This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132382e302f32322d3232203d3e203532333939.roa File: 3133382e3131372e3132382e302f32322d3232203d3e203532333939.roa (raw, json) Hash identifier: Huik5rfDMfsLOUkz/xFBP7ExXIM/Z1ec3Fl8BrZijy4= Subject key identifier: 07:FA:64:65:3C:3E:84:6B:FE:5C:2E:C7:DB:89:41:D4:C5:2F:B6:05 Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9 Certificate serial: 75A8310D347F8B560BBB12DC3B8A0DADE1F659AD Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132382e302f32322d3232203d3e203532333939.roa Signing time: Tue 06 Jan 2026 19:30:03 +0000 ROA not before: Tue 06 Jan 2026 19:25:03 +0000 ROA not after: Tue 05 Jan 2027 19:30:03 +0000 asID: 52399 IP address blocks: 138.117.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a8:31:0d:34:7f:8b:56:0b:bb:12:dc:3b:8a:0d:ad:e1:f6:59:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9 Validity Not Before: Jan 6 19:25:03 2026 GMT Not After : Jan 5 19:30:03 2027 GMT Subject: CN=07FA64653C3E846BFE5C2EC7DB8941D4C52FB605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:cf:52:43:64:fd:b2:c8:78:46:5a:70:4e: 40:4a:da:b9:fc:ce:64:7a:fa:f7:1a:c5:31:6e:36: 14:20:bb:6a:bf:8c:10:e5:fa:07:80:f4:18:9f:d3: 3e:11:60:7d:2c:20:4a:d3:d8:37:39:7d:47:be:72: 4d:9c:c5:f8:2f:02:8a:d8:c1:41:85:76:7b:8d:51: b0:f7:08:f0:16:1b:bd:d5:e6:c6:28:4d:d7:9a:11: 29:74:9a:e2:99:0c:5f:0f:50:30:15:66:37:a2:a2: 50:c7:70:9a:52:7e:1f:13:d4:5d:7c:11:56:01:13: b0:ca:5c:19:a3:6d:2c:ca:76:dc:b4:b0:3c:38:1b: 97:79:82:cf:59:fc:00:50:89:e0:97:fd:16:ae:bd: 10:a4:a2:fd:dd:37:da:f9:31:c7:74:3d:87:87:49: c7:fd:db:25:d0:f8:34:c0:c9:7c:0f:ee:8e:fd:c8: 48:91:6e:3e:fb:46:46:84:59:9f:2a:63:b4:a4:78: 20:35:34:ab:c2:05:f5:8e:75:ef:e7:02:29:68:f6: 21:c3:05:f4:a4:04:b1:38:78:ed:f6:f0:44:10:3e: dd:79:be:87:0f:25:5a:77:e7:b9:f1:7d:33:1a:96: 3a:8f:92:98:6c:c1:28:9b:8c:b7:2d:ca:29:c3:36: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:64:65:3C:3E:84:6B:FE:5C:2E:C7:DB:89:41:D4:C5:2F:B6:05 X509v3 Authority Key Identifier: keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132382e302f32322d3232203d3e203532333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.128.0/22 Signature Algorithm: sha256WithRSAEncryption a5:09:72:5d:21:0e:e9:fc:86:3a:36:cf:ee:db:88:ca:3e:1e: 56:56:3d:a1:3e:ed:c7:ab:db:10:ce:e3:50:6e:ff:56:e6:d6: 27:e1:1d:63:70:ca:20:28:b7:bc:26:a6:0a:de:66:15:fc:1a: 1b:e4:67:a5:42:86:39:ef:3b:d1:0d:61:8d:78:b9:f4:fe:dc: 1d:f0:dd:64:56:1e:00:48:33:02:9d:49:0b:53:2b:62:61:be: b3:76:bd:79:1e:df:39:d8:cc:c2:a4:ed:f1:cc:ba:e4:00:0e: 9b:bb:fa:7a:5c:35:e5:f9:1f:fb:6c:44:f7:26:c0:e7:74:dd: 8a:12:21:fa:4a:0b:72:16:95:b6:84:84:eb:77:81:1d:d7:bf: 7b:dc:43:78:e3:e7:1f:b0:61:5b:f9:9d:0c:11:05:b0:0c:a4: 87:f5:5f:e8:3b:1e:df:74:03:03:f3:48:28:e7:16:46:e3:a4: c8:38:d6:77:b6:dc:e8:ac:af:0c:72:a5:2e:69:9f:0a:70:3c: 77:eb:a9:ce:cc:a8:94:eb:c7:e0:c1:9e:ac:3e:99:c9:27:2a: 0a:ad:84:02:7a:ec:d6:e9:ad:e1:8e:80:b0:9a:d7:03:d7:30: 6f:44:00:19:37:b9:02:02:f9:35:0e:96:b1:ca:4b:b5:71:2b: 3a:b0:e5:5d -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUdagxDTR/i1YLuxLcO4oNreH2Wa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJCN0EyODg1OTk0N0M1MkEzODdCQjYyODc2NEY5MUFB QTFEMDVCOTAeFw0yNjAxMDYxOTI1MDNaFw0yNzAxMDUxOTMwMDNaMDMxMTAvBgNV BAMTKDA3RkE2NDY1M0MzRTg0NkJGRTVDMkVDN0RCODk0MUQ0QzUyRkI2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIs9SQ2T9ssh4RlpwTkBK2rn8 zmR6+vcaxTFuNhQgu2q/jBDl+geA9Bif0z4RYH0sIErT2Dc5fUe+ck2cxfgvAorY wUGFdnuNUbD3CPAWG73V5sYoTdeaESl0muKZDF8PUDAVZjeiolDHcJpSfh8T1F18 EVYBE7DKXBmjbSzKdty0sDw4G5d5gs9Z/ABQieCX/RauvRCkov3dN9r5Mcd0PYeH Scf92yXQ+DTAyXwP7o79yEiRbj77RkaEWZ8qY7SkeCA1NKvCBfWOde/nAilo9iHD BfSkBLE4eO328EQQPt15vocPJVp357nxfTMaljqPkphswSibjLctyinDNq0PAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUB/pkZTw+hGv+XC7H24lB1MUvtgUwHwYDVR0j BBgwFoAUwreiiFmUfFKjh7tih2T5GqodBbkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNDJBQjQ4REYyNEY0RDg1REFBNDlCREFCNzc2MDlFNURC NUIzNzcxMkNGRDlERTdBNUNFOUY5ODA3NjAxMEYyLzAvQzJCN0EyODg1OTk0N0M1 MkEzODdCQjYyODc2NEY5MUFBQTFEMDVCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI3QTI4ODU5OTQ3QzUyQTM4 N0JCNjI4NzY0RjkxQUFBMUQwNUI5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzQyQUI0OERGMjRGNEQ4NURBQTQ5QkRBQjc3NjA5RTVEQjVCMzc3MTJD RkQ5REU3QTVDRTlGOTgwNzYwMTBGMi8wLzMxMzMzODJlMzEzMTM3MmUzMTMyMzgy ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzMzOTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinWA MA0GCSqGSIb3DQEBCwUAA4IBAQClCXJdIQ7p/IY6Ns/u24jKPh5WVj2hPu3Hq9sQ zuNQbv9W5tYn4R1jcMogKLe8JqYK3mYV/Bob5GelQoY57zvRDWGNeLn0/twd8N1k Vh4ASDMCnUkLUytiYb6zdr15Ht852MzCpO3xzLrkAA6bu/p6XDXl+R/7bET3JsDn dN2KEiH6SgtyFpW2hITrd4Ed17973EN44+cfsGFb+Z0MEQWwDKSH9V/oOx7fdAMD 80go5xZG46TIONZ3ttzorK8McqUuaZ8KcDx366nOzKiU68fgwZ6sPpnJJyoKrYQC euzW6a3hjoCwmtcD1zBvRAAZN7kCAvk1Dpaxyku1cSs6sOVd -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:53 2026 by rpki-client