This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa File: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (raw, json) Hash identifier: xslvgn/MXIkldjGCcYYuvg586s3T/JwWgVZMkj/qTr4= Subject key identifier: 96:61:6B:32:8E:D0:D3:30:3E:BB:D5:6A:38:2C:70:F7:0E:73:E2:E0 Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Certificate serial: 2DBF633BAD0071F6787766A6DF891A7EF1C8834B Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa Signing time: Tue 06 Jan 2026 19:09:16 +0000 ROA not before: Tue 06 Jan 2026 19:04:16 +0000 ROA not after: Tue 05 Jan 2027 19:09:16 +0000 asID: 266907 IP address blocks: 45.224.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:63:3b:ad:00:71:f6:78:77:66:a6:df:89:1a:7e:f1:c8:83:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400 Validity Not Before: Jan 6 19:04:16 2026 GMT Not After : Jan 5 19:09:16 2027 GMT Subject: CN=96616B328ED0D3303EBBD56A382C70F70E73E2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:e7:00:d2:ff:2b:33:c6:25:72:6e:0d:37: 57:5f:c8:4d:69:88:1c:4b:b2:21:4d:95:df:02:96: 09:61:67:58:0e:5c:42:03:23:c4:31:96:5e:6a:fb: a1:df:38:98:13:db:88:7a:2d:7f:9c:e8:b5:d6:17: 14:85:26:12:e8:f7:73:47:19:d7:fe:21:ed:df:37: 6c:1a:91:1d:7f:92:28:d1:42:47:43:ab:fd:44:1b: f6:6d:52:7f:87:1b:26:36:7c:3e:a7:85:58:51:f6: a0:58:1d:04:18:fe:d3:13:5b:4c:9f:ef:c5:53:24: 3f:a5:ed:1b:37:38:94:c0:65:13:13:d4:1e:65:b0: af:9c:40:08:d7:27:16:04:df:64:b1:83:f1:e5:83: f1:0e:50:9a:12:d7:be:da:ee:84:4b:54:46:e2:b9: d6:1b:1d:32:19:c6:4e:50:d9:be:fc:7d:6a:cf:7d: 05:9c:95:1c:87:3c:b7:c9:22:6c:3a:97:8a:31:f2: 90:e0:40:5b:8c:f0:b1:b8:a1:7f:f4:d6:2e:71:5a: 2e:af:b9:e2:f5:38:7b:28:3c:ed:b8:45:41:bc:4b: 02:52:ac:78:24:a6:62:63:e8:18:2b:91:cc:75:13: 28:ca:d3:c2:85:56:fe:f5:ec:7a:12:c1:ea:c1:bf: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:6B:32:8E:D0:D3:30:3E:BB:D5:6A:38:2C:70:F7:0E:73:E2:E0 X509v3 Authority Key Identifier: keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.202.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:14:3d:57:38:94:3f:f3:b4:f6:61:bc:7f:b7:05:ab:af:cf: 63:84:43:e6:ca:04:aa:3d:c4:89:24:03:03:01:78:3e:71:4b: d5:87:ae:d1:44:8a:45:8e:58:9a:93:8a:a6:af:cc:1a:5f:62: 43:a0:97:e1:50:79:40:aa:86:1b:9e:c1:82:2d:a5:07:94:ac: be:09:9d:ac:f5:6a:80:23:75:94:df:b1:4a:bb:9b:ee:72:53: 5d:ee:ca:c7:c3:25:f7:cc:bf:99:9b:d4:39:08:6a:fa:a6:67: cd:3e:37:2c:7f:48:a5:90:4f:34:03:5a:b5:5a:47:16:0b:11: 3a:25:cf:49:53:b6:e3:fc:41:3d:83:98:ea:86:bb:56:77:9f: 7c:da:81:b5:8a:31:a0:9d:87:05:2c:76:90:cd:06:85:43:e0: 66:e9:94:1b:d3:92:b0:f3:47:c3:7e:7a:54:43:b6:e8:14:66: a9:87:70:e3:3f:1d:72:96:c1:bc:2a:c4:8f:ef:04:4a:84:3e: 5a:0c:1e:08:d3:32:16:39:84:bc:1b:28:71:5f:e9:21:37:42: 56:28:3c:fe:a3:71:b3:1a:66:22:6e:c4:72:b4:16:b4:80:f6: 19:5d:a7:f5:1b:c5:e2:41:5b:f7:2b:84:1e:66:33:6e:d3:d5: 95:fe:56:28 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIULb9jO60AcfZ4d2am34kafvHIg0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBNUI3MTU5Qjc5RTEwQjUxRTFGQURFREI0QzI1QzY1 MUNFMDQwMDAeFw0yNjAxMDYxOTA0MTZaFw0yNzAxMDUxOTA5MTZaMDMxMTAvBgNV BAMTKDk2NjE2QjMyOEVEMEQzMzAzRUJCRDU2QTM4MkM3MEY3MEU3M0UyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehOcA0v8rM8Ylcm4NN1dfyE1p iBxLsiFNld8ClglhZ1gOXEIDI8Qxll5q+6HfOJgT24h6LX+c6LXWFxSFJhLo93NH Gdf+Ie3fN2wakR1/kijRQkdDq/1EG/ZtUn+HGyY2fD6nhVhR9qBYHQQY/tMTW0yf 78VTJD+l7Rs3OJTAZRMT1B5lsK+cQAjXJxYE32Sxg/Hlg/EOUJoS177a7oRLVEbi udYbHTIZxk5Q2b78fWrPfQWclRyHPLfJImw6l4ox8pDgQFuM8LG4oX/01i5xWi6v ueL1OHsoPO24RUG8SwJSrHgkpmJj6Bgrkcx1EyjK08KFVv717HoSwerBvyOhAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUlmFrMo7Q0zA+u9VqOCxw9w5z4uAwHwYDVR0j BBgwFoAUr6W3FZt54QtR4fre20wlxlHOBAAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMUVGMjJBMEVBRDI5N0RENTlCRkEwRDlDMzg4NTk2RTY5 ODM0NDZCMTMzQzMxNUJGOTRBMDM4NEY3Qjc2RUI4LzAvQUZBNUI3MTU5Qjc5RTEw QjUxRTFGQURFREI0QzI1QzY1MUNFMDQwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkE1QjcxNTlCNzlFMTBCNTFF MUZBREVEQjRDMjVDNjUxQ0UwNDAwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjFFRjIyQTBFQUQyOTdERDU5QkZBMEQ5QzM4ODU5NkU2OTgzNDQ2QjEz M0MzMTVCRjk0QTAzODRGN0I3NkVCOC8wLzM0MzUyZTMyMzIzNDJlMzIzMDMyMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzkzMDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeDK MA0GCSqGSIb3DQEBCwUAA4IBAQAqFD1XOJQ/87T2Ybx/twWrr89jhEPmygSqPcSJ JAMDAXg+cUvVh67RRIpFjliak4qmr8waX2JDoJfhUHlAqoYbnsGCLaUHlKy+CZ2s 9WqAI3WU37FKu5vuclNd7srHwyX3zL+Zm9Q5CGr6pmfNPjcsf0ilkE80A1q1WkcW CxE6Jc9JU7bj/EE9g5jqhrtWd5982oG1ijGgnYcFLHaQzQaFQ+Bm6ZQb05Kw80fD fnpUQ7boFGaph3DjPx1ylsG8KsSP7wRKhD5aDB4I0zIWOYS8GyhxX+khN0JWKDz+ o3GzGmYibsRytBa0gPYZXaf1G8XiQVv3K4QeZjNu09WV/lYo -----END CERTIFICATE-----Generated at Tue Jan 13 09:27:00 2026 by rpki-client