This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532333636.roa File: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (raw, json) Hash identifier: 77pdNkxxa965XrZs5ZAxZoSqZfXURgIQwoEk4eh5Z3A= Subject key identifier: 5D:B1:0B:F4:FC:0D:35:0A:E7:79:18:70:DD:E1:FF:D0:95:0B:7D:01 Certificate issuer: /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Certificate serial: 406F7DBFA3A2093A0FC95F5ADF0D6D6C3AD9EDE9 Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532333636.roa Signing time: Tue 06 Jan 2026 19:40:37 +0000 ROA not before: Tue 06 Jan 2026 19:35:37 +0000 ROA not after: Tue 05 Jan 2027 19:40:37 +0000 asID: 52366 IP address blocks: 190.99.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6f:7d:bf:a3:a2:09:3a:0f:c9:5f:5a:df:0d:6d:6c:3a:d9:ed:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Validity Not Before: Jan 6 19:35:37 2026 GMT Not After : Jan 5 19:40:37 2027 GMT Subject: CN=5DB10BF4FC0D350AE7791870DDE1FFD0950B7D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:93:46:47:bc:51:f4:8c:34:1f:f7:22:79: 20:3b:72:84:50:31:e4:4a:fe:b7:0b:1b:8e:f4:8f: c1:cb:4a:27:d0:c3:6e:c9:9f:0f:ae:50:84:6d:a7: 53:9b:00:20:d4:8f:e3:87:73:5f:1b:33:72:f4:50: 56:ee:a9:07:38:d0:f9:26:bb:c5:e3:08:df:9e:f2: 08:69:d1:89:74:0a:36:6f:0e:2b:dd:18:3f:88:cb: 9d:c9:88:2e:6d:2f:2f:94:41:62:97:07:9c:73:3d: fa:10:35:1a:b7:65:e8:7b:64:8a:fe:c8:36:d4:09: 72:ad:aa:3f:48:61:9a:ea:63:9e:a8:4e:3e:20:e6: 89:7c:f8:b7:69:12:95:56:57:6c:8f:53:e7:31:71: fe:9a:b7:a3:1b:eb:c8:a7:3f:38:9b:72:7e:9b:9e: 2a:df:1d:d9:f7:69:df:ed:33:56:96:28:d6:20:9e: 8f:e6:e2:a9:f9:de:43:b9:65:29:c9:e8:a7:0e:52: e6:41:ea:05:38:3e:0e:72:ca:7a:94:01:b6:38:9c: 78:cd:d9:9f:9c:33:d1:cc:82:eb:42:34:45:36:64: 6b:86:51:3f:5a:46:01:6b:07:79:a1:c3:76:82:65: 38:af:2c:19:d3:87:68:0f:4c:66:d5:9f:6f:93:04: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B1:0B:F4:FC:0D:35:0A:E7:79:18:70:DD:E1:FF:D0:95:0B:7D:01 X509v3 Authority Key Identifier: keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:18:b0:50:cb:20:9e:5c:99:22:b8:eb:47:35:28:a5:8d:75: 25:db:fd:43:7a:a3:74:6c:c6:9d:53:02:ff:83:e4:4b:ec:11: ab:4f:82:af:59:04:62:c1:52:d7:5c:dd:2a:83:75:a0:ef:18: ed:66:0b:cf:91:e4:b5:6b:21:78:5b:dc:18:bc:fe:d3:61:20: ee:e6:39:98:fb:5a:fc:7c:b2:27:6a:b0:cc:32:42:6a:f8:05: 2b:13:5b:62:e1:ac:59:2c:d8:83:a4:78:b4:5e:2c:1f:93:d3: 11:18:5b:55:80:b5:2b:de:35:d9:e6:83:de:10:ec:27:45:f6: 62:14:dc:9c:ea:8d:36:94:33:24:df:a5:cc:59:b9:9d:41:78: 76:cf:fd:33:05:12:44:23:7c:0d:42:d3:5a:f7:84:63:66:ae: 16:e9:fa:d1:00:19:73:9e:72:fd:f8:86:db:9e:23:ab:d2:98: 88:09:19:72:aa:e3:e8:83:a1:85:35:a1:8f:b0:89:08:74:86: 9a:49:6c:f6:0d:2d:8c:19:ee:bd:c9:af:65:99:4b:1b:dd:12: d3:ca:a5:e7:b2:9b:b0:30:04:79:3d:c4:98:5b:84:91:f4:d2: da:55:0b:31:31:e6:b1:84:3e:8a:4b:2e:d1:4d:8f:e9:0a:e9: 21:0b:84:0f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUQG99v6OiCToPyV9a3w1tbDrZ7ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBNDg2RjRFOEUzMkVCQjdDQTMyQTI1QTlFRkUxMDdF RjVGQjI1QjAeFw0yNjAxMDYxOTM1MzdaFw0yNzAxMDUxOTQwMzdaMDMxMTAvBgNV BAMTKDVEQjEwQkY0RkMwRDM1MEFFNzc5MTg3MERERTFGRkQwOTUwQjdEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlpNGR7xR9Iw0H/cieSA7coRQ MeRK/rcLG470j8HLSifQw27Jnw+uUIRtp1ObACDUj+OHc18bM3L0UFbuqQc40Pkm u8XjCN+e8ghp0Yl0CjZvDivdGD+Iy53JiC5tLy+UQWKXB5xzPfoQNRq3Zeh7ZIr+ yDbUCXKtqj9IYZrqY56oTj4g5ol8+LdpEpVWV2yPU+cxcf6at6Mb68inPzibcn6b nirfHdn3ad/tM1aWKNYgno/m4qn53kO5ZSnJ6KcOUuZB6gU4Pg5yynqUAbY4nHjN 2Z+cM9HMgutCNEU2ZGuGUT9aRgFrB3mhw3aCZTivLBnTh2gPTGbVn2+TBP1vAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUXbEL9PwNNQrneRhw3eH/0JULfQEwHwYDVR0j BBgwFoAU16SG9OjjLrt8oyolqe/hB+9fslswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjUwRDU5QzE0RDI4MjQxOUMxRkZDNkQ1MzRBRDBCNDYw MDY5ODA3NzIzNTVBMjFENTg3MTAyNUY4MkM5ODgzLzAvRDdBNDg2RjRFOEUzMkVC QjdDQTMyQTI1QTlFRkUxMDdFRjVGQjI1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0E0ODZGNEU4RTMyRUJCN0NB MzJBMjVBOUVGRTEwN0VGNUZCMjVCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzY1MEQ1OUMxNEQyODI0MTlDMUZGQzZENTM0QUQwQjQ2MDA2OTgwNzcy MzU1QTIxRDU4NzEwMjVGODJDOTg4My8wLzMxMzkzMDJlMzkzOTJlMzkzNjJlMzAy ZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+Y2AwDQYJ KoZIhvcNAQELBQADggEBAE4YsFDLIJ5cmSK460c1KKWNdSXb/UN6o3Rsxp1TAv+D 5EvsEatPgq9ZBGLBUtdc3SqDdaDvGO1mC8+R5LVrIXhb3Bi8/tNhIO7mOZj7Wvx8 sidqsMwyQmr4BSsTW2LhrFks2IOkeLReLB+T0xEYW1WAtSveNdnmg94Q7CdF9mIU 3JzqjTaUMyTfpcxZuZ1BeHbP/TMFEkQjfA1C01r3hGNmrhbp+tEAGXOecv34htue I6vSmIgJGXKq4+iDoYU1oY+wiQh0hppJbPYNLYwZ7r3Jr2WZSxvdEtPKpeeym7Aw BHk9xJhbhJH00tpVCzEx5rGEPopLLtFNj+kK6SELhA8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:17:17 2026 by rpki-client