This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa File: 3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa (raw, json) Hash identifier: t8XcsiTbt7z0mCbvPT9ySCIqVOSdnrpNmORjl9q+i88= Subject key identifier: 79:77:DF:79:DB:38:C6:88:7C:E5:DC:7D:30:49:17:2D:86:DB:EE:27 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 23B69C94416FD9326F01E614D62AC84D850D7B8C Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:53 +0000 ROA not before: Tue 06 Jan 2026 19:27:53 +0000 ROA not after: Tue 05 Jan 2027 19:32:53 +0000 asID: 22122 IP address blocks: 148.209.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:9c:94:41:6f:d9:32:6f:01:e6:14:d6:2a:c8:4d:85:0d:7b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:53 2026 GMT Not After : Jan 5 19:32:53 2027 GMT Subject: CN=7977DF79DB38C6887CE5DC7D3049172D86DBEE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:ff:98:32:52:61:c1:55:88:02:06:bf:3a: f1:fc:8b:ee:f0:91:a8:47:4e:c7:ae:be:3e:94:00: df:04:f7:3b:e4:0e:5d:0a:21:e7:d9:ca:c0:8b:a0: 64:fc:ac:b9:33:c8:ea:57:0f:a2:a1:59:78:ad:6b: 8d:41:14:d1:c0:e2:c4:b9:43:6a:d3:0b:d3:8d:67: fa:b5:ea:36:01:6c:f2:ed:3e:ed:5e:8a:be:b3:e7: 2a:cd:27:b1:cf:c7:51:0a:7e:e7:70:bf:58:2a:b3: 6e:9c:c8:da:45:b4:f4:46:80:0e:58:e9:e2:ff:5d: 72:bd:cc:04:0b:ba:bc:14:37:25:4b:8d:1f:bb:3e: 72:d6:0b:ef:15:58:b6:a3:80:ac:fb:1d:b7:b4:8a: 9b:45:1a:46:5a:a4:21:ee:16:3e:82:86:6d:e6:ce: 64:7d:3e:d7:9d:5d:45:a0:ff:15:37:b1:8a:bb:19: 14:92:05:b2:e0:2b:86:e5:ac:da:8a:e1:ea:27:11: 94:6f:06:66:30:32:09:88:f8:6c:44:bb:8d:4e:fc: f5:98:1f:fc:29:ff:43:ae:7e:5e:d1:60:25:01:bd: 5a:2c:30:b5:dc:62:7f:be:ec:dd:22:52:a7:f9:14: 0d:cd:c9:75:2d:49:9c:1a:40:ac:b9:a5:47:f8:74: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:77:DF:79:DB:38:C6:88:7C:E5:DC:7D:30:49:17:2D:86:DB:EE:27 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.136.0/22 Signature Algorithm: sha256WithRSAEncryption 06:e1:2f:ae:b8:38:a3:a4:f8:cc:34:c9:ea:1a:4e:fa:a9:a9: 4b:06:47:9c:e1:eb:99:8a:75:27:9b:f7:7f:48:6d:48:4c:fe: 4c:04:6b:2e:60:09:df:f6:61:bd:e1:22:c8:51:07:12:b9:76: c7:aa:14:64:66:e7:9d:56:0f:66:1e:f3:34:bf:48:ff:2e:c5: ac:15:0b:60:50:d6:76:72:a2:a1:da:31:b5:94:55:7e:15:9a: 29:b6:41:f1:0f:fe:a1:a2:7f:db:45:22:6d:20:83:67:19:63: bd:b2:96:eb:f5:4d:b0:0c:56:2d:5d:03:bc:f8:06:05:59:f0: 60:82:f3:84:7b:44:df:58:55:c8:c1:6e:47:d7:08:ee:73:8e: 46:7f:3d:d5:83:9e:56:f6:99:1a:26:ed:4c:b4:fa:b9:b7:2b: 61:34:a6:f9:7b:79:7d:8e:b2:b9:e3:e5:7c:38:59:39:ed:f7: b9:8f:e2:c8:15:61:a5:d8:41:c7:8b:90:f2:49:37:41:56:9d: fb:96:0e:53:af:81:60:09:96:dd:e7:c8:2d:d5:21:20:38:a1: 2a:c0:46:d4:b2:9f:83:27:2f:60:fa:d7:af:0f:2a:dd:cd:70: d0:3c:63:83:d4:c1:36:85:c9:96:e0:3a:a9:de:df:64:78:9e: d9:4d:e7:52 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUI7aclEFv2TJvAeYU1irITYUNe4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NTNaFw0yNzAxMDUxOTMyNTNaMDMxMTAvBgNV BAMTKDc5NzdERjc5REIzOEM2ODg3Q0U1REM3RDMwNDkxNzJEODZEQkVFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQP+YMlJhwVWIAga/OvH8i+7w kahHTseuvj6UAN8E9zvkDl0KIefZysCLoGT8rLkzyOpXD6KhWXita41BFNHA4sS5 Q2rTC9ONZ/q16jYBbPLtPu1eir6z5yrNJ7HPx1EKfudwv1gqs26cyNpFtPRGgA5Y 6eL/XXK9zAQLurwUNyVLjR+7PnLWC+8VWLajgKz7Hbe0iptFGkZapCHuFj6Chm3m zmR9PtedXUWg/xU3sYq7GRSSBbLgK4blrNqK4eonEZRvBmYwMgmI+GxEu41O/PWY H/wp/0Oufl7RYCUBvVosMLXcYn++7N0iUqf5FA3NyXUtSZwaQKy5pUf4dMQ5AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUeXffeds4xoh85dx9MEkXLYbb7icwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTMzMzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClNGI MA0GCSqGSIb3DQEBCwUAA4IBAQAG4S+uuDijpPjMNMnqGk76qalLBkec4euZinUn m/d/SG1ITP5MBGsuYAnf9mG94SLIUQcSuXbHqhRkZuedVg9mHvM0v0j/LsWsFQtg UNZ2cqKh2jG1lFV+FZoptkHxD/6hon/bRSJtIINnGWO9spbr9U2wDFYtXQO8+AYF WfBggvOEe0TfWFXIwW5H1wjuc45Gfz3Vg55W9pkaJu1MtPq5tythNKb5e3l9jrK5 4+V8OFk57fe5j+LIFWGl2EHHi5DySTdBVp37lg5Tr4FgCZbd58gt1SEgOKEqwEbU sp+DJy9g+tevDyrdzXDQPGOD1ME2hcmW4Dqp3t9keJ7ZTedS -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:20 2026 by rpki-client