This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa File: 3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa (raw, json) Hash identifier: /BPUbl446e1nen0u2jLfcZSZgVH1FMhWWrbqZ/dH6xA= Subject key identifier: 20:14:11:92:B5:0A:86:A8:48:64:82:B5:D8:57:4E:FD:57:AB:A2:BF Certificate issuer: /CN=858889372446EF678E35E9D349C0785A81B8FBB7 Certificate serial: 1932A54B949F09EBE6AAE1F740AE02BF1AA9D4B3 Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa Signing time: Thu 08 Jan 2026 17:59:29 +0000 ROA not before: Thu 08 Jan 2026 17:54:29 +0000 ROA not after: Thu 07 Jan 2027 17:59:29 +0000 asID: 28317 IP address blocks: 138.121.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 02:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:32:a5:4b:94:9f:09:eb:e6:aa:e1:f7:40:ae:02:bf:1a:a9:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7 Validity Not Before: Jan 8 17:54:29 2026 GMT Not After : Jan 7 17:59:29 2027 GMT Subject: CN=20141192B50A86A8486482B5D8574EFD57ABA2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:39:90:f2:9a:e8:e1:f7:ad:32:7a:2d:76: 55:bd:39:b8:3e:70:a0:7b:2b:9a:ba:6d:45:ce:f5: 8a:82:b8:ac:16:33:42:d3:90:95:95:f2:f9:1d:09: 4e:4c:2c:c9:a0:41:35:94:87:b9:8a:3a:8a:45:60: 99:83:13:db:d7:35:d4:9c:c1:e3:b5:7b:58:ea:39: 3e:40:c2:13:7b:41:84:09:98:2e:49:8b:72:2d:2b: 2d:0e:ef:29:d1:b9:28:0f:46:c2:b0:d5:ef:93:31: 4f:cc:af:7a:59:7a:b7:75:e1:77:c8:9d:28:9d:7d: 0b:ba:c2:f3:3a:92:47:c3:67:9d:b6:54:c1:e1:6a: cd:27:59:50:80:71:11:de:a8:0f:b4:ab:ea:17:ad: 88:ad:57:c3:3b:69:5d:04:d5:8b:ce:26:1c:0f:93: ff:8f:4b:ce:4d:ab:9d:c9:6a:85:61:73:1e:10:79: 73:c6:62:d8:30:2d:b4:15:53:cc:99:e3:3f:9c:7d: ef:b5:e0:cb:e7:ca:61:b6:b3:65:c0:87:95:7b:27: 5d:47:cb:fe:09:60:6e:f4:25:a0:5a:59:1a:f0:52: a8:cc:d5:81:af:16:3a:04:ad:4b:fb:8d:49:84:a4: 7e:7c:b8:dc:95:e4:f6:22:9e:7c:9f:95:9a:2c:21: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:14:11:92:B5:0A:86:A8:48:64:82:B5:D8:57:4E:FD:57:AB:A2:BF X509v3 Authority Key Identifier: keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.140.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:48:ab:a1:dc:dc:c4:4e:ee:c8:d0:91:d8:a5:35:20:de:40: a5:5d:a2:c1:a4:96:59:38:7f:3a:b6:29:85:05:74:e2:76:f5: 38:75:46:d8:0c:20:e0:70:42:3e:32:7a:9e:be:42:94:be:12: f6:7f:c2:94:44:78:8d:42:fc:9f:90:8f:eb:04:17:af:0d:7a: da:b6:73:22:68:90:3d:3d:0a:dc:06:00:33:8b:2a:b9:bd:e5: 7b:f0:d6:98:e2:00:af:f3:a0:7b:d1:8a:25:90:a9:9e:0c:7d: cc:b9:89:d4:20:ce:eb:e0:55:7f:33:c5:c8:c9:ed:22:d2:4f: f9:f0:09:2c:2c:4e:ff:e4:b7:9f:3b:47:a7:38:63:c9:bf:39: cd:16:ab:19:6b:16:68:a2:f4:26:ea:bb:ba:28:97:d9:69:f8: ac:db:0c:5b:56:38:71:a0:a5:30:4f:52:87:bf:c7:1f:79:0c: f9:f8:bd:75:40:5c:a8:5d:fc:60:3c:58:c1:bd:7a:af:cf:c4: 11:15:c5:0a:34:34:9d:56:e8:12:7a:f1:b2:8e:ce:73:15:1f: f1:a2:d4:82:b6:7c:3f:1d:f4:c1:88:48:1e:e3:79:17:90:c0: 9c:d0:c2:95:cf:a7:2c:98:51:fd:52:06:ff:04:fe:5f:21:ee: 1f:b3:e1:7a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUGTKlS5SfCevmquH3QK4Cvxqp1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4 MUI4RkJCNzAeFw0yNjAxMDgxNzU0MjlaFw0yNzAxMDcxNzU5MjlaMDMxMTAvBgNV BAMTKDIwMTQxMTkyQjUwQTg2QTg0ODY0ODJCNUQ4NTc0RUZENTdBQkEyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdmDmQ8pro4fetMnotdlW9Obg+ cKB7K5q6bUXO9YqCuKwWM0LTkJWV8vkdCU5MLMmgQTWUh7mKOopFYJmDE9vXNdSc weO1e1jqOT5AwhN7QYQJmC5Ji3ItKy0O7ynRuSgPRsKw1e+TMU/Mr3pZerd14XfI nSidfQu6wvM6kkfDZ522VMHhas0nWVCAcRHeqA+0q+oXrYitV8M7aV0E1YvOJhwP k/+PS85Nq53JaoVhcx4QeXPGYtgwLbQVU8yZ4z+cfe+14MvnymG2s2XAh5V7J11H y/4JYG70JaBaWRrwUqjM1YGvFjoErUv7jUmEpH58uNyV5PYinnyflZosIVmfAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUIBQRkrUKhqhIZIK12FdO/Veror8wHwYDVR0j BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2 NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4 QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzMzODJlMzEzMjMxMmUzMTM0MzAy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinmM MA0GCSqGSIb3DQEBCwUAA4IBAQAdSKuh3NzETu7I0JHYpTUg3kClXaLBpJZZOH86 timFBXTidvU4dUbYDCDgcEI+MnqevkKUvhL2f8KURHiNQvyfkI/rBBevDXratnMi aJA9PQrcBgAziyq5veV78NaY4gCv86B70YolkKmeDH3MuYnUIM7r4FV/M8XIye0i 0k/58AksLE7/5LefO0enOGPJvznNFqsZaxZoovQm6ru6KJfZafis2wxbVjhxoKUw T1KHv8cfeQz5+L11QFyoXfxgPFjBvXqvz8QRFcUKNDSdVugSevGyjs5zFR/xotSC tnw/HfTBiEge43kXkMCc0MKVz6csmFH9Ugb/BP5fIe4fs+F6 -----END CERTIFICATE-----Generated at Tue Jan 13 09:26:49 2026 by rpki-client