This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/34352e3136332e32302e302f32322d3234203d3e20323637363839.roa File: 34352e3136332e32302e302f32322d3234203d3e20323637363839.roa (raw, json) Hash identifier: OPRNb+qeP9+6BrG+mKYDhubCl7Ng4m029Q49o/VOlHw= Subject key identifier: 06:21:28:44:FA:A2:14:D2:06:01:D9:73:46:E8:31:6E:44:47:49:2E Certificate issuer: /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Certificate serial: 355C0C3346F70F778823E5EB0D93F6413A564240 Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/34352e3136332e32302e302f32322d3234203d3e20323637363839.roa Signing time: Tue 06 Jan 2026 19:42:30 +0000 ROA not before: Tue 06 Jan 2026 19:37:30 +0000 ROA not after: Tue 05 Jan 2027 19:42:30 +0000 asID: 267689 IP address blocks: 45.163.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 21:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5c:0c:33:46:f7:0f:77:88:23:e5:eb:0d:93:f6:41:3a:56:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Validity Not Before: Jan 6 19:37:30 2026 GMT Not After : Jan 5 19:42:30 2027 GMT Subject: CN=06212844FAA214D20601D97346E8316E4447492E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:e0:75:7a:86:47:28:97:e4:25:65:0f:63: d4:f5:cc:af:db:c2:1f:c7:53:31:ea:0f:71:fa:c1: 7b:96:84:57:b5:6e:c5:b9:f4:78:84:2a:59:68:89: ee:ad:62:17:85:05:87:b7:07:1d:a1:7d:50:0d:64: 8a:76:14:6b:f1:1d:f8:9a:90:dc:ba:90:b4:35:20: c5:09:74:87:3e:cb:a2:62:f9:2a:dc:46:6b:66:dd: 3b:50:6d:64:9d:89:9c:19:80:ec:95:fe:85:c5:b0: 64:ce:8b:59:07:e5:6d:0c:7e:22:99:3b:ce:95:ac: 80:9e:46:20:8a:ab:57:2c:66:37:6e:6f:db:b1:63: d2:44:fd:d2:9d:1f:cc:6a:14:dc:2f:d6:e9:81:e4: 7a:2c:6d:f9:b5:d4:48:38:7a:65:ae:bb:77:45:1e: b5:79:6f:30:7d:50:92:2a:bd:b6:10:35:8e:04:9f: df:1f:b3:57:30:96:fc:ed:01:ae:3c:35:71:9d:08: 04:ed:98:0a:11:8c:83:a0:71:89:d9:3a:fc:47:b2: f0:15:2d:71:77:3c:3c:9f:bb:ac:41:c4:82:59:95: 0e:07:b0:4a:60:41:a8:55:04:c8:f8:75:16:b6:47: 9c:06:36:af:0c:90:b1:c0:94:a2:fd:99:53:25:41: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:28:44:FA:A2:14:D2:06:01:D9:73:46:E8:31:6E:44:47:49:2E X509v3 Authority Key Identifier: keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/34352e3136332e32302e302f32322d3234203d3e20323637363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:6c:53:77:01:f7:e7:c4:1a:02:ca:bd:dd:99:48:93:b2:25: 68:34:de:a4:81:49:71:06:4f:c2:0b:db:85:1d:68:f5:4b:2f: 21:03:c4:25:2d:f0:a3:a0:13:22:b9:87:2c:60:9c:7f:65:f4: ef:3e:61:c3:09:d4:14:b0:09:cd:bd:c7:7a:4d:8d:6c:63:c5: 97:b8:54:03:62:f2:e9:26:be:21:d8:dd:c8:1b:f6:d9:3b:85: ec:b5:9d:4e:98:ab:06:21:fe:54:1d:7f:c8:a9:23:2b:bc:b5: 3f:42:2a:fc:18:0d:5f:e8:12:7d:59:f4:28:75:d6:83:d9:74: a9:76:9a:1a:d7:ca:00:1f:b4:15:c3:34:0d:0c:c3:c3:60:f5: cd:97:b1:6b:4d:91:f1:1a:39:fa:94:7f:5f:6f:fe:79:a9:0d: b4:c0:e6:91:26:d9:47:03:97:0b:3d:90:eb:8e:b7:f5:61:e8: 71:99:ce:ec:ed:1d:61:b9:52:53:a9:f6:75:43:85:6b:dc:ad: a7:16:2c:5a:9d:c2:3d:2d:98:6d:74:a0:65:1e:23:6b:66:98: dc:cf:8e:77:aa:7c:4e:7c:93:ed:28:f6:51:8b:cb:98:e4:c0: ef:ed:18:91:17:e3:ec:80:c7:31:70:57:00:42:75:51:62:4b: de:b8:67:a5 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUNVwMM0b3D3eII+XrDZP2QTpWQkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQkJFOUVEQzQ0RjRCNUI0MTEyQkUwMDk3RTNCNUE5 MjBDNjhCNTAeFw0yNjAxMDYxOTM3MzBaFw0yNzAxMDUxOTQyMzBaMDMxMTAvBgNV BAMTKDA2MjEyODQ0RkFBMjE0RDIwNjAxRDk3MzQ2RTgzMTZFNDQ0NzQ5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvuB1eoZHKJfkJWUPY9T1zK/b wh/HUzHqD3H6wXuWhFe1bsW59HiEKlloie6tYheFBYe3Bx2hfVANZIp2FGvxHfia kNy6kLQ1IMUJdIc+y6Ji+SrcRmtm3TtQbWSdiZwZgOyV/oXFsGTOi1kH5W0MfiKZ O86VrICeRiCKq1csZjdub9uxY9JE/dKdH8xqFNwv1umB5Hosbfm11Eg4emWuu3dF HrV5bzB9UJIqvbYQNY4En98fs1cwlvztAa48NXGdCATtmAoRjIOgcYnZOvxHsvAV LXF3PDyfu6xBxIJZlQ4HsEpgQahVBMj4dRa2R5wGNq8MkLHAlKL9mVMlQY3FAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUBiEoRPqiFNIGAdlzRugxbkRHSS4wHwYDVR0j BBgwFoAUyqu+ntxE9LW0ESvgCX47WpIMaLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MzNBOUFCNzcxODNEMUFCQjBFRDZFRUMwNkQ0NTNDMzE3 N0Q5Nzc0QjNGOUM4NzJGQTYwQTk0NTI5QUI4NEZGLzAvQ0FBQkJFOUVEQzQ0RjRC NUI0MTEyQkUwMDk3RTNCNUE5MjBDNjhCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUFCQkU5RURDNDRGNEI1QjQx MTJCRTAwOTdFM0I1QTkyMEM2OEI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTMzQTlBQjc3MTgzRDFBQkIwRUQ2RUVDMDZENDUzQzMxNzdEOTc3NEIz RjlDODcyRkE2MEE5NDUyOUFCODRGRi8wLzM0MzUyZTMxMzYzMzJlMzIzMDJlMzAy ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM2MzgzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2jFDAN BgkqhkiG9w0BAQsFAAOCAQEAHWxTdwH358QaAsq93ZlIk7IlaDTepIFJcQZPwgvb hR1o9UsvIQPEJS3wo6ATIrmHLGCcf2X07z5hwwnUFLAJzb3Hek2NbGPFl7hUA2Ly 6Sa+IdjdyBv22TuF7LWdTpirBiH+VB1/yKkjK7y1P0Iq/BgNX+gSfVn0KHXWg9l0 qXaaGtfKAB+0FcM0DQzDw2D1zZexa02R8Ro5+pR/X2/+eakNtMDmkSbZRwOXCz2Q 64639WHocZnO7O0dYblSU6n2dUOFa9ytpxYsWp3CPS2YbXSgZR4ja2aY3M+Od6p8 TnyT7Sj2UYvLmOTA7+0YkRfj7IDHMXBXAEJ1UWJL3rhnpQ== -----END CERTIFICATE-----Generated at Mon Jan 12 10:36:48 2026 by rpki-client