This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa File: 3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa (raw, json) Hash identifier: uhgP9teMQPXDp6pPT2m/mN82+Tq5+3UBZ5zuXyvPPmg= Subject key identifier: BF:65:72:6B:F2:1D:66:6F:05:ED:F8:79:91:4E:6E:B6:EF:30:76:88 Certificate issuer: /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Certificate serial: 03B21DA4765207E7398BE92EE31C02FDA0C37C5D Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa Signing time: Tue 06 Jan 2026 20:49:32 +0000 ROA not before: Tue 06 Jan 2026 20:44:32 +0000 ROA not after: Tue 05 Jan 2027 20:49:32 +0000 asID: 262207 IP address blocks: 190.151.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b2:1d:a4:76:52:07:e7:39:8b:e9:2e:e3:1c:02:fd:a0:c3:7c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553 Validity Not Before: Jan 6 20:44:32 2026 GMT Not After : Jan 5 20:49:32 2027 GMT Subject: CN=BF65726BF21D666F05EDF879914E6EB6EF307688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:ea:b6:b9:1d:c0:65:c0:61:ff:5f:de:3c: 4d:f9:23:4a:63:a5:00:8a:3b:5f:39:31:7b:6b:8d: 30:13:5b:e5:72:db:64:65:d4:4b:60:9b:ca:c2:13: d5:ed:93:76:e9:8f:77:a4:01:77:b6:3b:31:db:c2: 3c:0c:77:59:66:de:db:25:e5:6f:91:61:ed:75:69: 67:0c:b8:2e:03:34:63:f6:26:71:88:a1:07:1e:0d: f6:c2:bc:b9:60:b3:c9:ec:c3:5f:e2:5c:98:66:d4: 80:ba:be:4b:79:a9:6a:80:c6:c3:08:af:c0:85:c1: 6f:c9:5a:53:29:6d:c8:0e:b1:53:99:4f:fd:f3:a4: cb:39:9a:05:1a:3f:23:13:90:84:9a:28:ed:6d:c3: 47:1a:e0:68:48:38:9c:24:87:92:65:a4:0a:53:f2: 18:77:63:65:63:93:d1:06:0f:1c:98:33:1a:b2:d4: 5f:ff:50:cd:0f:df:33:a6:13:0e:a8:7a:43:84:c7: 64:44:aa:7b:f9:1f:98:75:04:f9:f6:0f:dc:c7:38: 22:9b:cd:02:df:fc:a0:c6:16:89:c9:78:8c:c8:9b: 8f:86:00:4c:3b:96:aa:44:75:28:06:8f:c3:80:55: 3b:25:1a:51:c2:aa:e3:16:ec:32:53:e5:d9:1b:54: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:72:6B:F2:1D:66:6F:05:ED:F8:79:91:4E:6E:B6:EF:30:76:88 X509v3 Authority Key Identifier: keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.151.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:0f:bc:78:13:1f:cb:17:86:4a:76:f1:b0:f2:76:bc:4e:55: 30:95:51:56:8a:aa:d0:9f:10:08:96:df:3b:5f:12:ec:42:c9: 04:b8:bd:eb:a5:b1:8b:df:69:40:33:f3:bb:db:6f:46:e7:82: 9b:f5:24:a4:27:38:71:89:68:3f:63:ef:12:46:c0:7e:93:05: 58:27:2d:a9:dc:e5:e6:ca:0a:2a:1d:7d:15:d4:fe:94:f1:1e: b0:8d:68:86:01:f9:92:2d:45:6e:09:41:e0:21:c6:02:e5:c7: b7:5d:f9:e6:ad:c6:86:c4:d5:09:32:4f:e1:49:1a:2c:e6:e7: 77:2c:7a:6b:c6:1c:a7:58:6f:c8:88:a6:e0:91:79:cf:4f:e3: cc:c1:ed:14:56:45:c9:66:85:3c:0c:46:1c:c0:af:14:7e:97: a2:71:12:eb:01:5f:f7:65:ed:af:e7:cf:1f:56:df:74:0f:d0: 2d:fe:f4:2a:57:e4:8c:8a:20:40:7c:57:f7:1f:49:5a:3a:f7: 1e:59:ba:1a:73:85:0d:a4:22:cf:8f:6d:1c:66:2f:1c:5a:6d: 4d:62:d7:1a:e3:05:a2:58:25:3d:22:d9:b1:b9:2f:97:b8:e1: f6:1c:15:ba:82:d6:2f:16:55:11:73:89:22:ce:2f:fb:e5:3f: 25:b5:cd:4a -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUA7IdpHZSB+c5i+ku4xwC/aDDfF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCRTFCOTQ4RUFERkNGQ0ZERjQ1N0EwQTkwM0YzNTc4 NjVBMjU1MzAeFw0yNjAxMDYyMDQ0MzJaFw0yNzAxMDUyMDQ5MzJaMDMxMTAvBgNV BAMTKEJGNjU3MjZCRjIxRDY2NkYwNUVERjg3OTkxNEU2RUI2RUYzMDc2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZaeq2uR3AZcBh/1/ePE35I0pj pQCKO185MXtrjTATW+Vy22Rl1Etgm8rCE9Xtk3bpj3ekAXe2OzHbwjwMd1lm3tsl 5W+RYe11aWcMuC4DNGP2JnGIoQceDfbCvLlgs8nsw1/iXJhm1IC6vkt5qWqAxsMI r8CFwW/JWlMpbcgOsVOZT/3zpMs5mgUaPyMTkISaKO1tw0ca4GhIOJwkh5JlpApT 8hh3Y2Vjk9EGDxyYMxqy1F//UM0P3zOmEw6oekOEx2REqnv5H5h1BPn2D9zHOCKb zQLf/KDGFonJeIzIm4+GAEw7lqpEdSgGj8OAVTslGlHCquMW7DJT5dkbVLCHAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUv2Vya/IdZm8F7fh5kU5utu8wdogwHwYDVR0j BBgwFoAUib4blI6t/Pz99FegqQPzV4ZaJVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTY1NzU4RDE0RTBDOTcyRjhCQTU2MDMzMDI1MDdGRThB Njc3RTcyMjNENzJBODIxMUFFNjJEQkQ1NTY1RTdELzAvODlCRTFCOTQ4RUFERkNG Q0ZERjQ1N0EwQTkwM0YzNTc4NjVBMjU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUJFMUI5NDhFQURGQ0ZDRkRG NDU3QTBBOTAzRjM1Nzg2NUEyNTUzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE2NTc1OEQxNEUwQzk3MkY4QkE1NjAzMzAyNTA3RkU4QTY3N0U3MjIz RDcyQTgyMTFBRTYyREJENTU2NUU3RC8wLzMxMzkzMDJlMzEzNTMxMmUzMTMyMzgy ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzMjMwMzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+ l4AwDQYJKoZIhvcNAQELBQADggEBAGsPvHgTH8sXhkp28bDydrxOVTCVUVaKqtCf EAiW3ztfEuxCyQS4veulsYvfaUAz87vbb0bngpv1JKQnOHGJaD9j7xJGwH6TBVgn Lanc5ebKCiodfRXU/pTxHrCNaIYB+ZItRW4JQeAhxgLlx7dd+eatxobE1QkyT+FJ Gizm53csemvGHKdYb8iIpuCRec9P48zB7RRWRclmhTwMRhzArxR+l6JxEusBX/dl 7a/nzx9W33QP0C3+9CpX5IyKIEB8V/cfSVo69x5ZuhpzhQ2kIs+PbRxmLxxabU1i 1xrjBaJYJT0i2bG5L5e44fYcFbqC1i8WVRFziSLOL/vlPyW1zUo= -----END CERTIFICATE-----Generated at Mon Jan 12 13:14:15 2026 by rpki-client