This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa File: 34352e36382e342e302f32322d3234203d3e20323731383835.roa (raw, json) Hash identifier: YQvukFYN6lfvv5z/XFsaaYZ6iCT2FLwfRm7lxapA/B0= Subject key identifier: 01:37:7E:11:BA:02:ED:FC:29:75:B9:1D:45:02:38:5F:B4:2C:11:3E Certificate issuer: /CN=AADC68CACCD7A12B6A019949E964F33953EF7228 Certificate serial: 3F4418E7C9D9ED4FBA6757F6A5E1E8B93FF47423 Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa Signing time: Tue 06 Jan 2026 19:26:46 +0000 ROA not before: Tue 06 Jan 2026 19:21:46 +0000 ROA not after: Tue 05 Jan 2027 19:26:46 +0000 asID: 271885 IP address blocks: 45.68.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 16:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:44:18:e7:c9:d9:ed:4f:ba:67:57:f6:a5:e1:e8:b9:3f:f4:74:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228 Validity Not Before: Jan 6 19:21:46 2026 GMT Not After : Jan 5 19:26:46 2027 GMT Subject: CN=01377E11BA02EDFC2975B91D4502385FB42C113E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:dd:ba:87:2d:54:a1:5f:52:53:6f:5f:43: ac:76:70:20:02:7b:99:a2:4a:1e:40:b6:a3:7d:da: 7a:74:ed:bf:3e:a3:ca:07:73:be:96:40:20:61:07: e9:a5:66:4e:f2:11:21:30:32:f0:23:94:31:b5:60: 78:20:74:3a:3c:e6:86:45:da:74:46:d5:40:10:dc: e4:a8:2d:5d:93:01:c3:ae:d9:49:92:39:f1:fe:23: e7:85:3a:b1:1e:8a:e9:c5:12:dd:bd:e6:7a:2d:b2: 40:cd:1f:e9:ef:1b:97:b9:05:52:e0:3d:d4:7a:f7: 28:fb:3f:64:6b:2d:9e:ea:ff:e6:12:99:0a:7e:1e: 62:be:70:5c:f6:3a:c0:b9:33:80:8a:23:f2:bd:cf: b4:ba:11:53:70:9a:7e:13:41:14:d0:52:6d:1e:88: a1:c4:df:cf:76:22:9e:01:b3:1e:4e:09:5b:3c:3f: 60:7e:1b:02:f4:0a:da:16:c8:c4:1f:92:79:cd:43: a9:5f:de:84:1c:c2:64:44:7b:32:00:e6:f1:08:5a: 08:c5:71:6a:39:3d:ac:6d:91:25:ae:f8:98:f2:22: b3:1d:46:6f:2a:11:ef:df:8c:e3:65:03:15:1c:74: 37:2d:c5:67:72:1a:93:c3:ef:f6:c0:23:c0:7d:8b: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:7E:11:BA:02:ED:FC:29:75:B9:1D:45:02:38:5F:B4:2C:11:3E X509v3 Authority Key Identifier: keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:b0:a2:3a:f6:b2:b5:f0:5b:20:ff:9e:1d:63:16:ee:d0:1a: a6:58:73:9d:bc:f9:e9:ac:c6:3d:2e:a6:50:3f:2a:d8:72:c3: c1:93:15:4d:88:85:73:fa:b7:19:5b:d3:99:07:d5:6a:ae:2c: be:7b:b7:31:90:90:6a:de:de:ab:81:07:bb:ab:a0:26:05:37: 8e:9f:f7:7e:15:47:a4:db:0f:59:73:bf:c1:22:80:1b:80:f9: 00:90:f1:ac:9e:e0:63:cf:9a:f7:dd:99:e2:42:36:40:38:a7: 3d:de:57:6e:39:ed:29:35:9d:ca:0c:9a:44:4f:ee:3d:86:53: c1:38:db:5e:73:d0:a8:0b:a0:93:12:f9:bb:75:e8:fd:07:38: bc:ea:db:f2:aa:1b:a1:c1:49:dd:0f:91:1a:7c:65:48:24:2e: 88:1c:af:a8:f9:66:d6:b2:c3:73:d1:09:f9:5e:d3:7c:a7:51: 3f:c0:8a:ad:4c:23:9b:33:26:e5:7f:34:49:fa:f4:2a:3e:45: fa:d8:30:94:b9:48:64:7c:52:d4:3f:20:96:fb:6f:a1:41:72: 24:bb:0d:41:1e:33:d4:65:be:f5:59:e2:66:be:a1:c2:d4:fa: 22:71:50:45:db:d8:66:92:94:34:e7:6c:a5:cd:32:b9:af:3d: d3:38:de:02 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUP0QY58nZ7U+6Z1f2peHouT/0dCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFEQzY4Q0FDQ0Q3QTEyQjZBMDE5OTQ5RTk2NEYzMzk1 M0VGNzIyODAeFw0yNjAxMDYxOTIxNDZaFw0yNzAxMDUxOTI2NDZaMDMxMTAvBgNV BAMTKDAxMzc3RTExQkEwMkVERkMyOTc1QjkxRDQ1MDIzODVGQjQyQzExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgid26hy1UoV9SU29fQ6x2cCAC e5miSh5AtqN92np07b8+o8oHc76WQCBhB+mlZk7yESEwMvAjlDG1YHggdDo85oZF 2nRG1UAQ3OSoLV2TAcOu2UmSOfH+I+eFOrEeiunFEt295notskDNH+nvG5e5BVLg PdR69yj7P2RrLZ7q/+YSmQp+HmK+cFz2OsC5M4CKI/K9z7S6EVNwmn4TQRTQUm0e iKHE3892Ip4Bsx5OCVs8P2B+GwL0CtoWyMQfknnNQ6lf3oQcwmREezIA5vEIWgjF cWo5PaxtkSWu+JjyIrMdRm8qEe/fjONlAxUcdDctxWdyGpPD7/bAI8B9i7wJAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUATd+EboC7fwpdbkdRQI4X7QsET4wHwYDVR0j BBgwFoAUqtxoyszXoStqAZlJ6WTzOVPvcigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjFFRDExNERCRDYwOThDMjhFQTlERkMzM0UwRkIxQUNE QUNCNDEwQzkxRDcyNUExQzIyOTVCNDM5QTlGQzNDLzAvQUFEQzY4Q0FDQ0Q3QTEy QjZBMDE5OTQ5RTk2NEYzMzk1M0VGNzIyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQURDNjhDQUNDRDdBMTJCNkEw MTk5NDlFOTY0RjMzOTUzRUY3MjI4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjIxRUQxMTREQkQ2MDk4QzI4RUE5REZDMzNFMEZCMUFDREFDQjQxMEM5 MUQ3MjVBMUMyMjk1QjQzOUE5RkMzQy8wLzM0MzUyZTM2MzgyZTM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUQEMA0GCSqG SIb3DQEBCwUAA4IBAQBssKI69rK18Fsg/54dYxbu0BqmWHOdvPnprMY9LqZQPyrY csPBkxVNiIVz+rcZW9OZB9Vqriy+e7cxkJBq3t6rgQe7q6AmBTeOn/d+FUek2w9Z c7/BIoAbgPkAkPGsnuBjz5r33ZniQjZAOKc93lduOe0pNZ3KDJpET+49hlPBONte c9CoC6CTEvm7dej9Bzi86tvyqhuhwUndD5EafGVIJC6IHK+o+WbWssNz0Qn5XtN8 p1E/wIqtTCObMyblfzRJ+vQqPkX62DCUuUhkfFLUPyCW+2+hQXIkuw1BHjPUZb71 WeJmvqHC1PoicVBF29hmkpQ052ylzTK5rz3TON4C -----END CERTIFICATE-----Generated at Tue Jan 13 13:32:37 2026 by rpki-client