This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/34352e37312e3139362e302f32322d3233203d3e20323635383238.roa File: 34352e37312e3139362e302f32322d3233203d3e20323635383238.roa (raw, json) Hash identifier: gT7dpzhkMIQAFuYGInRDQIbZUCv/UylyDXc3D60aD5Y= Subject key identifier: 5D:2F:C1:84:1C:8D:6C:10:9F:26:08:85:FF:7B:74:E4:F2:15:E0:DD Certificate issuer: /CN=B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE Certificate serial: 0A86D4DE26028EFE7EBBCFE414D8DA8E55D3D9AE Authority key identifier: B9:AB:59:A0:3A:8D:1B:25:1F:8F:5C:17:B4:50:A8:C2:5F:56:36:EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/34352e37312e3139362e302f32322d3233203d3e20323635383238.roa Signing time: Tue 06 Jan 2026 19:42:01 +0000 ROA not before: Tue 06 Jan 2026 19:37:01 +0000 ROA not after: Tue 05 Jan 2027 19:42:01 +0000 asID: 265828 IP address blocks: 45.71.196.0/22 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.crl rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 13:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:86:d4:de:26:02:8e:fe:7e:bb:cf:e4:14:d8:da:8e:55:d3:d9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE Validity Not Before: Jan 6 19:37:01 2026 GMT Not After : Jan 5 19:42:01 2027 GMT Subject: CN=5D2FC1841C8D6C109F260885FF7B74E4F215E0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:30:33:e8:eb:cb:63:f0:87:0a:7e:e4:82: 7a:50:43:72:24:74:8e:50:a2:1f:f0:b1:67:ee:c9: ba:28:e4:41:11:ed:83:42:8e:59:af:4e:6a:02:1d: 95:89:55:c5:6e:8f:94:8f:8e:9e:b1:7c:da:25:af: 05:65:d4:88:b3:a0:ab:6c:44:44:50:5f:b7:50:eb: bc:eb:b8:a7:5f:39:29:47:74:b9:4c:8f:91:e9:96: eb:19:c8:52:94:bb:11:e9:6b:45:76:07:dd:e9:b6: 7a:7c:7d:2d:d6:cd:81:04:63:a5:e1:f1:a7:cc:16: af:d7:d4:0f:83:f7:a6:6e:a5:ef:60:e4:19:bf:2e: 6c:57:6a:bd:07:8d:5c:74:3c:e3:10:39:9a:b3:ab: 17:c7:6e:36:e3:9d:3a:c8:bf:57:64:31:8a:04:dc: e0:52:41:b5:39:ba:86:c5:43:66:fe:1b:12:a5:fc: 77:22:c6:5f:6b:d0:31:fd:0a:00:28:89:bc:f1:8d: c4:d4:22:a1:57:9b:31:32:e2:cb:dd:11:47:15:32: 8d:1d:37:4c:5f:6c:d7:57:d5:17:1e:5a:f5:a8:72: dd:c9:7d:61:75:9e:91:b4:98:ca:e8:4c:85:21:f1: 26:f5:15:ae:c4:73:ce:aa:4f:67:fb:0b:fa:fe:b5: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2F:C1:84:1C:8D:6C:10:9F:26:08:85:FF:7B:74:E4:F2:15:E0:DD X509v3 Authority Key Identifier: keyid:B9:AB:59:A0:3A:8D:1B:25:1F:8F:5C:17:B4:50:A8:C2:5F:56:36:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9AB59A03A8D1B251F8F5C17B450A8C25F5636EE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BD03842362FAEFBF288DCD0380BB080EF1C244FE30A23E48FDC62394E1F048D/0/34352e37312e3139362e302f32322d3233203d3e20323635383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.196.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:72:f7:f6:44:78:32:49:e9:a0:f1:0d:7b:6a:05:ee:ad:c5: 15:76:f9:5c:f7:c1:3b:49:0b:90:88:66:f6:85:02:60:a7:db: 05:b9:da:e8:b1:1f:82:58:73:42:d1:6f:37:b6:17:51:91:f7: ff:99:aa:94:7a:5e:20:99:b7:9c:77:2a:a2:3f:4b:94:7d:c3: 1f:fe:99:53:0a:9f:9c:7e:c2:ce:8e:fc:f7:14:3e:c2:2b:ee: 3f:27:0f:17:b4:bb:6c:56:af:55:0b:23:2f:33:65:1e:c1:a5: ce:9d:e3:25:fb:ab:f7:33:22:46:41:3c:84:f4:46:0c:f6:88: a1:12:85:bd:73:b0:66:5c:c8:90:fd:f1:65:2a:8a:ba:2c:67: d3:2e:2a:c2:16:49:d0:3f:54:fe:a2:83:d9:4a:1b:64:c0:21: 7d:b3:28:d4:31:91:82:46:ec:de:95:c8:1d:04:1b:11:5f:13: cb:c5:64:2e:95:52:64:70:87:18:41:b9:78:a9:22:cf:e4:61: 49:d9:6d:ba:9b:80:d2:16:05:55:91:7f:c8:85:d1:eb:2a:fd: 18:a2:66:cc:28:3c:89:29:95:c6:c0:fb:a2:d2:01:07:4f:b2: ad:1d:43:21:29:eb:e8:3b:83:3a:dd:c7:b6:5d:79:97:d2:89: 78:19:f3:00 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUCobU3iYCjv5+u8/kFNjajlXT2a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBQjU5QTAzQThEMUIyNTFGOEY1QzE3QjQ1MEE4QzI1 RjU2MzZFRTAeFw0yNjAxMDYxOTM3MDFaFw0yNzAxMDUxOTQyMDFaMDMxMTAvBgNV BAMTKDVEMkZDMTg0MUM4RDZDMTA5RjI2MDg4NUZGN0I3NEU0RjIxNUUwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBDAz6OvLY/CHCn7kgnpQQ3Ik dI5Qoh/wsWfuyboo5EER7YNCjlmvTmoCHZWJVcVuj5SPjp6xfNolrwVl1IizoKts RERQX7dQ67zruKdfOSlHdLlMj5HplusZyFKUuxHpa0V2B93ptnp8fS3WzYEEY6Xh 8afMFq/X1A+D96Zupe9g5Bm/LmxXar0HjVx0POMQOZqzqxfHbjbjnTrIv1dkMYoE 3OBSQbU5uobFQ2b+GxKl/Hcixl9r0DH9CgAoibzxjcTUIqFXmzEy4svdEUcVMo0d N0xfbNdX1RceWvWoct3JfWF1npG0mMroTIUh8Sb1Fa7Ec86qT2f7C/r+tXg9AgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUXS/BhByNbBCfJgiF/3t05PIV4N0wHwYDVR0j BBgwFoAUuatZoDqNGyUfj1wXtFCowl9WNu4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQkQwMzg0MjM2MkZBRUZCRjI4OERDRDAzODBCQjA4MEVG MUMyNDRGRTMwQTIzRTQ4RkRDNjIzOTRFMUYwNDhELzAvQjlBQjU5QTAzQThEMUIy NTFGOEY1QzE3QjQ1MEE4QzI1RjU2MzZFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUFCNTlBMDNBOEQxQjI1MUY4 RjVDMTdCNDUwQThDMjVGNTYzNkVFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUJEMDM4NDIzNjJGQUVGQkYyODhEQ0QwMzgwQkIwODBFRjFDMjQ0RkUz MEEyM0U0OEZEQzYyMzk0RTFGMDQ4RC8wLzM0MzUyZTM3MzEyZTMxMzkzNjJlMzAy ZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzYzNTM4MzIzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1HxDAN BgkqhkiG9w0BAQsFAAOCAQEAKnL39kR4MknpoPENe2oF7q3FFXb5XPfBO0kLkIhm 9oUCYKfbBbna6LEfglhzQtFvN7YXUZH3/5mqlHpeIJm3nHcqoj9LlH3DH/6ZUwqf nH7Czo789xQ+wivuPycPF7S7bFavVQsjLzNlHsGlzp3jJfur9zMiRkE8hPRGDPaI oRKFvXOwZlzIkP3xZSqKuixn0y4qwhZJ0D9U/qKD2UobZMAhfbMo1DGRgkbs3pXI HQQbEV8Ty8VkLpVSZHCHGEG5eKkiz+RhSdltupuA0hYFVZF/yIXR6yr9GKJmzCg8 iSmVxsD7otIBB0+yrR1DISnr6DuDOt3Htl15l9KJeBnzAA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:18:01 2026 by rpki-client