This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa File: 3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa (raw, json) Hash identifier: XeZDTWcxAmuxPMYohV3GjxU+Q3HIE8pHldqAVG5Aotw= Subject key identifier: 86:60:A4:67:20:C5:1B:CF:20:0E:C8:E1:71:A1:2A:CA:61:2B:32:31 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 70D4648223549A5D8B595706BF60783D4D64CA4F Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:42 +0000 ROA not before: Tue 06 Jan 2026 19:27:42 +0000 ROA not after: Tue 05 Jan 2027 19:32:42 +0000 asID: 22122 IP address blocks: 148.209.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d4:64:82:23:54:9a:5d:8b:59:57:06:bf:60:78:3d:4d:64:ca:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:42 2026 GMT Not After : Jan 5 19:32:42 2027 GMT Subject: CN=8660A46720C51BCF200EC8E171A12ACA612B3231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:ca:78:c9:14:e3:a2:57:6d:a0:d7:33:09: 8d:6d:11:0b:4c:09:91:57:1a:25:59:b8:a0:0f:c1: d4:56:68:a3:6b:f0:da:ee:b0:38:2b:94:55:69:fb: 51:f5:c0:4a:2e:37:83:ce:14:13:b6:46:ce:a4:5d: 46:c2:bb:fd:7a:92:7f:63:33:fb:9f:0b:f6:52:ec: 0b:d0:56:ca:a9:d5:69:e1:1b:f1:8c:7f:6e:cf:97: 70:c8:35:af:08:64:32:60:22:ba:7b:af:e0:d3:1a: f3:94:ea:3e:35:11:69:bd:cd:49:7f:fb:62:8a:a5: fa:6e:f7:1c:7f:b9:99:2c:2d:a5:a8:0e:56:5b:5a: 54:c6:03:ad:18:49:27:43:51:82:4d:0f:ee:60:78: 3e:85:a9:d5:3c:96:b3:71:6f:c7:23:08:45:2a:1a: 3b:91:87:79:a7:2d:2d:55:74:6b:e2:61:69:03:d4: f3:dc:ef:c6:4b:92:d1:88:4c:cd:bf:1c:ff:80:07: 4b:02:e1:2e:84:a8:92:83:49:8b:c1:88:9e:6c:72: 65:bc:cb:a7:94:86:98:07:7a:4c:36:8e:ae:1e:9a: b7:7b:b6:b0:8b:1c:86:2d:54:9d:45:2a:92:3c:ba: 9d:0e:b1:bd:fc:c6:1c:20:de:e5:22:63:4a:6a:4e: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:A4:67:20:C5:1B:CF:20:0E:C8:E1:71:A1:2A:CA:61:2B:32:31 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.220.0/23 Signature Algorithm: sha256WithRSAEncryption 62:ae:ed:55:d7:09:42:98:b3:7e:f8:6f:bc:6a:78:86:10:ee: 02:3f:e2:8a:8b:da:42:44:78:be:d3:c1:3d:6c:3c:ad:e0:66: fa:36:ab:80:00:15:46:8a:88:23:ca:2c:26:51:39:68:9d:2b: 2d:50:aa:d8:3e:81:1a:bc:6e:f3:6b:d2:c0:cb:3c:73:04:86: 6a:66:de:20:8f:87:b0:f3:c9:d4:99:a6:fa:96:ad:e0:ba:87: 30:ed:b0:db:19:2c:88:46:72:f7:d6:c3:14:4f:0a:dc:b4:46: 9b:2b:83:57:83:34:a2:c1:b9:ba:51:e1:be:a0:40:5c:bb:75: 0d:52:13:2d:bf:6f:bb:0a:a4:ca:2c:c8:e9:40:17:f3:73:f3: 68:1a:14:5c:e2:f6:75:fa:f8:6c:21:e8:6d:2f:52:d5:44:b5: dc:42:20:76:1b:08:17:96:59:12:7e:21:ae:2c:39:36:d9:f1: 99:e6:a4:9c:de:7a:4d:c4:2a:0e:70:4c:b8:76:96:42:cc:e5: 7e:c8:77:d9:76:96:fd:75:70:87:56:65:8b:06:bf:97:63:11: 86:8e:6f:7b:6b:62:67:a1:23:10:be:7a:66:61:5c:b5:db:00: cf:3b:2c:b6:56:72:37:c4:cf:24:ba:cd:60:7f:c1:3c:9b:c0: a6:71:1e:bf -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUcNRkgiNUml2LWVcGv2B4PU1kyk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NDJaFw0yNzAxMDUxOTMyNDJaMDMxMTAvBgNV BAMTKDg2NjBBNDY3MjBDNTFCQ0YyMDBFQzhFMTcxQTEyQUNBNjEyQjMyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9sp4yRTjoldtoNczCY1tEQtM CZFXGiVZuKAPwdRWaKNr8NrusDgrlFVp+1H1wEouN4POFBO2Rs6kXUbCu/16kn9j M/ufC/ZS7AvQVsqp1WnhG/GMf27Pl3DINa8IZDJgIrp7r+DTGvOU6j41EWm9zUl/ +2KKpfpu9xx/uZksLaWoDlZbWlTGA60YSSdDUYJND+5geD6FqdU8lrNxb8cjCEUq GjuRh3mnLS1VdGviYWkD1PPc78ZLktGITM2/HP+AB0sC4S6EqJKDSYvBiJ5scmW8 y6eUhpgHekw2jq4emrd7trCLHIYtVJ1FKpI8up0Osb38xhwg3uUiY0pqTrQ5AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUhmCkZyDFG88gDsjhcaEqymErMjEwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMyMzAy ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHc MA0GCSqGSIb3DQEBCwUAA4IBAQBiru1V1wlCmLN++G+8aniGEO4CP+KKi9pCRHi+ 08E9bDyt4Gb6NquAABVGiogjyiwmUTlonSstUKrYPoEavG7za9LAyzxzBIZqZt4g j4ew88nUmab6lq3guocw7bDbGSyIRnL31sMUTwrctEabK4NXgzSiwbm6UeG+oEBc u3UNUhMtv2+7CqTKLMjpQBfzc/NoGhRc4vZ1+vhsIehtL1LVRLXcQiB2GwgXllkS fiGuLDk22fGZ5qSc3npNxCoOcEy4dpZCzOV+yHfZdpb9dXCHVmWLBr+XYxGGjm97 a2JnoSMQvnpmYVy12wDPOyy2VnI3xM8kus1gf8E8m8CmcR6/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:29:18 2026 by rpki-client