This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa File: 3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa (raw, json) Hash identifier: T8ANVh7+Gt2E7j09emU1HmitwP/mk1WLwWNbL5BsoZY= Subject key identifier: B8:9D:3D:C2:D1:56:30:A3:0D:60:C1:69:4F:EA:0D:3A:73:FC:56:8D Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 5CB0293DA3028CBFC9B6515F30711C2050918B45 Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:51 +0000 ROA not before: Tue 06 Jan 2026 19:27:51 +0000 ROA not after: Tue 05 Jan 2027 19:32:51 +0000 asID: 22122 IP address blocks: 148.209.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:29:3d:a3:02:8c:bf:c9:b6:51:5f:30:71:1c:20:50:91:8b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:51 2026 GMT Not After : Jan 5 19:32:51 2027 GMT Subject: CN=B89D3DC2D15630A30D60C1694FEA0D3A73FC568D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:4b:37:c6:75:cf:71:8e:6b:2c:e1:a9:33: 69:66:53:d3:e6:05:61:4e:17:36:15:16:7f:42:c0: ad:ee:b8:d6:72:67:86:2f:d3:58:05:01:55:16:31: 21:e0:16:0e:5e:4e:35:17:16:c9:52:84:c2:8d:ca: 89:33:50:d8:ee:b6:4d:f5:f6:55:70:c6:0f:07:2a: 60:95:16:52:76:ff:4c:f5:a4:d8:3b:69:ce:07:5d: 5d:f4:62:b7:9c:3c:56:1c:51:9d:54:b4:85:2e:68: fc:6b:cb:c5:c5:9f:2e:db:68:cc:85:23:72:bc:ff: ea:69:d2:32:7b:f4:95:cf:bc:2d:1f:20:39:79:c9: ff:ad:5a:ec:17:dc:ae:25:5d:a6:78:f5:fa:4c:61: 34:e5:55:59:b0:95:8d:5b:17:30:c0:75:1f:9d:52: 50:b7:8d:f4:85:3c:1f:b8:61:a4:c4:7a:f1:50:b8: 95:7a:85:64:4a:d1:59:0d:e5:39:09:27:7e:1f:0e: 39:a5:55:22:21:38:a7:93:d0:5c:49:ae:32:e3:19: 0d:b3:69:41:82:1e:f1:66:be:80:3d:ce:a6:9f:80: 52:c5:de:d6:e0:e0:ce:a1:70:72:c0:c2:8e:fa:5e: c4:f8:f5:6b:9f:48:d1:89:dd:ba:49:10:60:94:48: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:3D:C2:D1:56:30:A3:0D:60:C1:69:4F:EA:0D:3A:73:FC:56:8D X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.111.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:bd:f9:76:c9:61:23:c5:cf:fa:cb:81:25:ad:c1:33:54:67: a0:8d:4a:d9:e0:31:e8:ed:15:e8:04:04:40:c3:a2:6f:cd:bd: cf:38:4a:0e:5d:fc:eb:96:12:8b:8d:50:fb:1a:d9:8a:b6:df: 9a:75:13:c8:84:ad:58:6a:f2:f5:5b:fa:1f:4d:c8:e5:1d:11: 35:12:a6:b1:58:3d:c5:fd:ef:58:be:79:31:f4:b6:7e:27:48: 37:a0:49:33:61:75:e2:ca:5d:1e:d2:c3:0d:3f:27:f5:58:5b: 56:27:96:f9:67:1f:bb:55:8f:1f:df:02:8c:af:0d:57:a0:a0: 6a:59:fd:f3:87:73:4d:dc:91:1b:0b:a7:be:a7:61:17:a9:bc: b1:27:20:50:e5:e9:ca:62:a9:8b:1d:94:cd:2e:5f:32:cf:e7: f2:de:c0:0c:95:a3:74:0c:98:23:83:6e:37:e3:f7:b8:52:fb: c6:32:52:8c:a5:11:a3:da:d2:bd:6a:27:47:fa:85:95:23:80: ae:62:84:d6:f0:2b:bf:3b:e0:65:2a:7d:7e:7b:a4:ab:94:b4: 75:42:2f:ae:25:5a:20:17:e5:de:bd:a1:84:c9:48:20:cb:49: cc:7a:f3:58:5d:5a:e5:52:91:7a:b8:ff:4e:db:90:a4:b5:ec: ff:dd:bf:ee -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUXLApPaMCjL/JtlFfMHEcIFCRi0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NTFaFw0yNzAxMDUxOTMyNTFaMDMxMTAvBgNV BAMTKEI4OUQzREMyRDE1NjMwQTMwRDYwQzE2OTRGRUEwRDNBNzNGQzU2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/ks3xnXPcY5rLOGpM2lmU9Pm BWFOFzYVFn9CwK3uuNZyZ4Yv01gFAVUWMSHgFg5eTjUXFslShMKNyokzUNjutk31 9lVwxg8HKmCVFlJ2/0z1pNg7ac4HXV30YrecPFYcUZ1UtIUuaPxry8XFny7baMyF I3K8/+pp0jJ79JXPvC0fIDl5yf+tWuwX3K4lXaZ49fpMYTTlVVmwlY1bFzDAdR+d UlC3jfSFPB+4YaTEevFQuJV6hWRK0VkN5TkJJ34fDjmlVSIhOKeT0FxJrjLjGQ2z aUGCHvFmvoA9zqafgFLF3tbg4M6hcHLAwo76XsT49WufSNGJ3bpJEGCUSDi9AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUuJ09wtFWMKMNYMFpT+oNOnP8Vo0wHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTMxMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNFv MA0GCSqGSIb3DQEBCwUAA4IBAQA+vfl2yWEjxc/6y4ElrcEzVGegjUrZ4DHo7RXo BARAw6Jvzb3POEoOXfzrlhKLjVD7GtmKtt+adRPIhK1YavL1W/ofTcjlHRE1Eqax WD3F/e9Yvnkx9LZ+J0g3oEkzYXXiyl0e0sMNPyf1WFtWJ5b5Zx+7VY8f3wKMrw1X oKBqWf3zh3NN3JEbC6e+p2EXqbyxJyBQ5enKYqmLHZTNLl8yz+fy3sAMlaN0DJgj g2434/e4UvvGMlKMpRGj2tK9aidH+oWVI4CuYoTW8Cu/O+BlKn1+e6SrlLR1Qi+u JVogF+XevaGEyUggy0nMevNYXVrlUpF6uP9O25Cktez/3b/u -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:28 2026 by rpki-client