This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa File: 3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa (raw, json) Hash identifier: xpO5NMEOWikAH5CL1mAyKy4tlhQ7TTiSz/S1XJzAalA= Subject key identifier: 76:36:10:2A:8C:CF:C9:C1:BF:99:CB:6A:F1:D6:C2:C8:D9:0A:EA:3C Certificate issuer: /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1 Certificate serial: 564866E5FB0858B221C26FF5484B066DD560511B Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa Signing time: Tue 06 Jan 2026 19:21:25 +0000 ROA not before: Tue 06 Jan 2026 19:16:25 +0000 ROA not after: Tue 05 Jan 2027 19:21:25 +0000 asID: 264780 IP address blocks: 168.228.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:48:66:e5:fb:08:58:b2:21:c2:6f:f5:48:4b:06:6d:d5:60:51:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1 Validity Not Before: Jan 6 19:16:25 2026 GMT Not After : Jan 5 19:21:25 2027 GMT Subject: CN=7636102A8CCFC9C1BF99CB6AF1D6C2C8D90AEA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:1d:28:ef:1b:6e:dd:93:f6:00:1f:00:9e: a5:1d:92:53:9e:32:72:e5:5a:a8:49:9b:32:d6:e9: 28:a3:7e:42:40:b4:bb:08:73:1a:86:e3:17:cd:5e: aa:89:33:71:44:c4:6e:28:8a:d5:84:6c:45:10:35: 15:85:d6:f5:6b:bb:d8:e5:c3:a9:29:72:80:88:dc: 2d:4c:b6:45:e2:d1:8f:2f:0c:1d:c4:b3:e1:e7:63: 1a:22:b7:65:25:fb:96:bf:04:47:74:07:3f:a3:b6: 7c:ee:6c:a9:c2:e0:2d:0a:32:2b:df:78:7e:33:16: 31:31:b0:6c:61:09:5a:1a:71:6e:e3:21:fe:74:58: 50:87:b8:28:87:db:22:0f:30:e7:80:d5:02:34:2f: 40:c7:c6:a9:35:5b:16:b7:94:98:d6:9d:3f:1c:4c: 88:04:08:fa:b2:2a:21:fc:0b:3a:36:d6:42:b2:04: 42:90:68:75:f9:dc:b2:62:ca:c8:94:05:26:ed:9a: 4c:de:a4:03:32:82:7d:f5:88:cc:34:bc:6d:e2:ef: f0:06:f7:71:d6:9f:0b:00:b1:f5:33:51:cb:0f:a3: a5:ca:4e:c4:a0:6c:7e:b5:6b:0e:fc:1d:98:d7:38: 3a:dc:95:1c:cf:9c:6d:f8:ac:35:ee:fa:39:c3:39: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:10:2A:8C:CF:C9:C1:BF:99:CB:6A:F1:D6:C2:C8:D9:0A:EA:3C X509v3 Authority Key Identifier: keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.248.0/22 Signature Algorithm: sha256WithRSAEncryption 65:87:cd:8d:92:05:ea:f1:b4:9c:0e:08:5d:60:69:e3:5a:5e: 7e:ec:8e:22:ae:c0:f4:e4:85:2b:70:d7:66:ad:40:00:44:8c: cf:e9:35:1d:d1:bd:86:0d:02:67:05:54:31:9b:43:70:0c:b8: 75:3e:9e:1a:15:87:97:55:3b:b1:1d:94:59:ba:ca:25:74:55: 69:17:a3:b2:aa:33:0b:43:83:2d:17:ff:7f:ca:b7:8a:52:0a: 60:cd:74:e9:bf:bf:04:98:50:a6:e8:46:2f:7c:71:fb:ad:c1: b4:dc:28:af:5d:05:b1:9a:16:f3:01:85:71:c4:1b:31:ca:7e: 3f:22:56:b9:79:3d:21:84:e4:24:4f:67:de:1f:a7:1f:0a:7a: 25:54:b3:41:35:b4:b3:5b:f9:2f:9f:96:2d:79:09:94:b7:a6: 92:bb:15:73:4c:e4:79:f7:15:64:f8:84:3a:84:d5:19:b0:ce: 71:22:fd:1e:88:71:ce:03:fd:da:6f:f1:a3:8b:18:fc:24:1c: 94:0e:a5:aa:f6:b4:f9:e2:8b:e9:c6:51:04:90:67:39:00:65: 0b:2c:9d:ff:8a:77:40:13:78:92:cf:96:75:1f:4c:f6:6f:0e: e2:92:b8:2e:76:f1:7e:75:00:59:33:9b:2b:60:0a:51:c5:b4: 80:67:4b:ce -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUVkhm5fsIWLIhwm/1SEsGbdVgURswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCOUM0N0M1RTYwNjQ1NEZDMzE0QUQ3RDhDRDc4NkZC ODA0OUZGMTAeFw0yNjAxMDYxOTE2MjVaFw0yNzAxMDUxOTIxMjVaMDMxMTAvBgNV BAMTKDc2MzYxMDJBOENDRkM5QzFCRjk5Q0I2QUYxRDZDMkM4RDkwQUVBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05x0o7xtu3ZP2AB8AnqUdklOe MnLlWqhJmzLW6SijfkJAtLsIcxqG4xfNXqqJM3FExG4oitWEbEUQNRWF1vVru9jl w6kpcoCI3C1MtkXi0Y8vDB3Es+HnYxoit2Ul+5a/BEd0Bz+jtnzubKnC4C0KMivf eH4zFjExsGxhCVoacW7jIf50WFCHuCiH2yIPMOeA1QI0L0DHxqk1Wxa3lJjWnT8c TIgECPqyKiH8Czo21kKyBEKQaHX53LJiysiUBSbtmkzepAMygn31iMw0vG3i7/AG 93HWnwsAsfUzUcsPo6XKTsSgbH61aw78HZjXODrclRzPnG34rDXu+jnDOaizAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUdjYQKozPycG/mctq8dbCyNkK6jwwHwYDVR0j BBgwFoAUILnEfF5gZFT8MUrX2M14b7gEn/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NkFBNzBEQ0JFRDg5MzA1QzU2Mjg2QjJENDc5Mzk5QUM1 MTMzRDA5NTk3QUNFRUY4ODM3RTRFNkVENzhCREI1LzAvMjBCOUM0N0M1RTYwNjQ1 NEZDMzE0QUQ3RDhDRDc4NkZCODA0OUZGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEI5QzQ3QzVFNjA2NDU0RkMz MTRBRDdEOENENzg2RkI4MDQ5RkYxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDZBQTcwRENCRUQ4OTMwNUM1NjI4NkIyRDQ3OTM5OUFDNTEzM0QwOTU5 N0FDRUVGODgzN0U0RTZFRDc4QkRCNS8wLzMxMzYzODJlMzIzMjM4MmUzMjM0Mzgy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM4MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo 5PgwDQYJKoZIhvcNAQELBQADggEBAGWHzY2SBerxtJwOCF1gaeNaXn7sjiKuwPTk hStw12atQABEjM/pNR3RvYYNAmcFVDGbQ3AMuHU+nhoVh5dVO7EdlFm6yiV0VWkX o7KqMwtDgy0X/3/Kt4pSCmDNdOm/vwSYUKboRi98cfutwbTcKK9dBbGaFvMBhXHE GzHKfj8iVrl5PSGE5CRPZ94fpx8KeiVUs0E1tLNb+S+fli15CZS3ppK7FXNM5Hn3 FWT4hDqE1RmwznEi/R6Icc4D/dpv8aOLGPwkHJQOpar2tPnii+nGUQSQZzkAZQss nf+Kd0ATeJLPlnUfTPZvDuKSuC528X51AFkzmytgClHFtIBnS84= -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:57 2026 by rpki-client