This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203139393035.roa File: 3230372e3234382e3132332e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: UidrOtAy9S31Vd+MI5GMs1uMs++vDvIDV//PxIq9sAE= Subject key identifier: 3B:8D:4C:5F:78:22:49:FA:E6:F4:7A:A1:6E:0F:43:D3:56:43:6A:0E Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046 Certificate serial: 3A8CE6164C8AF04919E0E187464132CB794769FB Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203139393035.roa Signing time: Tue 06 Jan 2026 19:14:19 +0000 ROA not before: Tue 06 Jan 2026 19:09:19 +0000 ROA not after: Tue 05 Jan 2027 19:14:19 +0000 asID: 19905 IP address blocks: 207.248.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 10:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8c:e6:16:4c:8a:f0:49:19:e0:e1:87:46:41:32:cb:79:47:69:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046 Validity Not Before: Jan 6 19:09:19 2026 GMT Not After : Jan 5 19:14:19 2027 GMT Subject: CN=3B8D4C5F782249FAE6F47AA16E0F43D356436A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:2c:0f:da:c7:07:ca:06:18:21:ea:17:77: f9:fc:99:0a:2f:d3:37:7b:ea:23:4f:2f:2f:c3:40: f0:48:79:eb:9e:a2:e7:54:6b:8e:fd:f3:9a:97:2f: 96:12:29:2a:60:45:90:a6:92:d9:5d:56:c1:b7:05: 66:39:ed:48:db:cd:d8:cf:63:82:72:1a:a8:50:24: ce:6d:e3:af:ed:af:c4:20:14:3b:a2:52:9c:3a:4b: c4:9b:17:94:7d:d4:6a:bd:4f:ef:e9:32:5f:61:be: 54:f9:24:af:56:99:97:f9:73:21:d2:2d:66:34:c8: 94:3e:fe:db:5d:82:b5:3d:96:9e:76:be:37:10:4f: 84:1d:f9:73:35:20:a4:c5:23:fc:4d:0d:86:9d:d4: f9:42:79:d3:47:75:7a:8d:11:54:c8:6a:c6:7a:92: 6c:ca:d0:c3:70:8f:54:72:2e:ba:5c:51:be:8c:20: 90:27:b4:5e:99:80:c2:25:e7:ee:a8:4d:fc:26:74: bb:0c:e6:e2:eb:b7:15:b9:d7:6b:45:a1:d1:e3:1d: 7e:1d:19:fb:62:b1:04:5f:36:5e:21:11:c2:c1:27: 20:6c:38:e1:d3:6a:a7:95:e7:07:f5:2a:a7:6b:47: e0:c3:84:d0:99:cc:c1:17:8d:55:a2:4a:c7:1a:7c: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8D:4C:5F:78:22:49:FA:E6:F4:7A:A1:6E:0F:43:D3:56:43:6A:0E X509v3 Authority Key Identifier: keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.123.0/24 Signature Algorithm: sha256WithRSAEncryption 97:96:54:20:6e:cc:79:e0:65:3a:fb:c0:01:9b:ce:04:9d:75: 09:e5:e9:9d:9a:74:fd:22:66:ed:d9:ac:e3:82:bf:b2:80:71: 66:34:38:fd:de:b0:44:8d:7d:e7:4b:3d:14:ea:0a:ac:7c:7c: af:90:c1:de:e0:a5:a0:e8:d7:91:4a:db:c7:d9:0e:79:c6:c6: cd:88:a1:48:21:41:28:62:cf:fd:24:bd:26:b6:45:5d:d1:62: c2:a1:eb:b5:3e:b9:85:b9:34:eb:cd:2f:c1:a8:2c:4c:1a:07: 03:9a:5f:34:07:17:af:a7:7b:e5:0d:e4:09:ca:06:97:bb:bd: 14:2e:16:24:60:b3:59:34:ee:da:1a:a6:7f:91:9c:f9:94:d0: 90:54:b1:44:fb:9f:89:70:d1:b6:f4:52:52:31:67:2c:b0:22: 18:de:41:8d:85:87:e3:f0:dd:f1:97:7d:8e:ef:e1:72:a1:c8: cb:ce:98:48:91:da:1b:ff:bc:e0:68:5e:b5:2b:a7:26:c4:b5: 4d:37:e9:51:5e:b1:73:6a:98:86:68:71:1a:35:ef:53:21:d5: fb:b9:88:c4:26:30:48:d6:11:73:fb:b9:2e:47:4d:6c:24:74: b7:08:15:53:4e:ed:ba:b0:c8:86:d4:15:ca:14:fc:3e:37:71: 67:c7:f7:85 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUOozmFkyK8EkZ4OGHRkEyy3lHafswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTlaFw0yNzAxMDUxOTE0MTlaMDMxMTAvBgNV BAMTKDNCOEQ0QzVGNzgyMjQ5RkFFNkY0N0FBMTZFMEY0M0QzNTY0MzZBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJywP2scHygYYIeoXd/n8mQov 0zd76iNPLy/DQPBIeeueoudUa47985qXL5YSKSpgRZCmktldVsG3BWY57UjbzdjP Y4JyGqhQJM5t46/tr8QgFDuiUpw6S8SbF5R91Gq9T+/pMl9hvlT5JK9WmZf5cyHS LWY0yJQ+/ttdgrU9lp52vjcQT4Qd+XM1IKTFI/xNDYad1PlCedNHdXqNEVTIasZ6 kmzK0MNwj1RyLrpcUb6MIJAntF6ZgMIl5+6oTfwmdLsM5uLrtxW512tFodHjHX4d GftisQRfNl4hEcLBJyBsOOHTaqeV5wf1KqdrR+DDhNCZzMEXjVWiSscafCJvAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUO41MX3giSfrm9Hqhbg9D01ZDag4wHwYDVR0j BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5 NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzMy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/h7 MA0GCSqGSIb3DQEBCwUAA4IBAQCXllQgbsx54GU6+8ABm84EnXUJ5emdmnT9Imbt 2azjgr+ygHFmNDj93rBEjX3nSz0U6gqsfHyvkMHe4KWg6NeRStvH2Q55xsbNiKFI IUEoYs/9JL0mtkVd0WLCoeu1PrmFuTTrzS/BqCxMGgcDml80Bxevp3vlDeQJygaX u70ULhYkYLNZNO7aGqZ/kZz5lNCQVLFE+5+JcNG29FJSMWcssCIY3kGNhYfj8N3x l32O7+FyocjLzphIkdob/7zgaF61K6cmxLVNN+lRXrFzapiGaHEaNe9TIdX7uYjE JjBI1hFz+7kuR01sJHS3CBVTTu26sMiG1BXKFPw+N3Fnx/eF -----END CERTIFICATE-----Generated at Mon Jan 12 23:38:06 2026 by rpki-client