This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3235322e302f32342d3234203d3e203232313232.roa File: 3134382e3230392e3235322e302f32342d3234203d3e203232313232.roa (raw, json) Hash identifier: z5VUaQBzEzaOdP2GNlO30J8hO01jR9BvFHY0dpR/SWU= Subject key identifier: 15:CE:98:FF:A1:65:63:9D:30:FB:BE:D4:48:4E:A0:1F:BA:C7:4C:34 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 29D27A9DFA6BEC3206858AA08D85F03917E52137 Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3235322e302f32342d3234203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:51 +0000 ROA not before: Tue 06 Jan 2026 19:27:51 +0000 ROA not after: Tue 05 Jan 2027 19:32:51 +0000 asID: 22122 IP address blocks: 148.209.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d2:7a:9d:fa:6b:ec:32:06:85:8a:a0:8d:85:f0:39:17:e5:21:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:51 2026 GMT Not After : Jan 5 19:32:51 2027 GMT Subject: CN=15CE98FFA165639D30FBBED4484EA01FBAC74C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:2c:d8:cf:35:e8:e7:25:36:66:2a:80:99: db:f6:b5:da:db:ef:b8:ba:1b:aa:41:48:88:04:14: 63:0c:ae:71:b9:61:de:d7:a6:22:10:34:95:74:2d: 35:57:8f:0a:de:3e:90:24:bc:44:d3:07:3e:ca:a6: 22:76:a5:2d:71:b0:14:4c:2f:ad:8b:4a:da:3c:73: 1b:c4:25:07:c8:65:27:ff:06:5e:b7:1d:2b:b4:5c: 94:cc:4f:a0:45:e6:b1:f3:d0:49:58:89:81:2e:e4: 15:f7:9c:13:c4:83:ae:7b:7e:3e:e6:7f:a3:d7:f2: 9f:c7:ae:c2:15:04:7b:d2:c3:07:b3:3f:52:74:57: c9:a2:86:be:54:ea:f3:26:62:87:42:b6:4a:b9:ae: 64:9d:2e:6c:96:e5:8c:c3:aa:2e:7d:9f:d0:66:56: f7:d1:02:2b:e1:ec:b3:90:cd:8f:80:81:05:0f:c7: 2e:0b:b3:ff:2d:33:15:6e:81:db:99:d8:7b:46:67: 74:02:8e:24:37:8a:03:6d:00:a9:2e:57:06:41:ee: d9:68:7c:4e:b9:c5:5c:aa:ab:78:73:89:2d:0c:a6: 83:58:8d:3d:52:33:16:20:ad:ea:83:4e:87:8c:68: 05:3d:ce:05:15:9f:77:88:52:1d:8d:69:01:81:af: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:98:FF:A1:65:63:9D:30:FB:BE:D4:48:4E:A0:1F:BA:C7:4C:34 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3235322e302f32342d3234203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.252.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a2:ab:71:5b:3a:aa:36:74:78:2f:c5:e2:bd:8e:24:bf:25: 43:6b:b2:94:d6:1d:8f:a0:56:5c:c7:ce:85:06:de:d3:97:7b: 31:cd:30:8d:ff:bd:cc:94:3f:dc:c7:ef:0c:da:a1:2f:2a:b5: 67:6f:60:d3:f6:46:ff:77:0d:3f:30:6d:28:65:43:aa:a2:04: 7f:33:9a:36:90:e6:48:2a:c9:d6:89:46:78:c2:52:c6:66:e1: 62:e4:58:24:27:cb:50:4a:a6:a5:64:a1:b8:ac:dc:26:fb:3a: e3:50:12:ae:d8:d2:ba:01:cf:a5:df:93:45:ce:8c:cf:9b:bc: 64:17:7f:86:d1:9f:b8:83:61:60:46:d1:c7:a0:bc:c7:11:27: 9c:7e:9e:71:17:e6:1e:2e:fa:6c:88:15:82:de:85:56:bf:64: 20:fb:3f:0e:dc:bb:a5:d5:90:60:5f:5a:c3:a5:7d:8b:c3:56: 16:94:9b:df:96:33:2b:2e:41:b6:72:95:e7:bd:30:72:0d:b2: d2:d5:cd:73:4f:24:2a:ee:13:47:f4:e2:76:2e:82:82:80:34: d5:1e:43:39:6d:1c:99:40:5d:f3:4a:39:0e:60:2f:d3:07:16: 09:6d:81:e0:dd:62:79:3b:17:ef:a5:a9:71:0a:2c:ab:73:f0: 0e:7b:cc:e1 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUKdJ6nfpr7DIGhYqgjYXwORflITcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NTFaFw0yNzAxMDUxOTMyNTFaMDMxMTAvBgNV BAMTKDE1Q0U5OEZGQTE2NTYzOUQzMEZCQkVENDQ4NEVBMDFGQkFDNzRDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nCzYzzXo5yU2ZiqAmdv2tdrb 77i6G6pBSIgEFGMMrnG5Yd7XpiIQNJV0LTVXjwrePpAkvETTBz7KpiJ2pS1xsBRM L62LSto8cxvEJQfIZSf/Bl63HSu0XJTMT6BF5rHz0ElYiYEu5BX3nBPEg657fj7m f6PX8p/HrsIVBHvSwwezP1J0V8mihr5U6vMmYodCtkq5rmSdLmyW5YzDqi59n9Bm VvfRAivh7LOQzY+AgQUPxy4Ls/8tMxVugduZ2HtGZ3QCjiQ3igNtAKkuVwZB7tlo fE65xVyqq3hziS0MpoNYjT1SMxYgreqDToeMaAU9zgUVn3eIUh2NaQGBr6WbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUFc6Y/6FlY50w+77USE6gH7rHTDQwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjM1MzIy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNH8 MA0GCSqGSIb3DQEBCwUAA4IBAQA3oqtxWzqqNnR4L8XivY4kvyVDa7KU1h2PoFZc x86FBt7Tl3sxzTCN/73MlD/cx+8M2qEvKrVnb2DT9kb/dw0/MG0oZUOqogR/M5o2 kOZIKsnWiUZ4wlLGZuFi5FgkJ8tQSqalZKG4rNwm+zrjUBKu2NK6Ac+l35NFzozP m7xkF3+G0Z+4g2FgRtHHoLzHESecfp5xF+YeLvpsiBWC3oVWv2Qg+z8O3Lul1ZBg X1rDpX2Lw1YWlJvfljMrLkG2cpXnvTByDbLS1c1zTyQq7hNH9OJ2LoKCgDTVHkM5 bRyZQF3zSjkOYC/TBxYJbYHg3WJ5OxfvpalxCiyrc/AOe8zh -----END CERTIFICATE-----Generated at Mon Jan 26 06:09:18 2026 by rpki-client