This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa File: 34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (raw, json) Hash identifier: gbOdkpiAR2Z3r9HcBmFRW3IoR96UR3+NGq90ZsMBAQM= Subject key identifier: C9:67:D8:29:B0:05:69:16:65:B4:FD:1C:48:22:85:36:06:08:E5:5F Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Certificate serial: 18CEE958E1A367B9F22832647274ECE727A8EAEA Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa Signing time: Tue 06 Jan 2026 20:55:50 +0000 ROA not before: Tue 06 Jan 2026 20:50:50 +0000 ROA not after: Tue 05 Jan 2027 20:55:50 +0000 asID: 266706 IP address blocks: 45.229.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 18:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:e9:58:e1:a3:67:b9:f2:28:32:64:72:74:ec:e7:27:a8:ea:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8 Validity Not Before: Jan 6 20:50:50 2026 GMT Not After : Jan 5 20:55:50 2027 GMT Subject: CN=C967D829B005691665B4FD1C482285360608E55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:dc:df:d7:73:f9:05:15:a2:fa:e3:c8:a8: 2d:c8:a4:d1:53:35:95:11:1b:51:23:4d:84:80:b4: 5e:e2:c9:0a:64:66:61:2c:a9:87:1b:d2:2c:a5:39: d5:c0:8a:5d:03:fc:c1:ce:24:21:d1:4f:5e:4a:7f: c2:34:49:97:c8:27:8c:f8:22:b2:66:9d:31:8f:c7: d7:61:b1:51:37:16:67:d1:97:8a:19:93:f6:af:b9: 33:64:a9:c9:b9:34:d7:da:af:0a:7a:28:92:8b:8d: 35:aa:db:d8:4d:2c:32:75:dd:a7:d8:d7:16:32:a5: 07:24:e1:98:01:d9:b3:bd:f5:15:ae:e2:8a:f3:ff: 71:0d:b0:31:b5:77:ff:53:8b:16:84:b5:9a:d9:19: 0a:09:34:21:38:da:5e:47:2c:a5:66:31:07:95:41: e7:b2:58:8b:5a:2c:b9:16:3a:2a:e1:7c:53:fd:b2: 6d:c9:2b:e4:f3:50:1d:60:16:07:72:52:4d:95:47: ca:dd:f5:d7:77:b8:f3:34:06:8e:5b:3c:b6:7a:74: a0:ec:6a:19:8c:23:46:ac:11:9e:5e:7e:8a:3f:68: ee:6e:86:65:fc:fc:1b:a0:e5:33:0c:cf:bc:c0:71: 11:29:a6:7a:08:d5:34:9c:ae:86:5b:27:03:7e:f8: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:D8:29:B0:05:69:16:65:B4:FD:1C:48:22:85:36:06:08:E5:5F X509v3 Authority Key Identifier: keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.190.0/24 Signature Algorithm: sha256WithRSAEncryption ab:bf:ac:33:2a:d6:b3:05:a3:f8:f6:4c:b1:85:2f:ea:0c:6d: 8b:9d:08:30:e3:10:6b:66:57:97:85:49:5b:6f:c8:d1:06:4f: 76:61:4f:88:4b:08:56:3f:80:47:35:fc:75:18:e5:8f:26:14: 0e:ce:3e:61:1f:b2:57:82:92:78:b7:43:d7:9e:a1:e7:d1:a1: 4c:ab:2d:f9:85:91:19:16:ed:5f:d2:1a:4a:ad:c4:19:59:ca: ca:72:e1:ed:0d:f4:16:34:d5:7b:a9:e4:08:b1:28:4e:71:b8: 9f:87:c2:9e:02:f8:21:e8:e6:e3:6a:79:0c:28:fe:a8:a0:ba: 88:a8:ac:4e:51:88:67:61:8d:57:14:a7:b3:e2:6a:43:47:37: d6:7c:46:f5:55:8b:d4:bc:a5:c3:ed:a1:0e:55:15:cf:cf:05: 82:e5:df:80:ee:68:93:99:54:76:9f:10:84:0f:e1:c9:e2:a6: 28:c2:40:19:af:bb:97:b8:03:86:fd:ff:dc:d4:e2:8d:9b:68: aa:aa:88:cf:9f:0e:89:52:d1:d2:a0:e5:2f:ed:d7:27:b0:36: 28:d7:4b:4d:89:1b:0f:cb:87:bf:d2:1e:9e:b5:eb:2f:81:71: 39:6e:59:f7:15:9c:89:bc:63:51:d0:0e:5d:d2:55:11:5e:ec: 20:da:cb:8f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUGM7pWOGjZ7nyKDJkcnTs5yeo6uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz NEE4NTBEODAeFw0yNjAxMDYyMDUwNTBaFw0yNzAxMDUyMDU1NTBaMDMxMTAvBgNV BAMTKEM5NjdEODI5QjAwNTY5MTY2NUI0RkQxQzQ4MjI4NTM2MDYwOEU1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcdzf13P5BRWi+uPIqC3IpNFT NZURG1EjTYSAtF7iyQpkZmEsqYcb0iylOdXAil0D/MHOJCHRT15Kf8I0SZfIJ4z4 IrJmnTGPx9dhsVE3FmfRl4oZk/avuTNkqcm5NNfarwp6KJKLjTWq29hNLDJ13afY 1xYypQck4ZgB2bO99RWu4orz/3ENsDG1d/9TixaEtZrZGQoJNCE42l5HLKVmMQeV QeeyWItaLLkWOirhfFP9sm3JK+TzUB1gFgdyUk2VR8rd9dd3uPM0Bo5bPLZ6dKDs ahmMI0asEZ5efoo/aO5uhmX8/Bug5TMMz7zAcREppnoI1TScroZbJwN++GwJAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUyWfYKbAFaRZltP0cSCKFNgYI5V8wHwYDVR0j BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2 N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzM0MzUyZTMyMzIzOTJlMzEzOTMwMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeW+ MA0GCSqGSIb3DQEBCwUAA4IBAQCrv6wzKtazBaP49kyxhS/qDG2LnQgw4xBrZleX hUlbb8jRBk92YU+ISwhWP4BHNfx1GOWPJhQOzj5hH7JXgpJ4t0PXnqHn0aFMqy35 hZEZFu1f0hpKrcQZWcrKcuHtDfQWNNV7qeQIsShOcbifh8KeAvgh6ObjankMKP6o oLqIqKxOUYhnYY1XFKez4mpDRzfWfEb1VYvUvKXD7aEOVRXPzwWC5d+A7miTmVR2 nxCED+HJ4qYowkAZr7uXuAOG/f/c1OKNm2iqqojPnw6JUtHSoOUv7dcnsDYo10tN iRsPy4e/0h6etesvgXE5bln3FZyJvGNR0A5d0lURXuwg2suP -----END CERTIFICATE-----Generated at Sun Jan 25 11:35:46 2026 by rpki-client