This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa File: 3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa (raw, json) Hash identifier: ewTyPyTzlMSfdzGEZJ+IVkV856MzPBCQ1k5ewgVe9Hk= Subject key identifier: 5D:D2:7E:D3:BB:72:2D:39:98:FC:83:3B:B4:6A:DF:47:BB:CF:89:8C Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046 Certificate serial: 03F1C2ED913F31A324081BF6F979D1D1420D61AB Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa Signing time: Tue 06 Jan 2026 19:14:19 +0000 ROA not before: Tue 06 Jan 2026 19:09:19 +0000 ROA not after: Tue 05 Jan 2027 19:14:19 +0000 asID: 21575 IP address blocks: 132.251.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 10:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f1:c2:ed:91:3f:31:a3:24:08:1b:f6:f9:79:d1:d1:42:0d:61:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046 Validity Not Before: Jan 6 19:09:19 2026 GMT Not After : Jan 5 19:14:19 2027 GMT Subject: CN=5DD27ED3BB722D3998FC833BB46ADF47BBCF898C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:a0:12:b9:dc:ae:a0:22:db:8c:6e:8a:f1: aa:ad:51:1c:82:96:0f:1b:bb:1d:7f:38:8c:bd:95: 82:98:71:9c:24:9f:1f:86:aa:e9:c0:5b:53:ae:a6: df:2a:8f:87:77:b3:dc:8d:84:f6:36:b6:d8:1b:18: 51:99:8b:01:b1:97:cc:29:21:4e:37:07:4c:be:39: cc:84:57:20:38:a5:10:2c:45:03:8c:59:71:a4:74: dd:9a:12:d0:50:aa:f4:05:d4:81:2c:e2:24:c5:cd: b7:72:89:c6:02:76:eb:99:71:0a:47:2e:42:b9:68: 3a:de:7d:7f:98:6e:dc:28:f0:93:58:17:28:08:be: e1:1c:c3:9d:31:fa:b3:99:97:0e:8a:e9:b6:d8:46: e9:ef:48:bd:5d:02:d4:b6:32:9c:bf:c8:cc:d6:e6: e1:68:35:52:fe:77:d9:4a:aa:c8:11:5a:30:68:85: 57:28:bb:5d:c6:18:e1:84:dc:37:40:18:cb:08:07: a0:33:91:5a:3b:26:b5:b0:4b:4b:29:e1:06:90:aa: b5:9e:5b:3a:a0:2e:03:32:84:3b:5b:84:fd:11:ab: fc:ca:ee:7c:42:37:1a:92:ff:90:1f:3e:81:e9:ae: d4:3f:72:c4:92:aa:cd:e1:73:f5:6b:2e:35:fb:4f: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:7E:D3:BB:72:2D:39:98:FC:83:3B:B4:6A:DF:47:BB:CF:89:8C X509v3 Authority Key Identifier: keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203231353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.251.192.0/19 Signature Algorithm: sha256WithRSAEncryption 97:b7:74:dd:60:f6:1d:d2:f3:f4:25:96:3a:5f:d4:a4:f2:5c: 08:7c:ea:f4:af:7d:52:59:82:88:02:9b:a6:19:3d:f9:84:da: 73:6d:b9:0d:4b:4e:c5:3f:59:f3:dc:1d:17:a1:35:1c:b8:38: 73:72:38:58:9b:00:5d:d1:a9:82:44:04:59:e4:68:66:31:7c: 22:15:66:33:34:14:63:de:2f:72:94:af:be:68:a7:e9:3a:95: c4:8a:ec:20:c8:b8:db:8a:e0:a6:46:45:7e:f2:c2:0d:f8:ad: 76:24:28:9b:ac:9d:bb:36:2d:51:55:53:e1:5e:36:74:26:58: 26:de:88:10:38:40:31:56:20:e7:9a:be:e3:d3:e8:63:dc:e5: a4:d5:bc:5b:8b:20:db:07:e8:22:c2:4f:4e:68:80:47:8a:fe: 0a:3b:3e:16:51:da:97:ed:68:3b:71:27:6c:34:9f:04:6e:73: a9:53:55:39:66:ac:22:c4:a6:fb:c9:77:a9:6c:60:b2:5a:fe: 78:fd:fe:7d:d3:cb:ba:42:67:e5:b1:a1:f8:30:5e:76:05:46: 7c:8f:18:ba:74:25:36:5d:91:fa:bf:62:37:1e:94:f6:54:58: 80:11:de:c0:f3:33:54:0e:e4:6c:00:8f:d7:e5:00:d3:50:b7: f9:89:cc:16 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUA/HC7ZE/MaMkCBv2+XnR0UINYaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTlaFw0yNzAxMDUxOTE0MTlaMDMxMTAvBgNV BAMTKDVERDI3RUQzQkI3MjJEMzk5OEZDODMzQkI0NkFERjQ3QkJDRjg5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79aASudyuoCLbjG6K8aqtURyC lg8bux1/OIy9lYKYcZwknx+GqunAW1Oupt8qj4d3s9yNhPY2ttgbGFGZiwGxl8wp IU43B0y+OcyEVyA4pRAsRQOMWXGkdN2aEtBQqvQF1IEs4iTFzbdyicYCduuZcQpH LkK5aDrefX+Ybtwo8JNYFygIvuEcw50x+rOZlw6K6bbYRunvSL1dAtS2Mpy/yMzW 5uFoNVL+d9lKqsgRWjBohVcou13GGOGE3DdAGMsIB6AzkVo7JrWwS0sp4QaQqrWe WzqgLgMyhDtbhP0Rq/zK7nxCNxqS/5AfPoHprtQ/csSSqs3hc/VrLjX7T5UbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUXdJ+07tyLTmY/IM7tGrfR7vPiYwwHwYDVR0j BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5 NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMTM5MzIy ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhPvA MA0GCSqGSIb3DQEBCwUAA4IBAQCXt3TdYPYd0vP0JZY6X9Sk8lwIfOr0r31SWYKI ApumGT35hNpzbbkNS07FP1nz3B0XoTUcuDhzcjhYmwBd0amCRARZ5GhmMXwiFWYz NBRj3i9ylK++aKfpOpXEiuwgyLjbiuCmRkV+8sIN+K12JCibrJ27Ni1RVVPhXjZ0 Jlgm3ogQOEAxViDnmr7j0+hj3OWk1bxbiyDbB+giwk9OaIBHiv4KOz4WUdqX7Wg7 cSdsNJ8EbnOpU1U5ZqwixKb7yXepbGCyWv54/f5908u6QmflsaH4MF52BUZ8jxi6 dCU2XZH6v2I3HpT2VFiAEd7A8zNUDuRsAI/X5QDTULf5icwW -----END CERTIFICATE-----Generated at Mon Jan 12 16:42:25 2026 by rpki-client