This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa File: 3230302e392e342e302f32322d3232203d3e203233323031.roa (raw, json) Hash identifier: ROl+mPuNthE/hx628sM1HXIIy2I5d0tqZkY/75wk+Kc= Subject key identifier: 4E:0E:C5:8D:3B:28:DE:19:03:8A:21:5B:F2:49:19:B6:0C:F2:B0:81 Certificate issuer: /CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9 Certificate serial: 026650118A10D7CB69C7C473944A0E4F6B17DDE4 Authority key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa Signing time: Tue 06 Jan 2026 19:34:42 +0000 ROA not before: Tue 06 Jan 2026 19:29:42 +0000 ROA not after: Tue 05 Jan 2027 19:34:42 +0000 asID: 23201 IP address blocks: 200.9.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 13:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:66:50:11:8a:10:d7:cb:69:c7:c4:73:94:4a:0e:4f:6b:17:dd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9 Validity Not Before: Jan 6 19:29:42 2026 GMT Not After : Jan 5 19:34:42 2027 GMT Subject: CN=4E0EC58D3B28DE19038A215BF24919B60CF2B081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:4a:c7:8f:d2:ef:c0:c2:b5:cb:75:c5:c6: c6:99:80:8c:25:a0:e3:16:14:b5:4a:85:7d:72:2c: 5a:f6:72:05:8d:33:5e:e4:58:ae:13:83:db:c6:6e: 12:14:ca:51:fd:e4:10:5a:f4:91:10:30:bf:64:ac: 22:c1:d1:55:31:03:36:c8:38:c9:61:dc:cb:b5:c7: 36:b5:3f:ee:0f:60:e7:d1:8c:f9:27:a5:76:49:b5: 77:49:03:58:43:06:57:82:48:78:66:ad:f0:6b:07: 53:6a:e3:a2:bc:7a:d2:6d:98:9f:d6:1e:ac:5c:2f: d5:2b:6f:64:2d:bf:6a:4d:17:b7:ce:fe:75:70:6c: 8d:93:d3:c8:31:31:71:16:24:e8:4d:5e:5b:1a:24: b6:52:96:42:b9:22:c2:42:0e:58:07:e8:69:7f:bd: b4:fb:05:3a:c9:70:86:d1:c2:bf:ce:2c:3f:b3:66: b5:36:4a:d1:df:87:c4:1d:69:0c:fe:fe:75:8d:ee: 1e:08:2c:9d:46:cb:5c:a3:c7:17:b1:ed:79:4a:4c: bd:d1:b8:99:a7:01:a6:98:d0:33:eb:76:a2:1e:67: e8:e2:9e:f7:19:71:12:78:a1:13:5f:e1:68:e9:2f: 0d:78:a1:f2:0d:30:08:bb:04:28:58:95:11:12:18: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0E:C5:8D:3B:28:DE:19:03:8A:21:5B:F2:49:19:B6:0C:F2:B0:81 X509v3 Authority Key Identifier: keyid:41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:3e:19:ac:0d:85:52:f0:fd:b6:ff:1c:82:9a:80:d4:e8:3b: a9:73:d3:4c:eb:de:54:3e:94:4f:fc:33:68:c8:41:b2:c2:90: 0c:0f:9c:40:a7:e7:d8:0c:e0:5d:98:fd:e9:5b:2f:45:09:5d: a7:99:58:85:9f:d6:99:d5:5e:00:b9:d4:18:c7:9f:ea:e5:60: a9:1b:38:c3:d7:ed:91:c6:fe:f5:d6:dc:6e:d0:c8:f4:37:2d: 85:a0:cd:c2:3b:91:9d:b4:21:42:09:a3:fa:a2:95:d0:4f:55: ca:22:33:8b:9b:46:d3:57:99:fc:8b:99:91:d1:a6:8b:f7:18: 13:5c:e2:a9:a1:fd:72:a0:0d:86:a7:f2:58:24:e1:a5:30:72: 45:6e:de:16:49:20:b1:c1:c5:9e:a6:54:ad:42:b7:81:7e:a0: 0b:27:02:f1:3c:dd:0e:aa:12:17:ff:db:9c:9b:78:bd:b1:32: 4d:11:ea:a0:19:70:d6:54:b6:41:b8:72:ae:ef:36:af:b2:2b: 3e:12:08:8f:43:6f:c0:9b:63:32:72:22:93:ea:36:73:14:b9: 02:b2:6d:e3:5e:7f:23:d3:c8:58:86:8d:33:8e:8f:d6:d5:8a: b6:ff:d9:bb:05:c4:fb:d4:09:4c:66:05:3a:a4:30:32:af:4c: 64:13:1d:86 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIUAmZQEYoQ18tpx8RzlEoOT2sX3eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyRTNGMkQzQjY0REZERUI1ODI4NUY2NTMzMjdFRUI2 RkY2Q0FFOTAeFw0yNjAxMDYxOTI5NDJaFw0yNzAxMDUxOTM0NDJaMDMxMTAvBgNV BAMTKDRFMEVDNThEM0IyOERFMTkwMzhBMjE1QkYyNDkxOUI2MENGMkIwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTUrHj9LvwMK1y3XFxsaZgIwl oOMWFLVKhX1yLFr2cgWNM17kWK4Tg9vGbhIUylH95BBa9JEQML9krCLB0VUxAzbI OMlh3Mu1xza1P+4PYOfRjPknpXZJtXdJA1hDBleCSHhmrfBrB1Nq46K8etJtmJ/W HqxcL9Urb2Qtv2pNF7fO/nVwbI2T08gxMXEWJOhNXlsaJLZSlkK5IsJCDlgH6Gl/ vbT7BTrJcIbRwr/OLD+zZrU2StHfh8QdaQz+/nWN7h4ILJ1Gy1yjxxex7XlKTL3R uJmnAaaY0DPrdqIeZ+jinvcZcRJ4oRNf4WjpLw14ofINMAi7BChYlRESGFF5AgMB AAGjggLCMIICvjAdBgNVHQ4EFgQUTg7FjTso3hkDiiFb8kkZtgzysIEwHwYDVR0j BBgwFoAUQS4/LTtk3961goX2UzJ+62/2yukwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80Q0U5OTUyMjdDQjc0MzAyMkExMDFBQTg1REY5ODlBNUZE OEI0MzM5Q0Q2OEIxNzkxMDE2MTAxQzkwQTdCOUE2LzAvNDEyRTNGMkQzQjY0REZE RUI1ODI4NUY2NTMzMjdFRUI2RkY2Q0FFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTJFM0YyRDNCNjRERkRFQjU4 Mjg1RjY1MzMyN0VFQjZGRjZDQUU5LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNENFOTk1MjI3Q0I3NDMwMjJBMTAxQUE4NURGOTg5QTVGRDhCNDMzOUNE NjhCMTc5MTAxNjEwMUM5MEE3QjlBNi8wLzMyMzAzMDJlMzkyZTM0MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzMzMyMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgJBDANBgkqhkiG 9w0BAQsFAAOCAQEAfT4ZrA2FUvD9tv8cgpqA1Og7qXPTTOveVD6UT/wzaMhBssKQ DA+cQKfn2AzgXZj96VsvRQldp5lYhZ/WmdVeALnUGMef6uVgqRs4w9ftkcb+9dbc btDI9DcthaDNwjuRnbQhQgmj+qKV0E9VyiIzi5tG01eZ/IuZkdGmi/cYE1ziqaH9 cqANhqfyWCThpTByRW7eFkkgscHFnqZUrUK3gX6gCycC8TzdDqoSF//bnJt4vbEy TRHqoBlw1lS2Qbhyru82r7IrPhIIj0NvwJtjMnIik+o2cxS5ArJt415/I9PIWIaN M46P1tWKtv/ZuwXE+9QJTGYFOqQwMq9MZBMdhg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:16:39 2026 by rpki-client