This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa File: 3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa (raw, json) Hash identifier: WBXA6K+zxRxF/YQh7lJHgpIZufERv6u6T9LDHv5CkLA= Subject key identifier: 50:23:F2:0D:10:02:B3:36:EC:A8:C9:92:39:A1:8B:1C:4E:6D:96:76 Certificate issuer: /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12 Certificate serial: 16C5609FFB8632BD159F8C9E7D14ADE214E27F0C Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa Signing time: Tue 06 Jan 2026 19:22:54 +0000 ROA not before: Tue 06 Jan 2026 19:17:54 +0000 ROA not after: Tue 05 Jan 2027 19:22:54 +0000 asID: 28099 IP address blocks: 168.194.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 21:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c5:60:9f:fb:86:32:bd:15:9f:8c:9e:7d:14:ad:e2:14:e2:7f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12 Validity Not Before: Jan 6 19:17:54 2026 GMT Not After : Jan 5 19:22:54 2027 GMT Subject: CN=5023F20D1002B336ECA8C99239A18B1C4E6D9676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:72:fe:2c:49:de:bf:1b:53:a2:25:20:42: 0a:82:82:d5:a9:ab:07:53:6b:e6:be:74:a2:37:fb: 3d:97:89:97:27:72:e8:db:e2:7c:cd:ff:05:8f:66: b6:4b:a3:b0:08:f5:60:8e:a2:b3:7e:93:27:00:9e: 57:45:ff:17:8c:39:70:3f:18:fe:1b:96:5e:3a:85: 37:fb:a2:cf:3c:cb:d9:e6:ce:ff:e2:1d:bf:e1:e1: f6:00:25:59:5a:24:79:1a:5b:49:1b:18:35:c1:ad: 71:39:17:7a:b4:73:26:e3:95:bd:2e:27:a5:1c:15: 65:b5:06:e2:ce:7d:10:62:dd:94:8e:b2:17:20:2f: 48:31:b7:5a:30:05:9c:3d:eb:0f:6d:0e:60:35:3f: 48:d5:d1:41:23:e4:21:6b:15:17:8b:26:f4:bc:3b: 07:3f:9f:17:df:9a:d8:f2:d0:d4:34:2e:f3:44:70: 52:70:cf:64:98:c9:b0:0f:09:7a:fe:4f:09:62:c9: 47:ac:ea:43:95:f2:0f:f6:3f:8c:f9:2a:c9:d8:21: 8c:a7:33:d5:d9:ca:58:e2:65:c4:ba:38:98:03:4e: 93:27:5f:32:ce:21:5a:c9:d1:b2:59:a0:ba:7c:16: d7:8f:fd:50:0e:cd:dd:32:ca:f1:d2:3c:aa:ef:ea: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:F2:0D:10:02:B3:36:EC:A8:C9:92:39:A1:8B:1C:4E:6D:96:76 X509v3 Authority Key Identifier: keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.199.0/24 Signature Algorithm: sha256WithRSAEncryption b5:4b:56:23:d1:63:51:3b:6c:7c:1f:3d:9e:3a:2e:10:6d:61: 2a:c6:be:9a:29:4e:a5:d4:3f:be:ad:7a:2d:59:91:de:21:75: d4:ab:20:f3:af:9f:33:26:9a:7b:16:42:5c:c4:96:fd:d2:46: a6:45:49:dc:77:82:cb:f7:8e:86:39:68:92:25:a9:a2:8f:c6: 88:b7:3b:7e:2d:09:b7:8b:2a:36:66:05:58:98:49:52:54:d6: 37:dd:f6:23:28:17:ed:26:af:71:4b:83:6d:62:b5:e9:48:a7: 54:9c:07:c3:16:b1:84:4d:4a:73:1f:25:4d:32:2d:66:c8:16: 2e:9e:ac:30:59:55:8a:cf:3b:ec:a1:ad:5e:a9:03:d6:6d:ad: 7b:a1:52:bf:23:ac:9f:87:b3:95:02:4e:46:3d:7a:47:73:71: 01:d1:b2:19:de:00:36:d8:fb:92:22:8a:96:30:ea:89:b0:91: 94:9a:1e:c2:1e:e4:a2:60:b7:b6:ea:d2:20:72:e1:c4:0a:eb: 8a:a7:c4:75:7a:b9:30:7a:dd:01:56:e2:2d:31:b9:05:51:0c: b6:fb:7e:dd:72:0b:fe:8d:da:13:b0:1e:ac:53:13:3f:bb:b6: f8:bf:82:16:21:78:60:ec:d0:92:d7:12:d4:2f:87:42:64:53: d1:08:80:f0 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUFsVgn/uGMr0Vn4yefRSt4hTifwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNzA5N0UxNEI4NjlBOTNFNDIxRkY0QkYwNzg3OEY3 RkUxREIxMjAeFw0yNjAxMDYxOTE3NTRaFw0yNzAxMDUxOTIyNTRaMDMxMTAvBgNV BAMTKDUwMjNGMjBEMTAwMkIzMzZFQ0E4Qzk5MjM5QTE4QjFDNEU2RDk2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24nL+LEnevxtToiUgQgqCgtWp qwdTa+a+dKI3+z2XiZcncujb4nzN/wWPZrZLo7AI9WCOorN+kycAnldF/xeMOXA/ GP4bll46hTf7os88y9nmzv/iHb/h4fYAJVlaJHkaW0kbGDXBrXE5F3q0cybjlb0u J6UcFWW1BuLOfRBi3ZSOshcgL0gxt1owBZw96w9tDmA1P0jV0UEj5CFrFReLJvS8 Owc/nxffmtjy0NQ0LvNEcFJwz2SYybAPCXr+TwliyUes6kOV8g/2P4z5KsnYIYyn M9XZyljiZcS6OJgDTpMnXzLOIVrJ0bJZoLp8FteP/VAOzd0yyvHSPKrv6hmlAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUUCPyDRACszbsqMmSOaGLHE5tlnYwHwYDVR0j BBgwFoAUSTcJfhS4aak+Qh/0vweHj3/h2xIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMDRBMkRGMzRFNEYyMzJFNEI4OUQzODZCQ0M4Mzc0MzYw QzQyQkI5NDBFNzdEREQ4QjM1ODAwQjYzNTVDQkIzLzAvNDkzNzA5N0UxNEI4NjlB OTNFNDIxRkY0QkYwNzg3OEY3RkUxREIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTM3MDk3RTE0Qjg2OUE5M0U0 MjFGRjRCRjA3ODc4RjdGRTFEQjEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjA0QTJERjM0RTRGMjMyRTRCODlEMzg2QkNDODM3NDM2MEM0MkJCOTQw RTc3REREOEIzNTgwMEI2MzU1Q0JCMy8wLzMxMzYzODJlMzEzOTM0MmUzMTM5Mzky ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzOTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMLH MA0GCSqGSIb3DQEBCwUAA4IBAQC1S1Yj0WNRO2x8Hz2eOi4QbWEqxr6aKU6l1D++ rXotWZHeIXXUqyDzr58zJpp7FkJcxJb90kamRUncd4LL946GOWiSJamij8aItzt+ LQm3iyo2ZgVYmElSVNY33fYjKBftJq9xS4NtYrXpSKdUnAfDFrGETUpzHyVNMi1m yBYunqwwWVWKzzvsoa1eqQPWba17oVK/I6yfh7OVAk5GPXpHc3EB0bIZ3gA22PuS IoqWMOqJsJGUmh7CHuSiYLe26tIgcuHECuuKp8R1erkwet0BVuItMbkFUQy2+37d cgv+jdoTsB6sUxM/u7b4v4IWIXhg7NCS1xLUL4dCZFPRCIDw -----END CERTIFICATE-----Generated at Tue Jan 13 01:41:17 2026 by rpki-client