4d:5c:f4:5c:48:72:5f:36:87:2c: 8b:d9:c9:ae:5f:82:93:80:59:dc:a7:35:dd:84:3e: 0c:e9:89:98:24:36:a7:8b:2c:ee:7c:d8:0c:04:89: f4:1a:a0:1c:6c:a7:1e:dc:82:b0:8d:6e:be:30:cb: 05:7e:71:4c:cb:80:e3:fa:6b:69:d2:88:aa:27:d1: 8d:ae:97:b3:3d:dc:1d:7b:15:05:95:b7:f9:db:72: f3:ce:f6:db:7e:81:ec:ee:bf:57:7c:fc:fd:8d:80: d1:1a:b4:f4:76:82:f2:22:48:c3:c9:ac:bc:3d:2c: e8:2c:b6:44:1b:de:1a:cb:df:95:00:f2:db:8c:b5: 85:c8:11:1f:3d:6e:fb:33:78:ac:67:01:2e:0a:5c: 0f:c5:08:64:75:c3:9e:55:1f:ef:1a:2f:ec:39:64: 2e:d0:60:a5:b1:4d:58:cc:c9:b0:95:64:12:93:57: 84:7d:22:04:05:d6:74:f5:11:fa:56:ff:07:ee:9e: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:24:03:0F:40:75:E7:F5:67:9D:26:AE:18:6C:58:F4:FC:04:FD:26 X509v3 Authority Key Identifier: keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230312e3231392e3234302e302f32312d3234203d3e203237393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.219.240.0/21 Signature Algorithm: sha256WithRSAEncryption 66:30:b7:57:35:7e:2e:76:ae:a6:8e:90:f2:07:c9:84:bf:0e: 73:7b:21:11:b6:1f:65:0b:7e:99:65:13:ff:b1:d0:c3:81:cf: 30:5f:ed:1a:06:25:09:66:71:a2:17:a5:d8:dd:4c:51:e5:42: 41:d8:63:fe:fd:45:a8:68:d4:6e:c8:9e:d7:85:cc:3e:1c:06: 74:56:b5:05:56:33:4c:c8:72:46:12:e3:58:84:45:e5:47:ac: 8b:14:f5:f1:44:0f:d7:0c:5e:95:51:84:dd:92:29:a1:89:8e: 10:eb:f8:90:27:d0:b0:c1:9a:ea:16:48:01:27:ee:cc:35:7a: 19:ea:6b:48:3d:0b:a9:70:77:86:6c:18:11:8d:70:7d:4b:4c: f4:61:58:ca:82:68:96:29:a9:44:d2:11:e5:8e:03:0d:eb:81: 69:ae:ad:44:6f:3f:32:87:d8:af:0b:3b:80:1d:f0:87:2f:12: 54:8f:3e:86:13:4b:28:50:70:c0:53:6c:98:04:ee:f8:b4:db: 0c:64:35:6e:b8:74:43:43:00:dc:3c:b1:f1:dc:95:06:85:80: e7:92:1f:c6:e3:9d:5d:fc:b9:ac:0b:42:f8:db:1f:67:5a:80: 42:8b:04:d4:ad:65:59:b0:77:1c:08:78:ea:43:5b:6d:82:40: bf:6b:b0:9d -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUPk9KbVoRJNLOiLZ08QZ2n08Mvi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDODFFNkI4MUY0RUFEQzJCREJFMzM5QzgxRkREQjI3 NUUxOTM2OTAeFw0yNjAxMDYxODU0NTVaFw0yNzAxMDUxODU5NTVaMDMxMTAvBgNV BAMTKEM2MjQwMzBGNDA3NUU3RjU2NzlEMjZBRTE4NkM1OEY0RkMwNEZEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EO24i6n8hzSSJz9wTfe2ZiYJ U5US7CFllObSJthW5+nIbjxGndpNuN+GrJkEyWisUcqY8JjN0YlzlF7z1wY4TVz0 XEhyXzaHLIvZya5fgpOAWdynNd2EPgzpiZgkNqeLLO582AwEifQaoBxspx7cgrCN br4wywV+cUzLgOP6a2nSiKon0Y2ul7M93B17FQWVt/nbcvPO9tt+gezuv1d8/P2N gNEatPR2gvIiSMPJrLw9LOgstkQb3hrL35UA8tuMtYXIER89bvszeKxnAS4KXA/F CGR1w55VH+8aL+w5ZC7QYKWxTVjMybCVZBKTV4R9IgQF1nT1EfpW/wfunkDBAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUxiQDD0B15/VnnSauGGxY9PwE/SYwHwYDVR0j BBgwFoAUS8gea4H06twr2+M5yB/dsnXhk2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OTcxRTg4NDgzMzJFMzJFQTc0RDUzNjRENjM4Mjc1NjI0 NTA3NzUxNDZGMjA0Nzc2RDUxNTQ4RjA5OEUzMzYyLzAvNEJDODFFNkI4MUY0RUFE QzJCREJFMzM5QzgxRkREQjI3NUUxOTM2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QkM4MUU2QjgxRjRFQURDMkJE QkUzMzlDODFGRERCMjc1RTE5MzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTk3MUU4ODQ4MzMyRTMyRUE3NEQ1MzY0RDYzODI3NTYyNDUwNzc1MTQ2 RjIwNDc3NkQ1MTU0OEYwOThFMzM2Mi8wLzMyMzAzMTJlMzIzMTM5MmUzMjM0MzAy ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzkzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDydvw MA0GCSqGSIb3DQEBCwUAA4IBAQBmMLdXNX4udq6mjpDyB8mEvw5zeyERth9lC36Z ZRP/sdDDgc8wX+0aBiUJZnGiF6XY3UxR5UJB2GP+/UWoaNRuyJ7Xhcw+HAZ0VrUF VjNMyHJGEuNYhEXlR6yLFPXxRA/XDF6VUYTdkimhiY4Q6/iQJ9CwwZrqFkgBJ+7M NXoZ6mtIPQupcHeGbBgRjXB9S0z0YVjKgmiWKalE0hHljgMN64Fprq1Ebz8yh9iv CzuAHfCHLxJUjz6GE0soUHDAU2yYBO74tNsMZDVuuHRDQwDcPLHx3JUGhYDnkh/G 451d/LmsC0L42x9nWoBCiwTUrWVZsHccCHjqQ1ttgkC/a7Cd -----END CERTIFICATE-----Generated at Mon Jan 12 10:05:18 2026 by rpki-client