This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa File: 3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa (raw, json) Hash identifier: JD/ia6Aol9Voig1GsY7HfgE9fG6BaSy5HjKpUy20Q3w= Subject key identifier: 6E:0F:C7:FB:B7:DD:24:F9:A8:6D:E4:24:AC:33:B5:8A:EF:F3:6D:3E Certificate issuer: /CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Certificate serial: 2DE07B55665B345A2FE5529730317A968D57079C Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa Signing time: Tue 06 Jan 2026 19:14:36 +0000 ROA not before: Tue 06 Jan 2026 19:09:36 +0000 ROA not after: Tue 05 Jan 2027 19:14:36 +0000 asID: 27843 IP address blocks: 170.233.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e0:7b:55:66:5b:34:5a:2f:e5:52:97:30:31:7a:96:8d:57:07:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798 Validity Not Before: Jan 6 19:09:36 2026 GMT Not After : Jan 5 19:14:36 2027 GMT Subject: CN=6E0FC7FBB7DD24F9A86DE424AC33B58AEFF36D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:c2:b3:e5:a0:84:fd:69:80:92:b5:7e:8c: 6b:a2:84:ad:b8:6a:8b:f9:1e:50:6c:38:1c:56:9a: 91:e7:27:6a:52:24:c7:7b:64:5c:77:4b:b9:6f:39: 93:7c:21:38:34:d1:a7:2d:0f:c8:11:14:fe:ad:17: aa:de:ff:00:3c:c4:8c:75:17:13:c5:44:f8:d0:00: 6e:80:06:71:9f:81:5e:ee:28:e9:74:04:75:eb:47: 1e:ef:36:74:11:11:84:2c:a9:54:e7:59:7c:0d:de: 41:b6:89:dd:fc:4b:18:3f:8c:6d:11:c1:e0:4f:01: 91:7f:c9:d7:ee:f3:78:45:ac:61:72:c2:f0:9b:73: 46:26:48:ee:06:42:c6:cd:e2:a0:1f:1e:e0:a9:e2: 60:60:0b:31:86:d8:27:77:74:e7:e9:de:e2:3e:ba: ae:b4:5f:10:ab:1d:c2:4f:09:f9:9e:c6:d0:49:d5: 61:f6:a6:3a:08:78:c8:31:01:17:8a:fd:1e:33:cc: e7:52:0a:25:43:c3:26:3a:bd:d4:71:7e:bf:b9:9b: f6:8c:53:3f:f7:f6:f5:80:79:11:58:97:a3:e4:02: 51:b5:a8:e3:52:38:ee:66:55:5f:02:8f:f4:da:dc: ea:94:6d:d9:3c:45:59:37:48:c0:dd:a3:47:77:82: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0F:C7:FB:B7:DD:24:F9:A8:6D:E4:24:AC:33:B5:8A:EF:F3:6D:3E X509v3 Authority Key Identifier: keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.144.0/22 Signature Algorithm: sha256WithRSAEncryption 09:d7:0c:20:c9:6c:ab:9d:c7:e5:59:64:6b:6c:fa:79:3d:77: 1e:b9:09:cd:82:b2:82:d7:89:b6:57:a0:d8:7f:ad:24:8c:a9: dc:3a:da:3e:ac:5a:f0:89:43:1d:0d:24:3e:7f:18:44:a8:b5: f5:47:58:cd:ce:7d:e3:d6:c1:b1:ac:eb:9a:fc:33:44:f3:29: 9d:54:0c:0c:bc:f7:da:ac:57:a2:e2:44:85:ba:2e:cf:a1:d2: 3e:59:2f:6b:0e:c0:de:38:2b:79:6b:71:7b:27:92:87:44:b5: fe:0a:be:48:99:93:43:dc:b2:86:ed:52:e1:43:b7:6d:88:60: 43:97:5d:21:a5:4f:d1:21:09:47:eb:dc:0c:79:4c:fa:62:4d: b3:59:72:c6:64:7c:69:58:cc:29:26:78:23:d2:f5:15:4c:26: 37:76:ce:a7:c8:a4:9e:be:b3:2a:e9:64:7e:4e:84:6f:8c:46: 3d:d5:18:98:19:b1:62:fa:54:b6:5b:55:0c:ea:6f:3b:5f:fe: 43:51:f0:3a:54:ce:a2:c6:56:63:94:9a:f7:94:1e:5b:ce:74: c8:c7:c3:1a:f9:6e:00:f8:6e:18:68:a3:7b:25:87:12:2b:29: 3c:ce:7b:fc:7f:fc:ad:bb:5d:c9:ae:d4:d5:ae:a2:fb:fa:ec: 7d:34:7b:2a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIULeB7VWZbNFov5VKXMDF6lo1XB5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4QTk2QkU0M0U5RkUzNDc4NzMwNThDRDYyNUQxMjYx MkM1Qjc5ODAeFw0yNjAxMDYxOTA5MzZaFw0yNzAxMDUxOTE0MzZaMDMxMTAvBgNV BAMTKDZFMEZDN0ZCQjdERDI0RjlBODZERTQyNEFDMzNCNThBRUZGMzZEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBsKz5aCE/WmAkrV+jGuihK24 aov5HlBsOBxWmpHnJ2pSJMd7ZFx3S7lvOZN8ITg00actD8gRFP6tF6re/wA8xIx1 FxPFRPjQAG6ABnGfgV7uKOl0BHXrRx7vNnQREYQsqVTnWXwN3kG2id38Sxg/jG0R weBPAZF/ydfu83hFrGFywvCbc0YmSO4GQsbN4qAfHuCp4mBgCzGG2Cd3dOfp3uI+ uq60XxCrHcJPCfmextBJ1WH2pjoIeMgxAReK/R4zzOdSCiVDwyY6vdRxfr+5m/aM Uz/39vWAeRFYl6PkAlG1qONSOO5mVV8Cj/Ta3OqUbdk8RVk3SMDdo0d3gsXRAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUbg/H+7fdJPmobeQkrDO1iu/zbT4wHwYDVR0j BBgwFoAUHYqWvkPp/jR4cwWM1iXRJhLFt5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkVGNjYxRUMyQUJBMjlFRUYzRTA3RTA0MTY4RUQxRDc4 MzUwMkM2MEE5OTg3MzIwMEJBMzdGMTkxQjQ0MDQ5LzAvMUQ4QTk2QkU0M0U5RkUz NDc4NzMwNThDRDYyNUQxMjYxMkM1Qjc5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDhBOTZCRTQzRTlGRTM0Nzg3 MzA1OENENjI1RDEyNjEyQzVCNzk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZFRjY2MUVDMkFCQTI5RUVGM0UwN0UwNDE2OEVEMUQ3ODM1MDJDNjBB OTk4NzMyMDBCQTM3RjE5MUI0NDA0OS8wLzMxMzczMDJlMzIzMzMzMmUzMTM0MzQy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzgzNDMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqumQ MA0GCSqGSIb3DQEBCwUAA4IBAQAJ1wwgyWyrncflWWRrbPp5PXceuQnNgrKC14m2 V6DYf60kjKncOto+rFrwiUMdDSQ+fxhEqLX1R1jNzn3j1sGxrOua/DNE8ymdVAwM vPfarFei4kSFui7PodI+WS9rDsDeOCt5a3F7J5KHRLX+Cr5ImZND3LKG7VLhQ7dt iGBDl10hpU/RIQlH69wMeUz6Yk2zWXLGZHxpWMwpJngj0vUVTCY3ds6nyKSevrMq 6WR+ToRvjEY91RiYGbFi+lS2W1UM6m87X/5DUfA6VM6ixlZjlJr3lB5bznTIx8Ma +W4A+G4YaKN7JYcSKyk8znv8f/ytu13JrtTVrqL7+ux9NHsq -----END CERTIFICATE-----Generated at Mon Jan 26 00:23:22 2026 by rpki-client