This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa File: 3134382e3230392e38342e302f32322d3232203d3e203232313232.roa (raw, json) Hash identifier: mawUYHB/cQP4pjDs9oQUUJtPzF4w2jQFgofcwBQ8B7I= Subject key identifier: 28:60:8E:49:30:72:73:22:2D:6D:07:DE:A4:7E:74:A1:51:34:15:90 Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA Certificate serial: 4E26E0F4A72359FE2598B575C9E1AC5F4F75282E Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa Signing time: Tue 06 Jan 2026 19:32:37 +0000 ROA not before: Tue 06 Jan 2026 19:27:37 +0000 ROA not after: Tue 05 Jan 2027 19:32:37 +0000 asID: 22122 IP address blocks: 148.209.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:26:e0:f4:a7:23:59:fe:25:98:b5:75:c9:e1:ac:5f:4f:75:28:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA Validity Not Before: Jan 6 19:27:37 2026 GMT Not After : Jan 5 19:32:37 2027 GMT Subject: CN=28608E49307273222D6D07DEA47E74A151341590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e2:ab:0e:ca:ec:7c:50:54:70:02:7f:96:cf: c1:57:eb:4f:03:e4:6b:ba:6c:2b:7b:59:af:4b:16: 83:fb:f0:5a:51:66:70:25:ed:52:b1:84:fe:13:71: cc:c2:e5:e6:a1:76:bd:eb:b9:f0:c2:17:ca:73:69: c0:55:a4:c6:48:6c:f6:65:53:5a:24:12:0b:12:9a: 1c:7a:91:78:c4:59:ba:43:97:b9:e2:73:1d:21:ae: ac:4c:e1:f1:c5:03:53:17:59:99:bd:11:07:e4:73: 03:3f:d9:c5:c9:0d:2e:05:04:f7:d2:4c:e8:97:0a: 26:12:15:d4:2f:94:0f:c4:97:4a:4b:a0:02:4f:cb: f9:ff:9d:40:ff:16:a9:77:3b:96:25:4c:5c:c0:e2: 83:65:fc:73:7f:7f:17:20:3d:e0:fd:48:6b:95:c2: 0f:d8:af:08:48:b1:e7:3c:1b:a5:55:e9:f3:0d:06: 75:71:28:58:24:71:89:c7:bd:b5:f0:46:0a:f7:7d: 13:eb:22:73:2a:45:44:80:68:b3:b0:d9:57:a9:57: 73:c6:34:0a:56:b2:a0:de:c8:99:1a:38:89:6f:80: 0b:4d:fc:3b:1f:77:18:18:50:ec:61:f3:9e:69:61: da:79:98:40:e3:98:cf:70:60:de:c7:c9:1d:f2:d3: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:8E:49:30:72:73:22:2D:6D:07:DE:A4:7E:74:A1:51:34:15:90 X509v3 Authority Key Identifier: keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.209.84.0/22 Signature Algorithm: sha256WithRSAEncryption 68:b5:cd:57:0d:90:26:84:e7:4d:a1:18:c2:a0:ef:52:88:9e: 87:c0:0b:3a:77:83:12:c4:2f:03:fd:df:d0:56:3c:c1:bf:bd: 8d:58:68:81:db:23:75:9b:59:89:89:b9:fe:5c:93:ab:05:a6: d5:ba:9f:20:b4:54:7e:17:5d:a0:b9:4c:95:d8:c7:07:e1:9a: 88:57:05:b7:1f:99:e3:e2:59:e6:ec:db:75:56:55:ef:42:bf: 0a:8a:a5:3f:47:a6:2d:cb:22:6f:59:48:7f:72:88:8e:6f:a8: 6a:6a:34:bb:cd:57:75:98:30:4e:94:ce:0a:f1:ef:dc:5d:16: 75:27:8d:63:2f:72:9f:38:7e:0c:f4:8d:1f:33:43:95:3a:46: 52:af:93:a1:cf:55:48:12:b3:7a:eb:bf:19:44:7e:1a:9b:3f: a5:b0:84:1d:20:41:44:25:5b:95:d3:15:05:a3:28:dc:e0:c9: f0:40:d5:06:fb:65:9b:35:8a:84:69:ae:8c:4f:3e:72:e1:01: f5:31:60:75:73:6e:bb:59:be:06:e2:d0:bb:06:7a:2b:f4:46: 9a:35:94:1e:dd:96:4e:c7:2a:8b:3c:4c:e5:f5:c5:6d:72:97: 55:6f:42:29:bc:db:9e:a0:d1:62:b8:ef:7e:37:42:a9:e6:c2: 5f:bc:1a:9b -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUTibg9KcjWf4lmLV1yeGsX091KC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3 NkQ2N0FGQTAeFw0yNjAxMDYxOTI3MzdaFw0yNzAxMDUxOTMyMzdaMDMxMTAvBgNV BAMTKDI4NjA4RTQ5MzA3MjczMjIyRDZEMDdERUE0N0U3NEExNTEzNDE1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD04qsOyux8UFRwAn+Wz8FX608D 5Gu6bCt7Wa9LFoP78FpRZnAl7VKxhP4TcczC5eahdr3rufDCF8pzacBVpMZIbPZl U1okEgsSmhx6kXjEWbpDl7nicx0hrqxM4fHFA1MXWZm9EQfkcwM/2cXJDS4FBPfS TOiXCiYSFdQvlA/El0pLoAJPy/n/nUD/Fql3O5YlTFzA4oNl/HN/fxcgPeD9SGuV wg/YrwhIsec8G6VV6fMNBnVxKFgkcYnHvbXwRgr3fRPrInMqRUSAaLOw2VepV3PG NApWsqDeyJkaOIlvgAtN/DsfdxgYUOxh855pYdp5mEDjmM9wYN7HyR3y0+yzAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUKGCOSTBycyItbQfepH50oVE0FZAwHwYDVR0j BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5 RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0 MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzODM0MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMjMxMzIzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApTRVDAN BgkqhkiG9w0BAQsFAAOCAQEAaLXNVw2QJoTnTaEYwqDvUoieh8ALOneDEsQvA/3f 0FY8wb+9jVhogdsjdZtZiYm5/lyTqwWm1bqfILRUfhddoLlMldjHB+GaiFcFtx+Z 4+JZ5uzbdVZV70K/CoqlP0emLcsib1lIf3KIjm+oamo0u81XdZgwTpTOCvHv3F0W dSeNYy9ynzh+DPSNHzNDlTpGUq+Toc9VSBKzeuu/GUR+Gps/pbCEHSBBRCVbldMV BaMo3ODJ8EDVBvtlmzWKhGmujE8+cuEB9TFgdXNuu1m+BuLQuwZ6K/RGmjWUHt2W TscqizxM5fXFbXKXVW9CKbzbnqDRYrjvfjdCqebCX7wamw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:29:26 2026 by rpki-client