This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e31312e3132382e302f31372d3234203d3e2038303438.roa File: 3230302e31312e3132382e302f31372d3234203d3e2038303438.roa (raw, json) Hash identifier: QaU491I1ECDm4YaiB8H8SaqXD9Hv8p4p87HZ9I72Ls4= Subject key identifier: 9D:8A:D8:99:18:05:46:64:BB:89:FC:6E:7C:8E:04:D9:45:24:12:D1 Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4 Certificate serial: 77408E93E4776E40544D956A0EDB35AD56579884 Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e31312e3132382e302f31372d3234203d3e2038303438.roa Signing time: Tue 06 Jan 2026 19:47:32 +0000 ROA not before: Tue 06 Jan 2026 19:42:32 +0000 ROA not after: Tue 05 Jan 2027 19:47:32 +0000 asID: 8048 IP address blocks: 200.11.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 04:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:40:8e:93:e4:77:6e:40:54:4d:95:6a:0e:db:35:ad:56:57:98:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4 Validity Not Before: Jan 6 19:42:32 2026 GMT Not After : Jan 5 19:47:32 2027 GMT Subject: CN=9D8AD89918054664BB89FC6E7C8E04D9452412D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:1c:96:14:9b:53:3c:8e:38:fa:71:ad:48: da:06:d2:b5:25:54:07:68:64:39:26:bb:46:a0:14: cf:f7:c7:a5:67:af:b0:93:95:38:8e:76:6f:a7:7a: a7:97:3c:83:10:ee:f2:c4:d2:cc:3b:d8:34:58:54: b3:35:16:0c:d4:ca:51:61:4f:5c:46:0a:89:2d:6b: 68:ef:16:57:25:cc:ad:e0:96:9b:90:68:9a:5c:e3: 65:a8:96:e1:36:da:dd:43:d1:45:f2:f3:40:ae:2f: 4a:90:16:8e:fa:97:b5:0b:9c:91:55:97:78:5d:80: 7b:07:92:43:08:bd:6b:72:47:a9:27:d4:5a:65:df: 04:97:ce:81:82:b5:e0:00:3f:a7:25:34:62:7d:fc: 26:a3:52:a5:ad:09:c6:0a:e4:36:fa:4f:cf:47:84: 08:79:f7:d4:4a:63:58:18:4e:bb:17:a5:49:af:9f: 02:32:e9:c7:d0:1f:88:be:8c:5a:31:55:97:87:68: 63:c8:86:8c:0b:a1:d3:5a:4f:0f:c4:df:a2:8b:66: e6:fb:6c:eb:85:37:f5:6f:d2:c5:9e:30:ac:77:84: 0c:1f:9f:17:4f:f3:09:14:3e:07:6d:e2:c8:fa:26: 95:e7:b2:cd:5c:5a:4f:22:d5:89:8b:01:72:44:9b: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8A:D8:99:18:05:46:64:BB:89:FC:6E:7C:8E:04:D9:45:24:12:D1 X509v3 Authority Key Identifier: keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e31312e3132382e302f31372d3234203d3e2038303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.11.128.0/17 Signature Algorithm: sha256WithRSAEncryption 28:1d:57:39:1e:04:c7:ac:3f:39:eb:e4:7d:64:eb:92:04:48: a5:ed:eb:57:8f:5f:27:b1:ba:19:60:a7:22:bd:f6:7b:94:46: 65:68:c3:e6:3a:b7:76:85:a6:d6:99:bc:f4:7c:2f:8b:32:3f: 88:dd:46:5a:21:4e:f4:72:0f:76:67:43:0c:13:d6:77:17:6b: dd:29:79:07:87:6e:00:41:fa:da:76:c3:c4:b4:65:3e:b5:77: 7d:a1:b2:14:ce:62:7f:ce:37:ba:53:c8:9e:7f:05:11:4a:fb: fa:2f:c9:3c:3c:c8:7c:60:7f:0a:c5:d5:ad:c0:7a:88:c6:2e: 8a:82:10:1b:8c:81:37:1f:ed:f3:dd:33:6e:55:09:e2:35:19: ee:93:03:8e:e1:5e:21:13:3c:f9:f4:13:20:72:30:28:20:87: 1c:61:25:0d:01:3a:a6:2b:c4:57:8a:6b:7d:ec:95:79:1a:76: cf:e9:64:31:6b:e3:1c:d3:24:19:a5:9c:bb:4d:f1:77:82:2a: 24:be:44:b8:7e:95:bf:72:85:82:76:97:49:b4:a2:c7:f6:4c: 2f:fa:24:25:07:e6:e4:3c:fd:53:3e:7c:0c:82:50:79:5f:10: f2:42:63:4f:8b:d5:5c:d1:9e:4b:39:46:8e:1e:06:29:7b:bf: 1b:df:96:9b -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUd0COk+R3bkBUTZVqDts1rVZXmIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkZDMjNBOEM1RkMwNjdCN0QwQkZENjA1QzBGNUEz M0QwMzZCNDAeFw0yNjAxMDYxOTQyMzJaFw0yNzAxMDUxOTQ3MzJaMDMxMTAvBgNV BAMTKDlEOEFEODk5MTgwNTQ2NjRCQjg5RkM2RTdDOEUwNEQ5NDUyNDEyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4ByWFJtTPI44+nGtSNoG0rUl VAdoZDkmu0agFM/3x6Vnr7CTlTiOdm+neqeXPIMQ7vLE0sw72DRYVLM1FgzUylFh T1xGCokta2jvFlclzK3glpuQaJpc42WoluE22t1D0UXy80CuL0qQFo76l7ULnJFV l3hdgHsHkkMIvWtyR6kn1Fpl3wSXzoGCteAAP6clNGJ9/CajUqWtCcYK5Db6T89H hAh599RKY1gYTrsXpUmvnwIy6cfQH4i+jFoxVZeHaGPIhowLodNaTw/E36KLZub7 bOuFN/Vv0sWeMKx3hAwfnxdP8wkUPgdt4sj6JpXnss1cWk8i1YmLAXJEmzczAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUnYrYmRgFRmS7ifxufI4E2UUkEtEwHwYDVR0j BBgwFoAUn1b8I6jF/AZ7fQv9YFwPWjPQNrQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0NDNTcwNDIzRkFGODE2M0Q4NkNDMjFGMUJBMDNEODk1 MDJBRTlDMTI0RkVGODlBRjYxRjQwMkVBRUU4QjgzLzAvOUY1NkZDMjNBOEM1RkMw NjdCN0QwQkZENjA1QzBGNUEzM0QwMzZCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU2RkMyM0E4QzVGQzA2N0I3 RDBCRkQ2MDVDMEY1QTMzRDAzNkI0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNDQzU3MDQyM0ZBRjgxNjNEODZDQzIxRjFCQTAzRDg5NTAyQUU5QzEy NEZFRjg5QUY2MUY0MDJFQUVFOEI4My8wLzMyMzAzMDJlMzEzMTJlMzEzMjM4MmUz MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzgzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfIC4AwDQYJ KoZIhvcNAQELBQADggEBACgdVzkeBMesPznr5H1k65IESKXt61ePXyexuhlgpyK9 9nuURmVow+Y6t3aFptaZvPR8L4syP4jdRlohTvRyD3ZnQwwT1ncXa90peQeHbgBB +tp2w8S0ZT61d32hshTOYn/ON7pTyJ5/BRFK+/ovyTw8yHxgfwrF1a3AeojGLoqC EBuMgTcf7fPdM25VCeI1Ge6TA47hXiETPPn0EyByMCgghxxhJQ0BOqYrxFeKa33s lXkads/pZDFr4xzTJBmlnLtN8XeCKiS+RLh+lb9yhYJ2l0m0osf2TC/6JCUH5uQ8 /VM+fAyCUHlfEPJCY0+L1VzRnks5Ro4eBil7vxvflps= -----END CERTIFICATE-----Generated at Sun Jan 25 09:58:54 2026 by rpki-client