This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/3136382e3139362e3135362e302f32322d3234203d3e20323634373731.roa File: 3136382e3139362e3135362e302f32322d3234203d3e20323634373731.roa (raw, json) Hash identifier: NbcfFYBPsrFAe29qtElvJ7sun9pJ95tiq6ZRO+4AEDA= Subject key identifier: 53:28:53:C1:2A:2B:AB:85:CD:91:5D:D4:67:18:B7:82:0D:BD:8E:5E Certificate issuer: /CN=5558B5E1D174BAD1D35EA916CBE18E573AF38B25 Certificate serial: 422D6E495823A1F53B242066D7C71EE7D5385A73 Authority key identifier: 55:58:B5:E1:D1:74:BA:D1:D3:5E:A9:16:CB:E1:8E:57:3A:F3:8B:25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/3136382e3139362e3135362e302f32322d3234203d3e20323634373731.roa Signing time: Tue 06 Jan 2026 19:04:41 +0000 ROA not before: Tue 06 Jan 2026 18:59:41 +0000 ROA not after: Tue 05 Jan 2027 19:04:41 +0000 asID: 264771 IP address blocks: 168.196.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.crl rsync://repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 15:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:6e:49:58:23:a1:f5:3b:24:20:66:d7:c7:1e:e7:d5:38:5a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5558B5E1D174BAD1D35EA916CBE18E573AF38B25 Validity Not Before: Jan 6 18:59:41 2026 GMT Not After : Jan 5 19:04:41 2027 GMT Subject: CN=532853C12A2BAB85CD915DD46718B7820DBD8E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:31:72:fb:24:8a:33:7c:80:3f:5d:59:72: 6c:df:d0:45:6a:9c:3d:15:5a:06:fe:26:64:1a:1b: c3:52:9e:57:24:6c:53:f2:fe:6e:95:f2:c1:03:31: f5:ff:46:63:3c:2e:2c:18:3a:a0:2b:0d:fd:33:5b: 3a:fb:12:c7:f2:83:00:30:bb:b1:65:17:b0:01:8e: 6a:71:27:40:9b:0f:69:6a:db:a6:3d:f0:b5:3a:c5: 5b:52:e5:d4:39:de:eb:a6:88:87:00:b3:30:d8:e1: 35:f3:a9:32:d7:fa:13:34:01:92:1e:f0:f2:9b:a9: 48:d5:dd:99:c4:31:dd:1f:2f:f8:ea:eb:41:27:8c: a6:76:78:be:6c:29:12:db:51:1a:9e:db:c9:f1:76: a0:95:fc:9b:56:87:fb:36:c5:9e:0a:6c:16:a9:26: 31:eb:e7:56:29:c3:9c:58:90:3b:9f:79:23:1a:80: 80:6d:e2:07:62:c0:49:66:6e:30:a7:6b:7c:bf:7f: 6b:f5:0d:94:c1:56:db:26:c1:77:e0:b1:7d:11:0c: 93:2e:1d:c6:c1:28:3f:0b:05:81:e0:8c:f8:e3:23: fa:81:5d:1e:a8:60:26:42:02:61:a0:e2:48:95:44: 8b:24:21:bc:36:21:fe:27:b2:3d:96:ed:eb:4d:db: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:28:53:C1:2A:2B:AB:85:CD:91:5D:D4:67:18:B7:82:0D:BD:8E:5E X509v3 Authority Key Identifier: keyid:55:58:B5:E1:D1:74:BA:D1:D3:5E:A9:16:CB:E1:8E:57:3A:F3:8B:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5558B5E1D174BAD1D35EA916CBE18E573AF38B25.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/291B858C7C334CDBEA2E3C82055F8F6FC65E446882C7034E52D95AF4B213AF3C/0/3136382e3139362e3135362e302f32322d3234203d3e20323634373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.156.0/22 Signature Algorithm: sha256WithRSAEncryption 66:ca:fa:56:cc:56:06:59:d6:09:5e:61:b3:96:38:24:64:40: 7b:54:72:4a:ef:1a:ef:f7:6d:b9:3a:b1:3f:4d:2d:96:a6:10: a2:47:5a:99:76:6b:4e:35:56:57:45:ec:19:c9:57:4e:a7:ef: 33:e0:d1:ba:bd:32:3d:b4:94:c7:19:14:57:3b:75:dc:c1:54: b3:d4:a6:5f:d9:a0:2c:3c:41:b0:70:7e:0e:c8:69:04:4c:c8: 4c:e9:b0:7b:09:0c:a2:fb:62:d8:ba:1d:94:da:24:1a:9f:d8: 1a:ae:4c:d7:8b:72:08:5a:2a:92:3a:71:9b:fc:88:9c:d3:47: 9f:ba:ff:91:e7:e9:04:19:60:ae:a1:f2:55:bc:62:34:9e:86: 46:c9:a9:8c:ad:b9:42:04:51:37:68:f6:f8:91:e0:bf:6c:63: c6:ab:4e:5c:44:03:58:ca:e0:27:3b:7b:d6:c7:3a:d5:71:98: f4:26:82:aa:5d:d0:37:75:6e:b8:c6:20:23:1a:6a:14:f7:f9: 99:3f:1c:0c:a1:4c:99:f8:40:e9:be:db:7a:72:ee:51:ad:5c: 60:78:b3:70:64:a0:a0:26:f3:1b:40:70:ba:de:1d:d4:80:bf: 45:7b:51:fb:5d:1f:2e:82:88:32:7d:49:1f:5e:15:7f:c1:92: 90:94:89:b0 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUQi1uSVgjofU7JCBm18ce59U4WnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU1OEI1RTFEMTc0QkFEMUQzNUVBOTE2Q0JFMThFNTcz QUYzOEIyNTAeFw0yNjAxMDYxODU5NDFaFw0yNzAxMDUxOTA0NDFaMDMxMTAvBgNV BAMTKDUzMjg1M0MxMkEyQkFCODVDRDkxNURENDY3MThCNzgyMERCRDhFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwODFy+ySKM3yAP11Zcmzf0EVq nD0VWgb+JmQaG8NSnlckbFPy/m6V8sEDMfX/RmM8LiwYOqArDf0zWzr7EsfygwAw u7FlF7ABjmpxJ0CbD2lq26Y98LU6xVtS5dQ53uumiIcAszDY4TXzqTLX+hM0AZIe 8PKbqUjV3ZnEMd0fL/jq60EnjKZ2eL5sKRLbURqe28nxdqCV/JtWh/s2xZ4KbBap JjHr51Ypw5xYkDufeSMagIBt4gdiwElmbjCna3y/f2v1DZTBVtsmwXfgsX0RDJMu HcbBKD8LBYHgjPjjI/qBXR6oYCZCAmGg4kiVRIskIbw2If4nsj2W7etN2+unAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUUyhTwSorq4XNkV3UZxi3gg29jl4wHwYDVR0j BBgwFoAUVVi14dF0utHTXqkWy+GOVzrziyUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOTFCODU4QzdDMzM0Q0RCRUEyRTNDODIwNTVGOEY2RkM2 NUU0NDY4ODJDNzAzNEU1MkQ5NUFGNEIyMTNBRjNDLzAvNTU1OEI1RTFEMTc0QkFE MUQzNUVBOTE2Q0JFMThFNTczQUYzOEIyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTU4QjVFMUQxNzRCQUQxRDM1 RUE5MTZDQkUxOEU1NzNBRjM4QjI1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjkxQjg1OEM3QzMzNENEQkVBMkUzQzgyMDU1RjhGNkZDNjVFNDQ2ODgy QzcwMzRFNTJEOTVBRjRCMjEzQUYzQy8wLzMxMzYzODJlMzEzOTM2MmUzMTM1MzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM3MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo xJwwDQYJKoZIhvcNAQELBQADggEBAGbK+lbMVgZZ1gleYbOWOCRkQHtUckrvGu/3 bbk6sT9NLZamEKJHWpl2a041VldF7BnJV06n7zPg0bq9Mj20lMcZFFc7ddzBVLPU pl/ZoCw8QbBwfg7IaQRMyEzpsHsJDKL7Yti6HZTaJBqf2BquTNeLcghaKpI6cZv8 iJzTR5+6/5Hn6QQZYK6h8lW8YjSehkbJqYytuUIEUTdo9viR4L9sY8arTlxEA1jK 4Cc7e9bHOtVxmPQmgqpd0Dd1brjGICMaahT3+Zk/HAyhTJn4QOm+23py7lGtXGB4 s3BkoKAm8xtAcLreHdSAv0V7UftdHy6CiDJ9SR9eFX/BkpCUibA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:21 2026 by rpki-client