This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa File: 34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa (raw, json) Hash identifier: Wc6QZnIEsEvKOcH1eRt+OYJlvL/DMrEN27Kg3GB7A2k= Subject key identifier: 60:EA:1F:AF:71:25:88:C3:38:28:FF:53:A6:07:72:42:CD:D8:F3:EA Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 23F3A4CC497E7862EC3DBF0578844DD93653C78E Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa Signing time: Tue 06 Jan 2026 20:55:49 +0000 ROA not before: Tue 06 Jan 2026 20:50:49 +0000 ROA not after: Tue 05 Jan 2027 20:55:49 +0000 asID: 266706 IP address blocks: 45.229.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 18:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f3:a4:cc:49:7e:78:62:ec:3d:bf:05:78:84:4d:d9:36:53:c7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jan 6 20:50:49 2026 GMT Not After : Jan 5 20:55:49 2027 GMT Subject: CN=60EA1FAF712588C33828FF53A6077242CDD8F3EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:03:79:4b:b6:e8:e8:7c:a1:63:79:41:87: c3:04:b3:1e:b3:da:9e:c7:7f:b4:fa:55:3b:db:bb: b4:21:ad:39:a3:36:75:fe:c5:e8:27:3b:c7:7e:24: c5:41:f1:11:29:a8:38:0b:34:d1:b9:0c:d7:4b:9b: 48:62:a5:ee:1c:b2:7d:8b:8e:1d:0b:b7:58:ef:59: 32:53:cc:81:2e:ce:07:f7:e9:e5:4f:5a:96:33:98: 2b:fe:a6:98:72:cb:85:73:9b:5a:b2:9a:b2:1a:6f: 57:b5:71:30:c3:3b:a3:ab:8c:42:43:c8:6e:45:93: 57:e0:0d:07:1c:09:3f:19:26:c5:7d:7a:c3:f5:e2: 09:85:65:cd:d9:70:0f:01:66:cf:87:59:40:20:12: c7:bb:bf:04:58:cf:a3:1e:6b:12:06:12:63:9d:92: c3:a6:cc:c6:98:1b:cb:4a:d6:cb:33:ea:9b:f7:d7: 40:5d:9d:05:3f:da:ea:a4:e5:64:dd:2f:55:39:4f: 7a:4d:41:16:9a:df:2a:e3:e1:6d:ab:e7:a4:e0:f0: 3b:5e:b9:42:2d:99:56:42:c6:38:c2:0e:3e:99:4a: 53:8b:3e:2e:5a:66:06:96:90:a4:8e:cd:d1:dc:08: bb:5a:64:97:c5:7b:89:26:71:0c:81:0e:d3:01:9c: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:1F:AF:71:25:88:C3:38:28:FF:53:A6:07:72:42:CD:D8:F3:EA X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32322d3232203d3e20323636373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.188.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:21:6e:9a:12:f2:58:64:b7:31:34:90:e3:de:c4:3a:6c:92: 71:99:e3:33:41:0f:c5:11:3f:1a:ce:2b:a7:a5:61:a6:19:17: 6f:22:bf:3c:68:6f:69:fd:76:03:76:4a:47:e7:40:c6:3d:24: 68:84:11:04:60:54:59:d6:25:d8:b2:fb:82:de:94:8d:93:86: b7:46:e9:a3:c1:07:7c:01:08:96:7d:b8:f4:05:d7:16:2f:96: b2:ae:ec:67:be:da:3c:0f:de:74:db:a4:23:da:15:69:83:95: 42:88:c4:cb:1e:ce:c0:00:0f:f1:85:6d:a7:4e:96:f9:14:dd: 32:5e:3b:19:ae:20:fc:4c:a0:e1:e3:78:81:85:27:04:da:0e: 61:37:22:b9:24:c5:5a:0b:bf:e6:7a:d7:4f:b3:ee:40:54:4c: bb:9a:d8:df:2b:d2:7c:c7:45:6a:5b:51:65:c0:51:8f:41:fc: 21:a1:d5:c4:2d:bd:9d:5b:dc:c7:be:ff:91:e5:7a:13:ac:f7: 88:eb:77:46:36:c8:df:17:88:cc:b6:49:7f:cd:7a:6c:1b:77: 4c:c2:65:09:e7:af:8c:d6:c1:b8:47:a6:3f:e8:5c:1a:94:a3: 67:ef:c2:f2:04:90:cd:2a:1b:4f:40:f6:dd:36:5c:29:16:08: 82:02:85:e5 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUI/OkzEl+eGLsPb8FeIRN2TZTx44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjAxMDYyMDUwNDlaFw0yNzAxMDUyMDU1NDlaMDMxMTAvBgNV BAMTKDYwRUExRkFGNzEyNTg4QzMzODI4RkY1M0E2MDc3MjQyQ0REOEYzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOLQN5S7bo6HyhY3lBh8MEsx6z 2p7Hf7T6VTvbu7QhrTmjNnX+xegnO8d+JMVB8REpqDgLNNG5DNdLm0hipe4csn2L jh0Lt1jvWTJTzIEuzgf36eVPWpYzmCv+pphyy4Vzm1qymrIab1e1cTDDO6OrjEJD yG5Fk1fgDQccCT8ZJsV9esP14gmFZc3ZcA8BZs+HWUAgEse7vwRYz6MeaxIGEmOd ksOmzMaYG8tK1ssz6pv310BdnQU/2uqk5WTdL1U5T3pNQRaa3yrj4W2r56Tg8Dte uUItmVZCxjjCDj6ZSlOLPi5aZgaWkKSOzdHcCLtaZJfFe4kmcQyBDtMBnD2NAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUYOofr3EliMM4KP9TpgdyQs3Y8+owHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzM0MzUyZTMyMzIzOTJlMzEzODM4MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzczMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeW8 MA0GCSqGSIb3DQEBCwUAA4IBAQAuIW6aEvJYZLcxNJDj3sQ6bJJxmeMzQQ/FET8a ziunpWGmGRdvIr88aG9p/XYDdkpH50DGPSRohBEEYFRZ1iXYsvuC3pSNk4a3Rumj wQd8AQiWfbj0BdcWL5ayruxnvto8D95026Qj2hVpg5VCiMTLHs7AAA/xhW2nTpb5 FN0yXjsZriD8TKDh43iBhScE2g5hNyK5JMVaC7/metdPs+5AVEy7mtjfK9J8x0Vq W1FlwFGPQfwhodXELb2dW9zHvv+R5XoTrPeI63dGNsjfF4jMtkl/zXpsG3dMwmUJ 56+M1sG4R6Y/6FwalKNn78LyBJDNKhtPQPbdNlwpFgiCAoXl -----END CERTIFICATE-----Generated at Sun Jan 25 11:35:47 2026 by rpki-client