This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa File: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (raw, json) Hash identifier: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI= Subject key identifier: 31:AC:97:4B:67:70:39:DD:D9:25:7D:66:0D:3F:41:F3:50:EB:26:00 Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 269E1AF09C5767394BCF49AA0A0741702578A716 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa Signing time: Tue 06 Jan 2026 19:13:19 +0000 ROA not before: Tue 06 Jan 2026 19:08:19 +0000 ROA not after: Tue 05 Jan 2027 19:13:19 +0000 asID: 27947 IP address blocks: 200.9.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 02:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9e:1a:f0:9c:57:67:39:4b:cf:49:aa:0a:07:41:70:25:78:a7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Jan 6 19:08:19 2026 GMT Not After : Jan 5 19:13:19 2027 GMT Subject: CN=31AC974B677039DDD9257D660D3F41F350EB2600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:d9:bc:30:bd:21:52:8f:35:9b:a8:b6:b7: 33:9b:82:1f:11:3b:8a:2c:3e:b1:a6:30:59:44:c8: 9e:6d:fa:14:75:4c:db:ba:02:0d:97:4f:08:f4:18: 6e:eb:a2:f0:1d:46:b1:e7:7a:af:90:ef:eb:5d:80: 36:2e:ca:9a:74:d4:52:0c:5e:81:a6:24:ae:88:86: fc:1e:f4:c9:d4:c1:cd:43:e1:0d:17:47:18:06:52: 91:94:dc:36:31:bd:61:93:19:3d:ff:8b:e6:7a:4c: 5d:e6:15:f3:d0:23:ac:07:b7:15:ac:7b:f6:6f:f0: 66:42:bb:0e:93:30:30:3f:ef:ab:39:d1:f9:bb:00: 32:4b:e1:a4:1b:b2:28:2e:ad:db:d8:b7:6e:72:5d: 0d:42:0e:b1:80:f2:2d:c2:87:6d:64:31:1e:ce:02: d0:8e:3c:77:f7:82:d9:8b:16:3d:4e:50:f8:13:be: d5:5b:fa:df:78:67:0b:90:e3:88:0a:ed:92:0b:84: c6:f0:c8:8c:4a:33:9c:5e:9b:1a:3e:3e:03:a3:b4: 7e:7f:13:26:7d:73:3a:ee:96:4a:ac:f9:00:c2:89: 1c:7a:c9:f5:bf:03:23:c7:40:62:b3:28:ab:62:f2: d3:53:5c:83:43:ed:8a:29:cc:12:7b:c2:46:a2:c1: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:97:4B:67:70:39:DD:D9:25:7D:66:0D:3F:41:F3:50:EB:26:00 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.96.0/24 Signature Algorithm: sha256WithRSAEncryption aa:80:bc:35:8f:dd:e4:c7:13:cd:1d:38:11:31:17:96:32:9c: c9:43:76:16:b7:e3:06:12:2d:26:22:9b:26:f2:57:a4:33:1f: cf:5f:8b:28:72:16:49:c1:f3:88:7f:ed:8d:09:3f:a7:0f:9b: 40:c8:e3:2a:9e:11:c5:a7:5f:00:e3:f6:a5:8d:6a:57:a7:13: ae:a8:72:8c:16:81:b4:b2:02:d8:be:63:17:c6:b8:a1:64:7f: 38:50:82:52:9f:97:db:83:15:87:b2:3e:13:b3:19:c6:49:9c: 73:c5:eb:39:13:7b:0a:85:b0:3a:61:0e:85:f7:6f:bd:35:2b: 1c:34:c2:40:f4:d3:62:41:1e:33:4c:09:8b:f2:9f:8c:cd:54: ee:ea:34:d7:05:1e:83:52:88:1f:44:77:86:18:46:6f:8d:0f: 06:21:51:e1:51:1c:56:cb:da:7f:ae:b7:73:f5:19:aa:7f:fc: 3e:5c:81:96:e0:66:a2:8c:12:ea:b7:23:da:ad:d8:db:6d:98: 04:66:4e:db:6e:fe:cd:26:a8:ad:f9:e9:1a:f6:ac:7a:d2:5d: 4b:9e:be:47:9b:69:f9:08:6f:91:38:f1:29:d4:38:7f:ed:83: 77:d1:bf:ca:2a:6b:c9:a0:b3:7e:aa:aa:d6:89:dc:0f:24:22: 45:c7:ac:d4 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUJp4a8JxXZzlLz0mqCgdBcCV4pxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjAxMDYxOTA4MTlaFw0yNzAxMDUxOTEzMTlaMDMxMTAvBgNV BAMTKDMxQUM5NzRCNjc3MDM5REREOTI1N0Q2NjBEM0Y0MUYzNTBFQjI2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUINm8ML0hUo81m6i2tzObgh8R O4osPrGmMFlEyJ5t+hR1TNu6Ag2XTwj0GG7rovAdRrHneq+Q7+tdgDYuypp01FIM XoGmJK6Ihvwe9MnUwc1D4Q0XRxgGUpGU3DYxvWGTGT3/i+Z6TF3mFfPQI6wHtxWs e/Zv8GZCuw6TMDA/76s50fm7ADJL4aQbsigurdvYt25yXQ1CDrGA8i3Ch21kMR7O AtCOPHf3gtmLFj1OUPgTvtVb+t94ZwuQ44gK7ZILhMbwyIxKM5xemxo+PgOjtH5/ EyZ9czrulkqs+QDCiRx6yfW/AyPHQGKzKKti8tNTXIND7YopzBJ7wkaiwTehAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUMayXS2dwOd3ZJX1mDT9B81DrJgAwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wLzMyMzAzMDJlMzkyZTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAlgMA0GCSqG SIb3DQEBCwUAA4IBAQCqgLw1j93kxxPNHTgRMReWMpzJQ3YWt+MGEi0mIpsm8lek Mx/PX4sochZJwfOIf+2NCT+nD5tAyOMqnhHFp18A4/aljWpXpxOuqHKMFoG0sgLY vmMXxrihZH84UIJSn5fbgxWHsj4TsxnGSZxzxes5E3sKhbA6YQ6F92+9NSscNMJA 9NNiQR4zTAmL8p+MzVTu6jTXBR6DUogfRHeGGEZvjQ8GIVHhURxWy9p/rrdz9Rmq f/w+XIGW4GaijBLqtyPardjbbZgEZk7bbv7NJqit+eka9qx60l1Lnr5Hm2n5CG+R OPEp1Dh/7YN30b/KKmvJoLN+qqrWidwPJCJFx6zU -----END CERTIFICATE-----Generated at Mon Jan 12 13:11:11 2026 by rpki-client