This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa File: 3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa (raw, json) Hash identifier: E/a7olQCnUx9DSkocPLXuWKbFzia+E4gSj0XoO9RQ/4= Subject key identifier: FC:51:BB:CB:B9:3A:01:C7:12:9C:6E:8A:41:BD:0B:B5:9B:15:0C:53 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 4B38761575F3C38CAF406BDA3D1E79B576387644 Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:41 +0000 ROA not before: Tue 06 Jan 2026 19:27:41 +0000 ROA not after: Tue 05 Jan 2027 19:32:41 +0000 asID: 22122 IP address blocks: 148.209.148.0/22 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:76:15:75:f3:c3:8c:af:40:6b:da:3d:1e:79:b5:76:38:76:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:41 2026 GMT Not After : Jan 5 19:32:41 2027 GMT Subject: CN=FC51BBCBB93A01C7129C6E8A41BD0BB59B150C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:37:6a:63:19:8c:77:0b:8a:e4:b2:26:70: c8:fc:8f:df:69:17:b7:a2:c4:53:f1:97:2c:b6:cf: 62:82:e4:6e:7b:e4:04:56:df:94:e1:57:8a:9b:66: 36:ac:56:1a:23:c3:d4:5d:12:30:19:1b:1f:ab:d3: a0:6d:67:64:37:75:4e:ee:b6:57:93:43:2d:b7:7f: 82:2b:ca:22:4f:80:bc:be:00:19:8e:97:cb:2f:c5: 2d:62:2e:cc:15:66:39:66:c0:90:2f:00:b8:5e:37: 27:d7:da:10:85:d7:90:4b:e9:8a:d9:1e:fe:33:50: ec:a0:c6:2d:5e:b9:bf:e3:81:fa:ba:ab:ec:c2:f4: c3:f7:19:36:1b:47:0a:e5:18:8e:0f:b4:fd:8c:d8: 23:42:0b:72:3c:63:5f:82:a4:9c:7d:6c:3a:f9:1a: 5b:2b:25:33:9e:06:f0:c1:7d:19:24:a8:35:34:df: 4a:b1:02:fe:db:fa:54:0a:6d:0e:ab:fd:13:22:6e: 51:ca:7e:a6:a4:b1:0b:41:9e:5b:15:0b:8c:a1:95: 85:a5:a1:89:6f:50:ae:be:dc:7f:11:6a:3e:9c:ae: 4f:38:87:cb:65:a3:03:e8:f5:f7:b7:07:cc:71:83: e0:35:4f:a1:e3:df:3a:fd:d0:0a:13:4a:54:aa:56: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:51:BB:CB:B9:3A:01:C7:12:9C:6E:8A:41:BD:0B:B5:9B:15:0C:53 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134382e302f32322d3233203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.148.0/22 Signature Algorithm: sha256WithRSAEncryption 88:82:72:a4:a3:1b:cb:76:50:0e:d0:31:19:0d:74:c7:c8:da: bf:e1:8a:af:c4:7f:22:8f:26:b5:6f:49:ee:07:66:79:87:f5: 92:a9:39:75:00:d2:ea:ad:7c:aa:ef:68:23:64:28:e1:75:89: 22:47:02:20:a4:6a:a3:3e:8e:7b:71:bb:86:a5:d0:2e:e6:8e: 4d:d1:9d:0b:f6:95:81:11:0c:7e:a2:70:d2:a5:07:30:8c:fc: 51:1b:c9:88:e3:7d:cd:26:04:1f:5f:d5:aa:a0:3d:7f:f3:00: 13:3c:73:fe:ab:4b:af:24:ba:2f:39:41:d3:5e:e8:54:01:90: 78:ff:6f:1d:49:b4:90:aa:55:aa:55:62:84:8e:c3:f5:77:a7: 65:67:b8:fe:49:2d:48:bc:aa:80:92:a5:03:93:cc:07:5c:3d: c3:5d:3f:90:d0:8c:ff:72:43:6c:5b:0d:5a:d9:fd:b4:d3:88: f9:cf:be:e2:a9:24:a1:3e:4f:a5:93:34:78:d8:1f:18:88:80: 5a:d2:73:97:da:4b:05:cb:9b:5e:ed:52:f6:c5:b4:48:4e:7e: 34:87:4f:f1:d5:03:ee:3f:44:e5:d6:ff:e8:19:74:29:b1:09: a1:5d:61:f8:52:00:a1:90:65:33:6b:d6:e9:0c:f1:e4:1f:02: 10:0b:48:47 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUSzh2FXXzw4yvQGvaPR55tXY4dkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NDFaFw0yNzAxMDUxOTMyNDFaMDMxMTAvBgNV BAMTKEZDNTFCQkNCQjkzQTAxQzcxMjlDNkU4QTQxQkQwQkI1OUIxNTBDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zzdqYxmMdwuK5LImcMj8j99p F7eixFPxlyy2z2KC5G575ARW35ThV4qbZjasVhojw9RdEjAZGx+r06BtZ2Q3dU7u tleTQy23f4IryiJPgLy+ABmOl8svxS1iLswVZjlmwJAvALheNyfX2hCF15BL6YrZ Hv4zUOygxi1eub/jgfq6q+zC9MP3GTYbRwrlGI4PtP2M2CNCC3I8Y1+CpJx9bDr5 GlsrJTOeBvDBfRkkqDU030qxAv7b+lQKbQ6r/RMiblHKfqaksQtBnlsVC4yhlYWl oYlvUK6+3H8Raj6crk84h8tlowPo9fe3B8xxg+A1T6Hj3zr90AoTSlSqVlpjAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU/FG7y7k6AccSnG6KQb0LtZsVDFMwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTM0Mzgy ZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClNGU MA0GCSqGSIb3DQEBCwUAA4IBAQCIgnKkoxvLdlAO0DEZDXTHyNq/4YqvxH8ijya1 b0nuB2Z5h/WSqTl1ANLqrXyq72gjZCjhdYkiRwIgpGqjPo57cbuGpdAu5o5N0Z0L 9pWBEQx+onDSpQcwjPxRG8mI433NJgQfX9WqoD1/8wATPHP+q0uvJLovOUHTXuhU AZB4/28dSbSQqlWqVWKEjsP1d6dlZ7j+SS1IvKqAkqUDk8wHXD3DXT+Q0Iz/ckNs Ww1a2f2004j5z77iqSShPk+lkzR42B8YiIBa0nOX2ksFy5te7VL2xbRITn40h0/x 1QPuP0Tl1v/oGXQpsQmhXWH4UgChkGUza9bpDPHkHwIQC0hH -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:27 2026 by rpki-client