This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa File: 34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (raw, json) Hash identifier: gkzinJ0xbHkh29po9hOY1oe/UJUwDf1i+ETyrKy++vI= Subject key identifier: 1B:8B:85:E9:DB:88:FE:14:7C:65:E7:0F:2B:34:F0:77:06:AA:8E:AE Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 2E59ED60F1E4AE8E137CD5D9FAB2F396AE04FAAD Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa Signing time: Tue 06 Jan 2026 20:55:50 +0000 ROA not before: Tue 06 Jan 2026 20:50:50 +0000 ROA not after: Tue 05 Jan 2027 20:55:50 +0000 asID: 266706 IP address blocks: 45.229.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 18:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:59:ed:60:f1:e4:ae:8e:13:7c:d5:d9:fa:b2:f3:96:ae:04:fa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jan 6 20:50:50 2026 GMT Not After : Jan 5 20:55:50 2027 GMT Subject: CN=1B8B85E9DB88FE147C65E70F2B34F07706AA8EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:ab:1e:c3:29:3c:45:0e:0c:db:67:38:c3: 94:8d:6f:53:dc:bd:65:63:91:3c:41:b0:23:4b:a8: 04:4f:0d:9b:9c:ef:61:35:e7:ce:8e:86:b8:28:32: 17:ff:7f:bd:56:22:e0:38:27:98:93:ce:8f:72:0e: 9d:fb:43:89:bc:b3:91:76:16:62:ee:b7:76:b4:cd: c2:48:d7:db:4e:0d:55:52:13:da:67:ab:86:32:1e: 71:6e:1f:d7:78:7f:8c:d5:d2:bf:bb:c2:ca:c9:34: 39:7a:15:2e:eb:2a:ed:e3:63:88:ee:3c:19:7f:2f: 03:ee:da:0e:bf:f0:cc:bd:db:ef:cb:59:a5:99:95: 7d:2d:91:cd:de:e0:0f:e7:c7:d7:72:d9:e1:e0:95: 05:74:78:ed:79:bd:2f:14:8f:31:3f:72:5a:ad:03: 6e:30:6f:8e:63:e1:63:83:85:fc:60:ef:21:a2:4b: 84:2c:64:9d:48:ef:db:47:f6:68:c4:72:f4:e7:84: c0:fe:96:a0:8f:b0:a0:d9:1b:ee:fb:87:2c:9c:69: 7a:d3:1e:9e:2b:55:af:f1:30:ed:d3:72:da:ca:74: d9:a5:0e:2b:dc:31:eb:68:9d:7e:65:c7:18:98:85: 37:48:ce:42:bf:73:29:04:f5:41:4d:70:45:d2:9b: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8B:85:E9:DB:88:FE:14:7C:65:E7:0F:2B:34:F0:77:06:AA:8E:AE X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.188.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:8c:31:ed:ef:8f:98:84:de:2a:46:ca:ef:62:f9:ca:1e:b7: 9b:01:a7:18:b6:98:bc:c6:12:3e:77:09:ec:53:b6:25:86:0b: 0d:c3:95:70:f4:1c:38:2c:bc:e4:f8:8c:f8:fa:4f:24:d2:7d: a2:94:7c:f2:74:d7:61:a5:ef:bf:a1:22:57:25:bb:b2:b6:1f: 4a:4e:89:be:f1:80:55:f4:8c:e5:b6:b1:49:cd:20:38:bc:7b: 5b:fa:c4:d1:48:b2:84:d1:87:bc:a3:7d:de:19:10:ce:66:b6: f9:27:d3:ce:f6:a4:b2:9d:03:dc:99:0e:cc:67:96:e9:9a:d7: c9:4a:bf:d7:14:e0:99:2b:a9:4c:b5:d9:a3:a3:2a:5e:b3:f3: 3e:f6:d4:dd:32:fa:b1:66:f8:48:38:7b:40:fe:e1:cc:90:09: 11:11:4b:1d:ad:b8:99:26:17:dc:8a:21:60:b1:a5:e4:a7:2c: 3e:c5:df:d6:83:9a:03:f9:ad:2b:a1:3c:51:0e:66:2c:3b:f9: 2a:21:e5:64:24:5b:62:1c:ec:cf:15:6d:f8:78:82:6b:65:c6: ff:13:62:be:2d:e0:b4:1f:2d:c0:b3:61:3c:91:59:e3:d0:bc: e2:39:10:f2:a8:bd:0b:24:26:a4:f0:fb:92:d9:8f:28:8f:19: 91:57:54:92 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIULlntYPHkro4TfNXZ+rLzlq4E+q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjAxMDYyMDUwNTBaFw0yNzAxMDUyMDU1NTBaMDMxMTAvBgNV BAMTKDFCOEI4NUU5REI4OEZFMTQ3QzY1RTcwRjJCMzRGMDc3MDZBQThFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lasewyk8RQ4M22c4w5SNb1Pc vWVjkTxBsCNLqARPDZuc72E1586OhrgoMhf/f71WIuA4J5iTzo9yDp37Q4m8s5F2 FmLut3a0zcJI19tODVVSE9pnq4YyHnFuH9d4f4zV0r+7wsrJNDl6FS7rKu3jY4ju PBl/LwPu2g6/8My92+/LWaWZlX0tkc3e4A/nx9dy2eHglQV0eO15vS8UjzE/clqt A24wb45j4WODhfxg7yGiS4QsZJ1I79tH9mjEcvTnhMD+lqCPsKDZG+77hyycaXrT Hp4rVa/xMO3TctrKdNmlDivcMetonX5lxxiYhTdIzkK/cykE9UFNcEXSm+u1AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUG4uF6duI/hR8ZecPKzTwdwaqjq4wHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzM0MzUyZTMyMzIzOTJlMzEzODM4MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeW8 MA0GCSqGSIb3DQEBCwUAA4IBAQB6jDHt74+YhN4qRsrvYvnKHrebAacYtpi8xhI+ dwnsU7YlhgsNw5Vw9Bw4LLzk+Iz4+k8k0n2ilHzydNdhpe+/oSJXJbuyth9KTom+ 8YBV9IzltrFJzSA4vHtb+sTRSLKE0Ye8o33eGRDOZrb5J9PO9qSynQPcmQ7MZ5bp mtfJSr/XFOCZK6lMtdmjoypes/M+9tTdMvqxZvhIOHtA/uHMkAkREUsdrbiZJhfc iiFgsaXkpyw+xd/Wg5oD+a0roTxRDmYsO/kqIeVkJFtiHOzPFW34eIJrZcb/E2K+ LeC0Hy3As2E8kVnj0LziORDyqL0LJCak8PuS2Y8ojxmRV1SS -----END CERTIFICATE-----Generated at Sun Jan 25 11:35:44 2026 by rpki-client