This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa File: 3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa (raw, json) Hash identifier: kUKzNCBL+FqZVWQq2gRmP9d2hMpiUydhYYQ/+/9FFIc= Subject key identifier: 20:D1:B6:41:0C:B3:57:08:4C:96:22:7F:7D:96:09:C9:EA:21:9B:BE Certificate issuer: /CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Certificate serial: 47B28D5076DC3344B526299DE1579FAD7AC42BE7 Authority key identifier: BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa Signing time: Tue 06 Jan 2026 19:37:20 +0000 ROA not before: Tue 06 Jan 2026 19:32:20 +0000 ROA not after: Tue 05 Jan 2027 19:37:20 +0000 asID: 263790 IP address blocks: 138.121.104.0/22 maxlen: 25 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 20:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b2:8d:50:76:dc:33:44:b5:26:29:9d:e1:57:9f:ad:7a:c4:2b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Validity Not Before: Jan 6 19:32:20 2026 GMT Not After : Jan 5 19:37:20 2027 GMT Subject: CN=20D1B6410CB357084C96227F7D9609C9EA219BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:24:d2:2d:85:56:e2:d7:a8:95:b6:d8:9d: 6a:24:5b:11:99:04:08:d8:f3:ae:de:e2:3d:1c:77: 67:75:80:99:3a:5d:a6:9d:c4:e3:ca:65:ea:fc:df: f1:20:43:97:72:7d:5f:be:74:cd:7a:0a:0a:9d:42: 05:ec:93:07:8b:22:67:3e:57:2a:9a:a1:b0:6b:b9: 44:83:8b:eb:7a:5a:b3:08:46:66:e7:70:6e:17:fd: 9b:0d:9e:c5:03:41:88:ad:78:bc:8c:1c:f4:73:1a: 8b:5a:ab:ed:f5:00:b9:9a:b3:13:80:48:cf:38:19: e9:57:b0:37:82:27:f2:8c:13:07:96:20:7b:b2:af: e7:ff:0d:2e:0a:5b:b2:57:b8:dd:ca:cd:c7:15:79: 1b:62:e9:e2:40:31:e0:4f:59:76:d7:3f:d3:9d:1e: 7e:af:04:e3:ff:cc:01:35:19:0e:e7:d2:1c:0f:1d: 06:27:c7:99:da:72:20:fe:cb:5a:3e:21:86:b1:4a: d1:46:af:3a:dc:19:fd:6f:c4:2e:d8:7a:69:9b:4c: b6:31:18:41:21:96:b5:be:3f:4e:ea:0e:5e:c5:70: 6f:0f:aa:94:55:29:05:90:ae:5f:73:b7:0f:30:80: fe:83:09:c0:ad:58:c9:e7:51:5c:15:71:df:6d:8e: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:B6:41:0C:B3:57:08:4C:96:22:7F:7D:96:09:C9:EA:21:9B:BE X509v3 Authority Key Identifier: keyid:BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.104.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:56:68:e3:3c:82:cc:21:3c:2f:6a:a9:57:d4:8a:b1:a8:d3: ae:ae:15:5e:6f:ef:09:62:23:4f:61:b7:7a:4e:c1:53:f0:94: eb:c2:a7:0d:d8:a9:da:06:62:62:f4:08:3e:74:9b:d8:e0:a1: 6f:d0:b4:f9:e2:2c:5e:bc:90:53:06:bc:3f:c9:84:5e:15:4c: b3:03:26:60:2c:52:27:94:9b:7b:a1:a6:8b:48:ed:be:1e:9e: 1a:8e:ca:98:ce:8a:6b:b0:89:44:57:07:dd:cb:29:68:83:20: b3:52:4e:87:df:72:32:29:33:a3:77:cb:fe:53:86:fa:88:89: 05:6a:44:c5:e4:97:e2:5a:bc:ff:e4:3c:e5:17:cc:fe:6e:d9: 46:0f:0a:f3:bc:6d:c1:f1:cb:74:ed:f2:7d:fb:4a:4d:ab:2b: aa:8f:00:25:8e:3d:ae:9b:d7:bb:06:69:a0:59:35:a0:f4:e3: 4f:50:6a:f5:ad:09:47:a8:9a:bf:ed:e1:44:ca:21:dd:0e:b9: 84:bf:46:47:7f:32:b1:91:1e:e3:c5:d2:d0:ab:c4:be:95:9e: bc:24:89:a0:83:93:47:92:7a:98:d6:6c:35:aa:de:ea:91:27: f9:f1:fd:42:db:f9:f5:bf:5d:bb:2c:38:9e:31:e4:de:f2:15: f3:d6:b2:0c -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUR7KNUHbcM0S1Jimd4VefrXrEK+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFFNDA3RUNDODRFNEQ3NTU3RTNBRjAyMzdBQ0U1MEMw RUYzOTgyODAeFw0yNjAxMDYxOTMyMjBaFw0yNzAxMDUxOTM3MjBaMDMxMTAvBgNV BAMTKDIwRDFCNjQxMENCMzU3MDg0Qzk2MjI3RjdEOTYwOUM5RUEyMTlCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCCTSLYVW4teolbbYnWokWxGZ BAjY867e4j0cd2d1gJk6XaadxOPKZer83/EgQ5dyfV++dM16CgqdQgXskweLImc+ VyqaobBruUSDi+t6WrMIRmbncG4X/ZsNnsUDQYiteLyMHPRzGotaq+31ALmasxOA SM84GelXsDeCJ/KMEweWIHuyr+f/DS4KW7JXuN3KzccVeRti6eJAMeBPWXbXP9Od Hn6vBOP/zAE1GQ7n0hwPHQYnx5naciD+y1o+IYaxStFGrzrcGf1vxC7YemmbTLYx GEEhlrW+P07qDl7FcG8PqpRVKQWQrl9ztw8wgP6DCcCtWMnnUVwVcd9tjumPAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUING2QQyzVwhMliJ/fZYJyeohm74wHwYDVR0j BBgwFoAUuuQH7MhOTXVX468CN6zlDA7zmCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMTAxOUE2Njg0OTRFOEUzREZCN0RFNTlGOUIwOUY4OUIz QTgwRTI4OTM2Qzc0NDJFQzk1QjNGMjUxMDAwMzkyLzAvQkFFNDA3RUNDODRFNEQ3 NTU3RTNBRjAyMzdBQ0U1MEMwRUYzOTgyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUU0MDdFQ0M4NEU0RDc1NTdF M0FGMDIzN0FDRTUwQzBFRjM5ODI4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjEwMTlBNjY4NDk0RThFM0RGQjdERTU5RjlCMDlGODlCM0E4MEUyODkz NkM3NDQyRUM5NUIzRjI1MTAwMDM5Mi8wLzMxMzMzODJlMzEzMjMxMmUzMTMwMzQy ZTMwMmYzMjMyMmQzMjM1MjAzZDNlMjAzMjM2MzMzNzM5MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK eWgwDQYJKoZIhvcNAQELBQADggEBACpWaOM8gswhPC9qqVfUirGo066uFV5v7wli I09ht3pOwVPwlOvCpw3YqdoGYmL0CD50m9jgoW/QtPniLF68kFMGvD/JhF4VTLMD JmAsUieUm3uhpotI7b4enhqOypjOimuwiURXB93LKWiDILNSToffcjIpM6N3y/5T hvqIiQVqRMXkl+JavP/kPOUXzP5u2UYPCvO8bcHxy3Tt8n37Sk2rK6qPACWOPa6b 17sGaaBZNaD0409QavWtCUeomr/t4UTKId0OuYS/Rkd/MrGRHuPF0tCrxL6Vnrwk iaCDk0eSepjWbDWq3uqRJ/nx/ULb+fW/XbssOJ4x5N7yFfPWsgw= -----END CERTIFICATE-----Generated at Mon Jan 12 09:29:06 2026 by rpki-client