This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa File: 34352e3233382e31362e302f32322d3234203d3e20323636383336.roa (raw, json) Hash identifier: R2hzuuc5kGCW9hp0y2rfQCuUuqVUgZQOzqfF+KgWxnw= Subject key identifier: 95:D4:4A:94:42:3F:24:5C:94:30:29:2B:37:EC:18:23:FA:45:E3:E7 Certificate issuer: /CN=9C836840BDCD6AB6E82EDE5BA99AC306F51FB415 Certificate serial: 1D7B48F654AD89EFE564C3C215429187F7BB15C4 Authority key identifier: 9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa Signing time: Tue 06 Jan 2026 19:33:32 +0000 ROA not before: Tue 06 Jan 2026 19:28:32 +0000 ROA not after: Tue 05 Jan 2027 19:33:32 +0000 asID: 266836 IP address blocks: 45.238.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.crl rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 10:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7b:48:f6:54:ad:89:ef:e5:64:c3:c2:15:42:91:87:f7:bb:15:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C836840BDCD6AB6E82EDE5BA99AC306F51FB415 Validity Not Before: Jan 6 19:28:32 2026 GMT Not After : Jan 5 19:33:32 2027 GMT Subject: CN=95D44A94423F245C9430292B37EC1823FA45E3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:fc:1b:45:44:fb:df:5b:e6:f4:57:91:33: 76:b0:56:09:bd:c8:38:d1:6d:fc:86:e0:ba:37:de: 37:aa:4e:3c:ed:af:14:0d:fd:b1:ef:a2:04:0d:c2: 8f:6a:cc:89:eb:7e:be:2f:8b:1f:f3:40:25:45:5d: e5:3a:2d:33:15:b4:ef:2e:dd:cd:d8:8c:63:fb:4e: 59:f8:e0:91:26:66:ec:32:ab:15:8c:54:ab:c3:3a: ab:b8:d7:85:9f:63:9c:40:66:65:a6:69:50:90:5d: bc:6e:88:7a:e1:23:2a:7d:c5:13:45:2b:1b:ea:bd: 31:af:f4:c7:35:a7:2b:e6:eb:27:ff:1d:87:8f:ca: c2:2d:9e:35:95:ad:e3:93:83:02:df:0e:11:6d:ad: d1:70:ec:68:01:7f:23:85:82:55:33:93:8a:be:87: 89:85:ad:12:87:b6:9d:4d:83:2a:13:42:7f:02:aa: f8:19:c1:6a:8b:3d:3b:ec:7f:ad:36:e1:bc:0d:f4: c1:80:b4:b5:ec:84:1d:f6:31:81:8c:57:fc:5e:b0: 2a:28:9e:03:ad:81:cd:20:c7:6d:fc:ee:96:d9:99: 30:d3:5d:14:9c:47:36:25:83:c2:f3:3e:7a:65:35: f7:37:96:4c:79:28:e1:b6:74:6b:a5:1f:87:a9:57: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D4:4A:94:42:3F:24:5C:94:30:29:2B:37:EC:18:23:FA:45:E3:E7 X509v3 Authority Key Identifier: keyid:9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.16.0/22 Signature Algorithm: sha256WithRSAEncryption b8:ad:ad:d5:62:08:5f:55:ca:c2:8e:1f:22:f2:5d:ff:9f:d6: 89:bf:a9:d8:10:20:5f:9d:21:28:38:4e:85:2e:d9:40:f7:e0: 1a:9f:e1:c4:25:7a:34:0d:68:f2:6f:a2:6d:bf:ea:66:55:92: 6a:6e:21:0c:02:ac:e2:ef:24:1f:27:bb:02:b3:6b:14:35:49: 8d:94:f7:84:e2:ad:36:35:9c:15:d9:b0:7d:3d:96:a0:16:7f: 93:2e:9e:57:cd:ca:1b:b8:b2:7a:92:20:fe:d7:d7:52:6c:34: 17:58:a6:af:94:af:97:6c:60:25:48:95:1d:ef:e8:d5:d1:55: e8:5b:fc:eb:15:32:0b:8a:a7:6e:3b:c2:32:e7:34:e6:97:e0: 00:b7:a2:7e:78:79:26:de:97:cf:42:ed:07:92:2c:96:66:7c: f5:9b:c7:d0:f6:3f:8b:14:3f:0f:9a:ef:9f:84:4b:c4:d9:01: c8:51:23:94:af:08:be:09:10:59:51:f8:09:80:29:f1:9c:6a: 42:06:50:d0:94:52:3e:f2:c6:ca:26:2d:de:99:17:df:ff:d4: 61:04:e3:92:32:98:f7:c2:ca:8d:d6:b1:77:36:81:4c:f3:b7: f4:a1:86:fc:81:91:88:e8:45:19:d6:58:c7:58:d3:8d:00:3b: fb:74:c2:d7 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUHXtI9lStie/lZMPCFUKRh/e7FcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MzY4NDBCRENENkFCNkU4MkVERTVCQTk5QUMzMDZG NTFGQjQxNTAeFw0yNjAxMDYxOTI4MzJaFw0yNzAxMDUxOTMzMzJaMDMxMTAvBgNV BAMTKDk1RDQ0QTk0NDIzRjI0NUM5NDMwMjkyQjM3RUMxODIzRkE0NUUzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hfwbRUT731vm9FeRM3awVgm9 yDjRbfyG4Lo33jeqTjztrxQN/bHvogQNwo9qzInrfr4vix/zQCVFXeU6LTMVtO8u 3c3YjGP7Tln44JEmZuwyqxWMVKvDOqu414WfY5xAZmWmaVCQXbxuiHrhIyp9xRNF KxvqvTGv9Mc1pyvm6yf/HYePysItnjWVreOTgwLfDhFtrdFw7GgBfyOFglUzk4q+ h4mFrRKHtp1NgyoTQn8CqvgZwWqLPTvsf6024bwN9MGAtLXshB32MYGMV/xesCoo ngOtgc0gx2387pbZmTDTXRScRzYlg8LzPnplNfc3lkx5KOG2dGulH4epVyidAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUldRKlEI/JFyUMCkrN+wYI/pF4+cwHwYDVR0j BBgwFoAUnINoQL3NarboLt5bqZrDBvUftBUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RDU0NjgxRkZGOTk3RjgwNDBFRkE4RTFEMzVCQ0RDNEU2 NzRGMDgyM0ZCQUNDRjA2REI4OUFEN0FERUNCMDYyLzAvOUM4MzY4NDBCRENENkFC NkU4MkVERTVCQTk5QUMzMDZGNTFGQjQxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzgzNjg0MEJEQ0Q2QUI2RTgy RURFNUJBOTlBQzMwNkY1MUZCNDE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEQ1NDY4MUZGRjk5N0Y4MDQwRUZBOEUxRDM1QkNEQzRFNjc0RjA4MjNG QkFDQ0YwNkRCODlBRDdBREVDQjA2Mi8wLzM0MzUyZTMyMzMzODJlMzEzNjJlMzAy ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3uEDAN BgkqhkiG9w0BAQsFAAOCAQEAuK2t1WIIX1XKwo4fIvJd/5/Wib+p2BAgX50hKDhO hS7ZQPfgGp/hxCV6NA1o8m+ibb/qZlWSam4hDAKs4u8kHye7ArNrFDVJjZT3hOKt NjWcFdmwfT2WoBZ/ky6eV83KG7iyepIg/tfXUmw0F1imr5Svl2xgJUiVHe/o1dFV 6Fv86xUyC4qnbjvCMuc05pfgALeifnh5Jt6Xz0LtB5IslmZ89ZvH0PY/ixQ/D5rv n4RLxNkByFEjlK8IvgkQWVH4CYAp8ZxqQgZQ0JRSPvLGyiYt3pkX3//UYQTjkjKY 98LKjdaxdzaBTPO39KGG/IGRiOhFGdZYx1jTjQA7+3TC1w== -----END CERTIFICATE-----Generated at Mon Jan 12 09:25:07 2026 by rpki-client