This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230382e302f32302d3230203d3e203634313132.roa File: 3136382e3233312e3230382e302f32302d3230203d3e203634313132.roa (raw, json) Hash identifier: kbwzMG/qSMbWDtUC65eHCahLXPBpANR6Sx+THxZw5NU= Subject key identifier: 99:3D:CF:38:0E:2B:57:06:FC:2B:33:EB:91:18:47:56:EA:29:A8:AD Certificate issuer: /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855 Certificate serial: 570CB22678AAC9E99412F615B45561329B6A9360 Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230382e302f32302d3230203d3e203634313132.roa Signing time: Mon 29 Dec 2025 18:15:01 +0000 ROA not before: Mon 29 Dec 2025 18:10:01 +0000 ROA not after: Mon 28 Dec 2026 18:15:01 +0000 asID: 64112 IP address blocks: 168.231.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 19:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0c:b2:26:78:aa:c9:e9:94:12:f6:15:b4:55:61:32:9b:6a:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855 Validity Not Before: Dec 29 18:10:01 2025 GMT Not After : Dec 28 18:15:01 2026 GMT Subject: CN=993DCF380E2B5706FC2B33EB91184756EA29A8AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:cc:ef:5d:20:70:3b:e7:c2:f7:d0:6b:69: 31:d5:1c:33:12:4e:96:04:b6:de:2e:f5:ed:bc:33: 3e:63:bc:2b:c1:eb:c0:8e:43:da:9d:f1:22:2b:9a: a3:bd:ce:b0:c4:6d:7b:7d:94:da:a8:58:0b:6b:b0: 07:82:28:1a:04:eb:df:01:ec:d0:58:93:dc:38:21: 98:f7:d8:09:8a:2b:8a:b0:23:8a:ec:1f:95:63:ff: 04:7e:08:02:b3:a8:65:87:e9:4f:6b:b0:08:0d:4b: 7c:8a:69:03:d5:be:0e:58:14:87:37:27:3e:e0:26: 93:4b:ae:99:20:70:1a:1c:df:a6:d1:41:ba:1d:42: 4d:c0:d5:a0:53:8d:1c:66:20:83:f2:5d:47:83:68: 0f:b3:ef:a6:2c:43:bb:d0:fa:6d:21:ef:3c:b6:2f: 1c:52:6a:93:93:0b:91:32:99:ef:da:f5:85:59:43: 34:13:7a:38:3a:4c:99:f7:0c:a7:3e:d3:ce:3a:68: f3:f0:ee:b6:c8:fe:3a:d7:57:cd:01:fb:a4:4f:39: 86:e5:42:07:24:20:c7:d6:58:95:b3:77:05:33:d7: aa:7c:68:7c:71:e4:11:2f:00:00:14:a4:35:0d:27: f6:f8:9b:30:fb:53:3c:e0:eb:77:c9:a3:d5:97:75: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:CF:38:0E:2B:57:06:FC:2B:33:EB:91:18:47:56:EA:29:A8:AD X509v3 Authority Key Identifier: keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230382e302f32302d3230203d3e203634313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.231.208.0/20 Signature Algorithm: sha256WithRSAEncryption 43:f7:f5:8a:6a:32:da:ac:12:da:14:89:90:18:24:32:47:15: f7:eb:77:58:e4:70:3d:37:43:ea:c3:c9:d1:04:cd:6e:52:0c: d0:d9:8d:e0:60:cb:a2:98:93:f9:50:16:1e:f1:61:80:86:99: b7:2e:4c:2e:c0:fd:39:02:09:d9:7c:e7:84:db:88:f5:36:ff: f3:6e:19:d2:87:6d:dd:88:4b:1a:fc:6c:cb:44:1c:ff:42:d5: 20:b2:be:d2:87:4a:fa:f7:ea:5c:9d:be:ad:a8:6e:54:f1:d6: 9c:5a:04:bd:6b:04:e5:06:85:cd:f7:53:9f:5f:04:c5:ee:db: e4:08:11:5e:af:14:55:01:34:42:dd:d0:a5:88:f9:90:57:9f: d0:e6:76:93:ee:9c:27:a9:dc:87:43:1a:b8:44:81:98:a5:e8: 03:ec:a8:fe:bf:86:cc:27:ed:89:41:65:16:ac:fe:e8:5c:ff: 61:d8:48:bd:0a:48:9c:bb:17:38:ab:19:45:33:6d:5d:d7:07: a6:aa:74:e4:9b:ce:1a:13:e7:83:3f:92:ee:56:93:27:f0:8d: a0:13:10:da:f8:79:b1:1d:9d:10:e0:6f:f0:1a:26:45:75:80: 02:9d:aa:6c:1a:50:cd:40:c9:dd:ab:cf:d5:02:82:4e:77:48: 4c:66:ba:13 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUVwyyJniqyemUEvYVtFVhMptqk2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFQTVDQUNDQUZFMjI3MzZGRDQ2Q0IyQTUzMkMyODdE OTQ3Mjg1NTAeFw0yNTEyMjkxODEwMDFaFw0yNjEyMjgxODE1MDFaMDMxMTAvBgNV BAMTKDk5M0RDRjM4MEUyQjU3MDZGQzJCMzNFQjkxMTg0NzU2RUEyOUE4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKMzvXSBwO+fC99BraTHVHDMS TpYEtt4u9e28Mz5jvCvB68COQ9qd8SIrmqO9zrDEbXt9lNqoWAtrsAeCKBoE698B 7NBYk9w4IZj32AmKK4qwI4rsH5Vj/wR+CAKzqGWH6U9rsAgNS3yKaQPVvg5YFIc3 Jz7gJpNLrpkgcBoc36bRQbodQk3A1aBTjRxmIIPyXUeDaA+z76YsQ7vQ+m0h7zy2 LxxSapOTC5Eyme/a9YVZQzQTejg6TJn3DKc+0846aPPw7rbI/jrXV80B+6RPOYbl QgckIMfWWJWzdwUz16p8aHxx5BEvAAAUpDUNJ/b4mzD7Uzzg63fJo9WXdQvpAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUmT3POA4rVwb8KzPrkRhHVuopqK0wHwYDVR0j BBgwFoAULupcrMr+InNv1GyypTLCh9lHKFUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOTc2ODYwNDdCOUFFODFGNDA2QjQ2OTEwNUY2ODJDQjRF RjgzN0U1MzIxMUI4MzNGQTFGMzcxQjlCNDNENjhFLzAvMkVFQTVDQUNDQUZFMjI3 MzZGRDQ2Q0IyQTUzMkMyODdEOTQ3Mjg1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUVBNUNBQ0NBRkUyMjczNkZE NDZDQjJBNTMyQzI4N0Q5NDcyODU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjk3Njg2MDQ3QjlBRTgxRjQwNkI0NjkxMDVGNjgyQ0I0RUY4MzdFNTMy MTFCODMzRkExRjM3MUI5QjQzRDY4RS8wLzMxMzYzODJlMzIzMzMxMmUzMjMwMzgy ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNjM0MzEzMTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqOfQ MA0GCSqGSIb3DQEBCwUAA4IBAQBD9/WKajLarBLaFImQGCQyRxX363dY5HA9N0Pq w8nRBM1uUgzQ2Y3gYMuimJP5UBYe8WGAhpm3LkwuwP05AgnZfOeE24j1Nv/zbhnS h23diEsa/GzLRBz/QtUgsr7Sh0r69+pcnb6tqG5U8dacWgS9awTlBoXN91OfXwTF 7tvkCBFerxRVATRC3dCliPmQV5/Q5naT7pwnqdyHQxq4RIGYpegD7Kj+v4bMJ+2J QWUWrP7oXP9h2Ei9Ckicuxc4qxlFM21d1wemqnTkm84aE+eDP5LuVpMn8I2gExDa +HmxHZ0Q4G/wGiZFdYACnapsGlDNQMndq8/VAoJOd0hMZroT -----END CERTIFICATE-----Generated at Sun Jan 25 09:47:46 2026 by rpki-client