This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa File: 3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa (raw, json) Hash identifier: Nkawq2ybqNp1MFvu4kx7/+T1T/Gt/SQM3hkGESi75qY= Subject key identifier: FA:38:53:6E:E9:29:4B:99:15:8A:48:87:40:50:A8:39:DF:AA:C9:64 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 0C58FA4B8585271B608114BBD1FED1F5AB01A0ED Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:47 +0000 ROA not before: Tue 06 Jan 2026 19:27:47 +0000 ROA not after: Tue 05 Jan 2027 19:32:47 +0000 asID: 22122 IP address blocks: 148.209.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:58:fa:4b:85:85:27:1b:60:81:14:bb:d1:fe:d1:f5:ab:01:a0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:47 2026 GMT Not After : Jan 5 19:32:47 2027 GMT Subject: CN=FA38536EE9294B99158A48874050A839DFAAC964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:48:8a:cf:b9:34:64:ac:ff:63:38:5f:57: d8:74:84:af:13:95:be:c8:ba:0f:1a:61:38:32:5b: f2:c9:67:fd:ef:8b:e4:4d:2f:65:24:eb:08:93:21: 54:35:97:78:9b:8f:b3:4c:4c:02:62:97:14:37:21: 7a:a1:a7:78:8a:e7:30:fd:87:c3:ea:a5:c4:ba:21: 57:ae:11:ff:45:71:d0:be:f1:86:fd:ed:bc:00:a2: c3:45:e4:97:63:55:69:4a:64:57:5f:37:72:09:0a: b4:0f:ec:c8:12:89:f0:42:12:94:1a:46:e6:1b:9e: 32:c8:c3:0b:b6:15:72:8e:3e:94:f4:6f:87:c4:9f: 5d:5a:c7:d2:1b:8a:05:61:ee:aa:86:96:a9:7b:6d: 23:19:84:1f:03:a9:2f:a2:6c:a0:ca:44:cc:55:0e: 81:67:35:00:d9:70:13:49:93:b0:57:3e:5b:16:ab: 17:83:ba:fc:51:bf:8e:1f:64:78:ab:69:97:67:6f: fd:ca:af:1c:92:d5:3e:50:cd:f8:ef:44:f0:4c:7f: 8d:db:ec:90:59:e4:30:0d:a2:d9:3e:6f:40:19:fa: 18:01:3f:8b:61:99:de:4b:f1:ee:e1:2e:23:8e:9e: 21:d1:d4:fb:0a:19:cf:2d:e0:bc:72:3f:9d:06:f7: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:53:6E:E9:29:4B:99:15:8A:48:87:40:50:A8:39:DF:AA:C9:64 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.236.0/23 Signature Algorithm: sha256WithRSAEncryption 99:55:32:4b:81:72:89:2d:4f:6d:70:da:38:25:44:74:af:05: e6:0d:9e:9c:be:ad:b7:df:06:ad:b3:74:9b:32:dd:98:fe:12: 35:81:9e:11:10:a0:20:e1:cc:df:ec:d0:86:20:b4:5e:2e:58: a3:d8:5d:70:ac:e5:d8:19:45:c3:e9:c9:ec:bd:bb:06:1d:ef: f7:e0:a6:45:b4:5a:a4:eb:1d:d1:ce:ce:ff:93:5f:a2:ea:7d: 79:20:fd:5a:2e:7d:a2:4c:0c:92:c0:90:c3:0f:10:7c:78:f3: 2d:61:50:a2:7a:92:d6:60:9b:93:d4:42:c0:01:05:e3:53:e6: 13:77:34:ad:f2:25:20:ad:e4:22:50:72:2f:c4:20:50:ba:f6: 5d:96:da:1a:79:54:c0:b1:70:dd:34:e2:bb:ee:ea:63:55:24: 8a:b2:9a:af:b8:f1:d7:b4:7f:99:1e:4c:c2:54:6d:5e:4a:d5: 76:7a:ab:94:30:8d:63:ad:61:53:43:10:80:8a:c9:d8:e4:06: 21:cd:be:fd:ca:85:11:16:98:53:2f:73:e8:4d:8c:ce:0f:0e: 6e:5b:30:4f:1e:61:7c:1a:13:13:25:1a:0c:17:a3:f7:c0:f4: 94:cd:6e:ce:77:31:aa:36:7b:ae:2a:1a:b1:53:0f:db:6e:16: 1a:ad:a8:66 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUDFj6S4WFJxtggRS70f7R9asBoO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NDdaFw0yNzAxMDUxOTMyNDdaMDMxMTAvBgNV BAMTKEZBMzg1MzZFRTkyOTRCOTkxNThBNDg4NzQwNTBBODM5REZBQUM5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCal0iKz7k0ZKz/YzhfV9h0hK8T lb7Iug8aYTgyW/LJZ/3vi+RNL2Uk6wiTIVQ1l3ibj7NMTAJilxQ3IXqhp3iK5zD9 h8PqpcS6IVeuEf9FcdC+8Yb97bwAosNF5JdjVWlKZFdfN3IJCrQP7MgSifBCEpQa RuYbnjLIwwu2FXKOPpT0b4fEn11ax9IbigVh7qqGlql7bSMZhB8DqS+ibKDKRMxV DoFnNQDZcBNJk7BXPlsWqxeDuvxRv44fZHiraZdnb/3KrxyS1T5QzfjvRPBMf43b 7JBZ5DANotk+b0AZ+hgBP4thmd5L8e7hLiOOniHR1PsKGc8t4LxyP50G95uXAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU+jhTbukpS5kVikiHQFCoOd+qyWQwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMzMzYy ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHs MA0GCSqGSIb3DQEBCwUAA4IBAQCZVTJLgXKJLU9tcNo4JUR0rwXmDZ6cvq233wat s3SbMt2Y/hI1gZ4REKAg4czf7NCGILReLlij2F1wrOXYGUXD6cnsvbsGHe/34KZF tFqk6x3Rzs7/k1+i6n15IP1aLn2iTAySwJDDDxB8ePMtYVCiepLWYJuT1ELAAQXj U+YTdzSt8iUgreQiUHIvxCBQuvZdltoaeVTAsXDdNOK77upjVSSKspqvuPHXtH+Z HkzCVG1eStV2equUMI1jrWFTQxCAisnY5AYhzb79yoURFphTL3PoTYzODw5uWzBP HmF8GhMTJRoMF6P3wPSUzW7OdzGqNnuuKhqxUw/bbhYarahm -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:29 2026 by rpki-client