This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa File: 3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa (raw, json) Hash identifier: fUhZVgQqKsldfnnAQqGDQYskTpNHNl24oPWXOk2G/jo= Subject key identifier: 71:FE:91:87:1A:A7:C4:A4:AE:17:30:CF:74:0D:42:40:D4:21:76:D3 Certificate issuer: /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F Certificate serial: 3CA96133371CD39D381730A47C8B5F144C15A063 Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa Signing time: Tue 06 Jan 2026 19:28:53 +0000 ROA not before: Tue 06 Jan 2026 19:23:53 +0000 ROA not after: Tue 05 Jan 2027 19:28:53 +0000 asID: 263807 IP address blocks: 138.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a9:61:33:37:1c:d3:9d:38:17:30:a4:7c:8b:5f:14:4c:15:a0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F Validity Not Before: Jan 6 19:23:53 2026 GMT Not After : Jan 5 19:28:53 2027 GMT Subject: CN=71FE91871AA7C4A4AE1730CF740D4240D42176D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:08:ea:94:44:24:85:0f:27:9d:17:33:0e: 96:c4:81:6c:70:27:36:d5:95:42:02:77:45:d9:9c: 40:15:5c:ed:70:9f:d1:60:a0:ca:be:a3:77:7c:32: fd:2a:85:5c:d0:fd:11:8c:b5:80:3c:4d:c5:44:ea: 9a:9b:40:9c:83:6a:e2:82:1c:d9:40:e2:fb:1f:c0: 64:50:d1:50:80:82:83:12:6b:14:22:a7:b4:b5:c5: 66:d9:78:5d:c2:33:22:8e:5c:60:f1:35:71:8a:c3: 76:39:d1:14:8d:5a:36:63:57:7d:84:68:7c:c2:16: d3:0a:bd:bb:c3:da:07:d1:85:dc:c3:64:c1:b8:82: 47:e7:ae:26:dd:13:9c:c3:23:74:f9:cf:8e:41:a4: 40:d5:d3:c5:11:c2:55:a2:c1:79:cc:78:3c:ed:b7: 71:ae:43:29:61:9d:aa:73:ef:df:5d:1e:ee:cb:69: 1a:e5:33:1a:59:cf:68:a2:24:50:27:22:f7:48:55: e7:0f:dd:2c:d5:91:dd:b9:6c:38:17:9d:3b:55:cf: c9:df:6a:2b:3c:3e:93:be:a0:cf:58:fa:58:5d:6e: 5a:63:25:a7:2b:36:06:c0:30:d7:2d:c1:2a:c5:94: 75:14:1c:6b:52:4c:bd:85:c6:4a:eb:5f:ab:f2:68: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:91:87:1A:A7:C4:A4:AE:17:30:CF:74:0D:42:40:D4:21:76:D3 X509v3 Authority Key Identifier: keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39382e302f32342d3234203d3e20323633383037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.98.0/24 Signature Algorithm: sha256WithRSAEncryption 52:16:02:be:c6:c9:1f:a0:5c:3d:11:04:8f:67:7a:7a:94:c9: 11:7f:ce:4d:1c:f7:df:a8:6d:4b:36:77:ba:ec:cd:8f:c6:45: 5b:be:c9:03:21:b8:eb:d7:ac:17:cb:c5:d9:fe:60:e5:cb:3c: 56:51:22:8f:28:d5:eb:b4:16:6e:38:98:ed:a6:f8:89:98:f2: 02:24:d0:25:80:34:ec:72:53:fa:16:94:59:a8:a5:94:8d:e6: 59:f7:02:18:80:48:ac:cc:dc:52:0a:89:90:70:70:37:00:df: 55:44:b0:c8:71:3f:1b:c0:8a:d5:d5:f3:30:c6:5e:94:92:83: 0f:c4:42:10:4c:af:4e:9c:f3:65:08:de:b6:22:a1:ae:ed:f3: 09:3f:0c:af:bb:c0:93:3d:2f:de:dc:23:4d:93:74:e3:47:fb: 84:bf:4d:3b:cc:05:2b:dd:e3:87:4f:42:85:08:97:c8:a1:ec: 59:d8:73:f0:03:c4:5e:dd:0d:16:24:09:a2:c9:67:29:77:05: e2:36:a5:86:4c:4b:bb:f4:ca:71:b3:fe:ea:d5:32:e2:09:e1: f6:56:74:5e:f2:c2:e4:cc:fa:3c:4f:73:58:a0:d7:8e:4d:84: ba:86:08:66:2d:d0:5a:5a:9e:4f:10:d4:63:dd:53:49:e1:5d: ca:29:93:e7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUPKlhMzcc0504FzCkfItfFEwVoGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y0RTFERTg3NjE0MDc0MEYyNUU1QjU3RDhGNkJCNTM4 NjAyM0Y1RjAeFw0yNjAxMDYxOTIzNTNaFw0yNzAxMDUxOTI4NTNaMDMxMTAvBgNV BAMTKDcxRkU5MTg3MUFBN0M0QTRBRTE3MzBDRjc0MEQ0MjQwRDQyMTc2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotwjqlEQkhQ8nnRczDpbEgWxw JzbVlUICd0XZnEAVXO1wn9FgoMq+o3d8Mv0qhVzQ/RGMtYA8TcVE6pqbQJyDauKC HNlA4vsfwGRQ0VCAgoMSaxQip7S1xWbZeF3CMyKOXGDxNXGKw3Y50RSNWjZjV32E aHzCFtMKvbvD2gfRhdzDZMG4gkfnribdE5zDI3T5z45BpEDV08URwlWiwXnMeDzt t3GuQylhnapz799dHu7LaRrlMxpZz2iiJFAnIvdIVecP3SzVkd25bDgXnTtVz8nf ais8PpO+oM9Y+lhdblpjJacrNgbAMNctwSrFlHUUHGtSTL2FxkrrX6vyaLMXAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUcf6RhxqnxKSuFzDPdA1CQNQhdtMwHwYDVR0j BBgwFoAUP04d6HYUB0DyXltX2Pa7U4YCP18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMTNEREM2QzUyNUFBMUQ0MzJGNDcwQTk2RDkyNjFDRjI4 RkUxQ0VENEVDN0MxQjhDMUY1QTAxOEY3NUVFRjRELzAvM0Y0RTFERTg3NjE0MDc0 MEYyNUU1QjU3RDhGNkJCNTM4NjAyM0Y1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjRFMURFODc2MTQwNzQwRjI1 RTVCNTdEOEY2QkI1Mzg2MDIzRjVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjEzRERDNkM1MjVBQTFENDMyRjQ3MEE5NkQ5MjYxQ0YyOEZFMUNFRDRF QzdDMUI4QzFGNUEwMThGNzVFRUY0RC8wLzMxMzMzODJlMzIzNTM1MmUzOTM4MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiv9i MA0GCSqGSIb3DQEBCwUAA4IBAQBSFgK+xskfoFw9EQSPZ3p6lMkRf85NHPffqG1L Nne67M2PxkVbvskDIbjr16wXy8XZ/mDlyzxWUSKPKNXrtBZuOJjtpviJmPICJNAl gDTsclP6FpRZqKWUjeZZ9wIYgEiszNxSComQcHA3AN9VRLDIcT8bwIrV1fMwxl6U koMPxEIQTK9OnPNlCN62IqGu7fMJPwyvu8CTPS/e3CNNk3TjR/uEv007zAUr3eOH T0KFCJfIoexZ2HPwA8Re3Q0WJAmiyWcpdwXiNqWGTEu79Mpxs/7q1TLiCeH2VnRe 8sLkzPo8T3NYoNeOTYS6hghmLdBaWp5PENRj3VNJ4V3KKZPn -----END CERTIFICATE-----Generated at Sun Jan 25 12:57:32 2026 by rpki-client