This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa File: 3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa (raw, json) Hash identifier: 3ZD8cFFCLYZh1Lc0OVlCYl0wx5LenFf8OKcZhfjYtr8= Subject key identifier: 3C:8A:6A:91:08:0A:EB:6E:29:65:2B:42:76:20:E3:96:51:7B:21:64 Certificate issuer: /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9 Certificate serial: 4F0E71A3733799AB213B80748F0662A875DB8E56 Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa Signing time: Tue 06 Jan 2026 19:28:48 +0000 ROA not before: Tue 06 Jan 2026 19:23:48 +0000 ROA not after: Tue 05 Jan 2027 19:28:48 +0000 asID: 265746 IP address blocks: 128.201.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 11:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0e:71:a3:73:37:99:ab:21:3b:80:74:8f:06:62:a8:75:db:8e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9 Validity Not Before: Jan 6 19:23:48 2026 GMT Not After : Jan 5 19:28:48 2027 GMT Subject: CN=3C8A6A91080AEB6E29652B427620E396517B2164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:5d:1b:88:0d:32:26:5c:d0:24:4c:b1:21: ab:9c:2a:0f:dd:f1:34:0f:37:37:98:32:77:41:0c: a6:ed:84:1e:88:f7:c5:b6:f4:05:48:85:5c:63:88: 56:72:a6:87:67:f4:7d:20:b8:af:42:76:0c:f4:b0: e1:58:95:58:f9:2b:7d:02:ab:75:d6:0a:31:c8:9b: 03:72:06:18:0e:51:a6:68:52:17:f9:a6:cb:6a:bf: ed:34:34:45:ad:51:0b:30:43:65:29:f2:2e:c5:79: e3:8b:4a:c0:66:56:57:ec:27:36:f5:c8:6a:40:c5: 43:3a:f5:b7:f4:14:52:00:f9:ca:09:73:f8:65:1e: bc:b1:79:b3:97:79:55:9c:50:61:94:e6:9e:ec:cd: 40:ea:47:2f:1e:ad:36:d8:64:83:a1:e8:f7:7e:b3: 4d:d7:ac:59:1a:a7:fc:6f:ba:af:df:78:dd:0c:77: c4:ad:09:4e:68:be:b2:6f:30:8a:6e:2a:10:b4:e4: 1f:3e:ad:05:5c:dc:9b:98:2b:25:59:4c:99:87:1c: 1f:9b:60:c3:82:ab:58:93:b7:04:97:4f:1b:0c:86: 2a:64:a1:96:7b:4e:2d:6c:35:6d:59:f8:1a:b4:44: ab:ab:0b:28:cb:e9:d5:df:e4:ba:3d:10:38:c8:59: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:6A:91:08:0A:EB:6E:29:65:2B:42:76:20:E3:96:51:7B:21:64 X509v3 Authority Key Identifier: keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.168.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:91:b2:cd:d1:4d:e8:84:76:4a:4f:89:96:b6:ba:5d:76:26: ac:b7:4a:ec:84:92:4c:3b:71:03:b4:e4:f4:dc:42:3a:91:08: 45:a3:9e:9f:0e:eb:5d:5a:1a:09:8f:cc:b5:51:44:29:70:13: a5:41:93:b4:5c:a4:e0:1d:38:c6:a1:fe:fc:3e:c3:d2:19:36: 1c:8e:1a:21:30:5f:da:7d:d6:42:06:c1:26:ed:43:e6:99:64: c8:76:5d:5f:dd:b3:13:b8:e3:48:c8:ec:95:5e:26:af:22:72: f2:4d:55:30:86:be:20:6d:7a:1a:ef:e6:6a:14:22:eb:fb:a0: 2f:8a:01:31:19:62:bf:8a:28:6c:9b:7a:09:8b:b8:b2:44:cd: 1f:a8:00:14:0d:c3:2f:62:68:eb:c2:9b:58:0c:92:76:06:1f: 23:56:d3:a5:09:ec:0f:b4:34:2f:fe:39:c1:ef:3d:df:4d:11: af:f3:fa:6c:2a:d6:56:88:91:6b:60:21:bc:f1:ae:b5:92:1c: 5b:aa:25:ce:13:12:4f:90:d4:ea:57:6e:f0:97:55:86:fc:0a: b5:28:3c:37:2b:56:32:5a:6f:ff:4b:04:eb:03:8f:a2:5a:50: fa:5d:3d:8a:83:80:61:53:45:4a:35:ab:85:26:5c:3d:46:da: 3e:e3:3c:f1 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUTw5xo3M3mashO4B0jwZiqHXbjlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0OTBBQzY5M0IwMEMxQkY1MTU4MkIxNjkxRkMyREM0 NkI3MUZBOTAeFw0yNjAxMDYxOTIzNDhaFw0yNzAxMDUxOTI4NDhaMDMxMTAvBgNV BAMTKDNDOEE2QTkxMDgwQUVCNkUyOTY1MkI0Mjc2MjBFMzk2NTE3QjIxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qV0biA0yJlzQJEyxIaucKg/d 8TQPNzeYMndBDKbthB6I98W29AVIhVxjiFZypodn9H0guK9Cdgz0sOFYlVj5K30C q3XWCjHImwNyBhgOUaZoUhf5pstqv+00NEWtUQswQ2Up8i7FeeOLSsBmVlfsJzb1 yGpAxUM69bf0FFIA+coJc/hlHryxebOXeVWcUGGU5p7szUDqRy8erTbYZIOh6Pd+ s03XrFkap/xvuq/feN0Md8StCU5ovrJvMIpuKhC05B8+rQVc3JuYKyVZTJmHHB+b YMOCq1iTtwSXTxsMhipkoZZ7Ti1sNW1Z+Bq0RKurCyjL6dXf5Lo9EDjIWSgVAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUPIpqkQgK624pZStCdiDjllF7IWQwHwYDVR0j BBgwFoAU1UkKxpOwDBv1FYKxaR/C3Ea3H6kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NTNFOTE1Qzc4QjExNUVEMUVGNkI4RDYxMzRBMkQ2NERC NjUxNTIyM0IwODJGRDRGQjI3QUI4MTQ2QUE4OEEyLzAvRDU0OTBBQzY5M0IwMEMx QkY1MTU4MkIxNjkxRkMyREM0NkI3MUZBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENTQ5MEFDNjkzQjAwQzFCRjUx NTgyQjE2OTFGQzJEQzQ2QjcxRkE5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTUzRTkxNUM3OEIxMTVFRDFFRjZCOEQ2MTM0QTJENjREQjY1MTUyMjNC MDgyRkQ0RkIyN0FCODE0NkFBODhBMi8wLzMxMzIzODJlMzIzMDMxMmUzMTM2Mzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM0MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACA yagwDQYJKoZIhvcNAQELBQADggEBAFyRss3RTeiEdkpPiZa2ul12Jqy3SuyEkkw7 cQO05PTcQjqRCEWjnp8O611aGgmPzLVRRClwE6VBk7RcpOAdOMah/vw+w9IZNhyO GiEwX9p91kIGwSbtQ+aZZMh2XV/dsxO440jI7JVeJq8icvJNVTCGviBtehrv5moU Iuv7oC+KATEZYr+KKGybegmLuLJEzR+oABQNwy9iaOvCm1gMknYGHyNW06UJ7A+0 NC/+OcHvPd9NEa/z+mwq1laIkWtgIbzxrrWSHFuqJc4TEk+Q1OpXbvCXVYb8CrUo PDcrVjJab/9LBOsDj6JaUPpdPYqDgGFTRUo1q4UmXD1G2j7jPPE= -----END CERTIFICATE-----Generated at Sun Jan 25 10:02:55 2026 by rpki-client