This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa File: 3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: anSFrFPRuCF4P/Ds9ZDtnelfCcZ9NfRI9Rm0bGV6f4Y= Subject key identifier: 0E:1B:E5:F4:2A:E7:89:8A:A6:6B:9A:15:7D:F6:F9:5C:01:04:C3:B0 Certificate issuer: /CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF Certificate serial: 33D4BA37CDDAB7FEE64B0A8844FF6BA84CFD03E0 Authority key identifier: 66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa Signing time: Tue 06 Jan 2026 20:56:53 +0000 ROA not before: Tue 06 Jan 2026 20:51:53 +0000 ROA not after: Tue 05 Jan 2027 20:56:53 +0000 asID: 201341 IP address blocks: 138.99.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d4:ba:37:cd:da:b7:fe:e6:4b:0a:88:44:ff:6b:a8:4c:fd:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF Validity Not Before: Jan 6 20:51:53 2026 GMT Not After : Jan 5 20:56:53 2027 GMT Subject: CN=0E1BE5F42AE7898AA66B9A157DF6F95C0104C3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:04:f4:fb:dd:6d:34:ab:dd:20:50:ed:2c: 08:0c:b1:d5:b3:67:d4:d9:a6:c7:ac:5e:e8:ab:ee: eb:23:e6:e0:ca:f6:1a:50:dd:51:b9:01:8e:f4:de: d7:8b:64:f8:7d:10:34:4c:74:1a:60:f7:2f:7b:16: 15:d3:5b:f7:cd:24:4a:cf:9c:c8:d6:a1:0c:0f:2d: 7d:68:4f:f9:e8:c7:77:62:b1:c7:a3:ec:24:b6:6e: ab:03:01:85:c0:55:9e:41:13:c5:a5:b2:d2:0e:28: 3c:aa:ba:57:bc:66:af:c3:db:62:d7:e1:25:35:1e: 67:ed:39:60:7a:ee:f2:1f:cc:fa:83:b9:9f:27:52: b0:3d:f2:83:36:09:af:57:93:36:34:9f:c6:f4:d1: 33:97:63:7f:ec:fa:fe:d2:d4:25:85:0c:c3:e6:8c: d5:7a:ca:b5:23:43:b4:ed:0e:a9:e8:ff:dc:94:d6: 3f:98:c2:cd:fd:21:bc:a8:e6:41:54:ec:d8:51:95: a9:16:a2:3c:b8:d8:8c:7e:4f:c7:2b:60:53:20:52: 96:84:ff:e8:e2:28:e4:a7:22:fe:be:a9:f8:a8:1e: 58:4e:7b:9e:99:58:74:b8:54:19:49:c9:2a:71:7e: 10:d7:81:08:e1:ee:51:8f:aa:42:36:f6:ff:9e:53: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1B:E5:F4:2A:E7:89:8A:A6:6B:9A:15:7D:F6:F9:5C:01:04:C3:B0 X509v3 Authority Key Identifier: keyid:66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.120.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:8b:84:89:89:a6:69:64:af:01:27:97:be:16:b1:7a:e3:d8: 3e:27:10:a2:4e:b2:d3:02:92:7e:41:33:fd:c4:af:39:bb:7c: dc:89:a3:78:de:26:51:57:4f:37:63:60:97:e7:32:04:97:71: 43:74:74:22:1e:e6:78:1d:f7:0a:77:04:b3:1d:6f:a5:7a:14: 02:c7:ab:4c:d1:37:17:fa:12:bb:5e:a9:4a:bc:c0:d5:c9:de: 77:f2:63:a7:84:34:60:a3:15:31:0f:2b:59:83:7f:86:15:6c: cc:80:81:bc:4e:1b:6b:95:d9:d6:b4:62:53:7d:eb:04:5a:86: 85:77:03:41:a3:29:02:d2:53:6a:8b:ef:e6:74:97:12:71:42: a2:71:6a:b7:f7:bc:29:d0:98:c8:7b:33:98:f8:22:23:3b:26: d5:91:78:08:c3:ee:6f:cd:c1:e5:a2:6f:f2:5f:d4:f5:7d:48: 0c:7b:98:0b:9b:c3:27:47:a7:bb:eb:0c:9b:e5:0c:12:c7:11: c2:53:e8:1a:36:ab:13:a4:03:64:e8:4e:af:3e:e1:78:54:4b: 14:a3:05:69:7f:67:e6:ed:7d:66:bb:93:6e:ad:e7:2c:1b:d4: 86:d8:79:53:fd:a8:22:58:f1:a8:92:6d:b2:b9:db:56:a2:1c: 3b:ce:c8:9a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUM9S6N83at/7mSwqIRP9rqEz9A+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY5MEQzQ0E3QUFCNDRBQTE5NTY4Q0EyQ0ZGOEFDNkVF NzBFRENCRjAeFw0yNjAxMDYyMDUxNTNaFw0yNzAxMDUyMDU2NTNaMDMxMTAvBgNV BAMTKDBFMUJFNUY0MkFFNzg5OEFBNjZCOUExNTdERjZGOTVDMDEwNEMzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78AT0+91tNKvdIFDtLAgMsdWz Z9TZpsesXuir7usj5uDK9hpQ3VG5AY703teLZPh9EDRMdBpg9y97FhXTW/fNJErP nMjWoQwPLX1oT/nox3discej7CS2bqsDAYXAVZ5BE8WlstIOKDyqule8Zq/D22LX 4SU1HmftOWB67vIfzPqDuZ8nUrA98oM2Ca9XkzY0n8b00TOXY3/s+v7S1CWFDMPm jNV6yrUjQ7TtDqno/9yU1j+Yws39Ibyo5kFU7NhRlakWojy42Ix+T8crYFMgUpaE /+jiKOSnIv6+qfioHlhOe56ZWHS4VBlJySpxfhDXgQjh7lGPqkI29v+eU3efAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUDhvl9CrniYqma5oVffb5XAEEw7AwHwYDVR0j BBgwFoAUZpDTynqrRKoZVoyiz/isbucO3L8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82REVERkMzQURBODY4Q0NDQzZBMjVERDYxMzFGQ0IyMDM3 RjExQTkxNTQ4RDA5NUYyNkJENkM4RjExQjQ3MTExLzAvNjY5MEQzQ0E3QUFCNDRB QTE5NTY4Q0EyQ0ZGOEFDNkVFNzBFRENCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjkwRDNDQTdBQUI0NEFBMTk1 NjhDQTJDRkY4QUM2RUU3MEVEQ0JGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkRFREZDM0FEQTg2OENDQ0M2QTI1REQ2MTMxRkNCMjAzN0YxMUE5MTU0 OEQwOTVGMjZCRDZDOEYxMUI0NzExMS8wLzMxMzMzODJlMzkzOTJlMzEzMjMwMmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCimN4 MA0GCSqGSIb3DQEBCwUAA4IBAQAqi4SJiaZpZK8BJ5e+FrF649g+JxCiTrLTApJ+ QTP9xK85u3zciaN43iZRV083Y2CX5zIEl3FDdHQiHuZ4HfcKdwSzHW+lehQCx6tM 0TcX+hK7XqlKvMDVyd538mOnhDRgoxUxDytZg3+GFWzMgIG8ThtrldnWtGJTfesE WoaFdwNBoykC0lNqi+/mdJcScUKicWq397wp0JjIezOY+CIjOybVkXgIw+5vzcHl om/yX9T1fUgMe5gLm8MnR6e76wyb5QwSxxHCU+gaNqsTpANk6E6vPuF4VEsUowVp f2fm7X1mu5NurecsG9SG2HlT/agiWPGokm2yudtWohw7zsia -----END CERTIFICATE-----Generated at Sun Jan 25 16:50:12 2026 by rpki-client