This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa File: 3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa (raw, json) Hash identifier: TA4i9cXihIMkVYawYDfKjFkm4/6WoJel7NRO8CJ+5Gs= Subject key identifier: B0:73:02:9E:94:E1:66:BA:EF:63:A3:A7:0C:27:DA:76:64:FF:83:B4 Certificate issuer: /CN=1FDF2DE08054C55BA3B5B59C734302F868234F58 Certificate serial: 363D3CF73DB170DC1E8F8267EFF79F5576C9137D Authority key identifier: 1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa Signing time: Tue 06 Jan 2026 20:51:20 +0000 ROA not before: Tue 06 Jan 2026 20:46:20 +0000 ROA not after: Tue 05 Jan 2027 20:51:20 +0000 asID: 52367 IP address blocks: 138.117.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 03:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3d:3c:f7:3d:b1:70:dc:1e:8f:82:67:ef:f7:9f:55:76:c9:13:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FDF2DE08054C55BA3B5B59C734302F868234F58 Validity Not Before: Jan 6 20:46:20 2026 GMT Not After : Jan 5 20:51:20 2027 GMT Subject: CN=B073029E94E166BAEF63A3A70C27DA7664FF83B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:11:3a:18:d6:3b:1d:fd:ef:f8:46:ac:b8: 57:3f:16:60:60:61:4e:43:15:cd:8c:0d:e2:30:c7: 81:12:c5:82:36:0d:ba:7b:dd:ea:4a:8e:54:63:a8: cb:03:1c:6a:0c:17:d9:3c:28:d1:ca:15:48:2d:60: 58:3c:16:6a:9a:50:df:b1:a5:68:80:85:7b:d3:9b: 53:40:48:13:b5:b9:79:e3:ac:b0:02:1b:72:5a:aa: 1d:4a:e8:4d:17:40:8b:10:b1:b7:cf:69:78:b3:1e: 20:8d:88:35:02:0a:10:32:12:54:19:3f:f7:e5:b3: 7b:0f:d2:5b:5e:ce:25:58:cc:b4:37:56:c2:b8:27: 8c:c6:cd:90:7f:b5:8d:89:b8:ba:6d:6f:9b:5e:52: e0:07:2b:cb:c2:0f:60:d5:de:ec:54:c7:aa:f9:c5: d4:4f:1b:78:8c:98:32:03:54:f2:1a:0b:9e:ac:4f: 30:69:8d:a8:38:29:06:9e:ce:be:a8:da:61:b5:0a: d3:a2:9e:eb:bd:06:82:60:d8:73:33:14:0d:02:d8: b6:01:4a:09:3b:48:37:b9:1f:67:ae:23:e5:d1:dd: 77:bf:5f:76:db:9b:88:2f:80:7c:14:6a:71:a9:1f: aa:84:9e:3c:f1:15:66:c6:ad:95:ea:a3:8f:eb:ab: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:02:9E:94:E1:66:BA:EF:63:A3:A7:0C:27:DA:76:64:FF:83:B4 X509v3 Authority Key Identifier: keyid:1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.156.0/22 Signature Algorithm: sha256WithRSAEncryption 64:4b:71:48:f7:df:03:06:55:73:47:c5:64:1b:aa:69:53:5a: cb:e3:f3:49:85:93:4d:ec:0a:13:15:8d:ff:33:e3:c9:2d:90: de:ea:ae:0e:d4:c9:e5:64:0b:5c:12:15:a9:a9:9f:d6:be:6c: 79:3a:3e:61:80:51:83:49:58:57:23:d6:f9:19:53:44:8f:2b: 90:4f:0a:3c:01:63:32:d8:74:f7:df:bd:76:37:d9:51:05:19: 66:07:17:b7:4c:22:fb:4c:e1:c8:90:3e:af:24:65:dd:08:9d: 2e:b9:46:cb:98:d9:64:e6:1f:ae:c3:93:fc:50:f1:6b:f2:81: 56:29:88:ae:62:d7:f7:ad:09:fc:89:40:5a:65:19:dc:b7:a0: b5:32:66:e8:22:e8:1f:b6:72:62:12:a9:74:2a:2f:46:8e:e0: 81:61:96:b5:91:47:a8:74:ac:9c:a9:1d:a2:44:18:b9:43:fe: 4c:58:46:3a:b2:00:99:6b:f6:b8:08:ce:f6:de:7b:57:c4:55: d8:55:65:59:34:81:4f:3c:fc:cf:2d:fe:30:e7:5d:07:5a:12: ab:18:d6:6c:56:59:de:a1:cb:06:af:8a:e5:c7:36:54:27:2d: 88:85:d2:e5:30:2f:da:38:15:68:b1:9c:eb:8f:00:79:27:d9: be:ee:2d:35 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNj089z2xcNwej4Jn7/efVXbJE30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZERjJERTA4MDU0QzU1QkEzQjVCNTlDNzM0MzAyRjg2 ODIzNEY1ODAeFw0yNjAxMDYyMDQ2MjBaFw0yNzAxMDUyMDUxMjBaMDMxMTAvBgNV BAMTKEIwNzMwMjlFOTRFMTY2QkFFRjYzQTNBNzBDMjdEQTc2NjRGRjgzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHRE6GNY7Hf3v+EasuFc/FmBg YU5DFc2MDeIwx4ESxYI2Dbp73epKjlRjqMsDHGoMF9k8KNHKFUgtYFg8FmqaUN+x pWiAhXvTm1NASBO1uXnjrLACG3Jaqh1K6E0XQIsQsbfPaXizHiCNiDUCChAyElQZ P/fls3sP0lteziVYzLQ3VsK4J4zGzZB/tY2JuLptb5teUuAHK8vCD2DV3uxUx6r5 xdRPG3iMmDIDVPIaC56sTzBpjag4KQaezr6o2mG1CtOinuu9BoJg2HMzFA0C2LYB Sgk7SDe5H2euI+XR3Xe/X3bbm4gvgHwUanGpH6qEnjzxFWbGrZXqo4/rq9jRAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUsHMCnpThZrrvY6OnDCfadmT/g7QwHwYDVR0j BBgwFoAUH98t4IBUxVujtbWcc0MC+GgjT1gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTUxOEVBNjA5NjQyRDNGNjY2RDYzOEI2RDAzMjVFRkFD MjlGRDA4NjNGRDI4RUQ2QUQxOTQ4OUNFRjQyRUM3LzAvMUZERjJERTA4MDU0QzU1 QkEzQjVCNTlDNzM0MzAyRjg2ODIzNEY1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkRGMkRFMDgwNTRDNTVCQTNC NUI1OUM3MzQzMDJGODY4MjM0RjU4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk1MThFQTYwOTY0MkQzRjY2NkQ2MzhCNkQwMzI1RUZBQzI5RkQwODYz RkQyOEVENkFEMTk0ODlDRUY0MkVDNy8wLzMxMzMzODJlMzEzMTM3MmUzMTM1MzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzNjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinWc MA0GCSqGSIb3DQEBCwUAA4IBAQBkS3FI998DBlVzR8VkG6ppU1rL4/NJhZNN7AoT FY3/M+PJLZDe6q4O1MnlZAtcEhWpqZ/Wvmx5Oj5hgFGDSVhXI9b5GVNEjyuQTwo8 AWMy2HT33712N9lRBRlmBxe3TCL7TOHIkD6vJGXdCJ0uuUbLmNlk5h+uw5P8UPFr 8oFWKYiuYtf3rQn8iUBaZRnct6C1MmboIugftnJiEql0Ki9GjuCBYZa1kUeodKyc qR2iRBi5Q/5MWEY6sgCZa/a4CM723ntXxFXYVWVZNIFPPPzPLf4w510HWhKrGNZs VlneocsGr4rlxzZUJy2IhdLlMC/aOBVosZzrjwB5J9m+7i01 -----END CERTIFICATE-----Generated at Mon Jan 12 22:16:06 2026 by rpki-client