This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa File: 3133382e39392e3233362e302f32322d3234203d3e203532343731.roa (raw, json) Hash identifier: Bei+7OvV+aIr+9UGyuK0pLGT4Nc5D81ZvzxQ5CzaCn8= Subject key identifier: CA:86:01:2F:F4:B4:39:44:9E:CB:D2:8B:A5:67:80:3A:0F:D3:8F:99 Certificate issuer: /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC Certificate serial: 18CD9167CC575239634EFEFEB6C07AD4F0AA01E8 Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa Signing time: Tue 06 Jan 2026 19:13:30 +0000 ROA not before: Tue 06 Jan 2026 19:08:30 +0000 ROA not after: Tue 05 Jan 2027 19:13:30 +0000 asID: 52471 IP address blocks: 138.99.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:91:67:cc:57:52:39:63:4e:fe:fe:b6:c0:7a:d4:f0:aa:01:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC Validity Not Before: Jan 6 19:08:30 2026 GMT Not After : Jan 5 19:13:30 2027 GMT Subject: CN=CA86012FF4B439449ECBD28BA567803A0FD38F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e4:6f:ee:29:aa:a4:9c:9f:f5:03:60:6d:1a: 16:fb:e6:a4:8b:de:69:69:7c:a5:60:52:58:18:ec: 73:55:35:83:c2:89:23:50:98:97:bb:01:84:1e:0f: b2:c3:e8:5f:21:cb:32:e1:f4:1a:7d:89:d9:78:7b: c2:66:c6:f0:65:c1:ca:da:2f:6b:1b:a5:96:3d:58: cc:fc:b4:4c:b8:8f:52:71:26:ff:77:39:d9:08:48: e4:9c:a7:37:40:f9:e3:e3:47:f6:2d:c8:84:3b:ed: c9:c8:18:c3:2c:8e:3c:06:e5:4c:33:dd:a4:f2:5f: fa:49:6b:b8:28:91:5a:f1:f9:4b:94:78:02:0e:72: 7d:84:80:c5:29:0a:41:e1:4e:c1:58:50:aa:ca:d0: 3c:e8:2d:f0:d3:69:d6:9a:80:fd:91:67:1b:b3:2b: b1:04:82:f1:a9:27:80:18:8a:db:5a:98:9f:76:92: ab:99:47:32:c8:1d:25:0c:61:6e:c6:34:7a:4d:c7: b1:13:89:03:96:cc:2e:72:eb:1c:b9:61:89:d1:76: 1b:f1:af:32:6e:a1:ac:2d:f2:59:9d:16:a5:de:fb: 94:90:ea:b0:59:48:22:00:5c:f9:2f:08:02:fb:98: 11:95:cb:2f:1b:67:ec:5c:01:a8:ea:d8:b3:5e:13: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:01:2F:F4:B4:39:44:9E:CB:D2:8B:A5:67:80:3A:0F:D3:8F:99 X509v3 Authority Key Identifier: keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.236.0/22 Signature Algorithm: sha256WithRSAEncryption 16:96:4f:75:83:a3:1e:13:60:04:63:80:3e:66:be:17:59:0c: a2:a0:26:a5:ed:3d:c7:b6:0f:6d:f5:0b:c6:54:b0:1f:0b:ee: 0a:cd:50:19:68:85:e6:a7:78:d7:f1:11:cd:90:29:06:57:fe: b4:47:86:4d:be:cb:e0:90:0f:8b:85:eb:ec:97:1a:e8:2f:8b: af:0e:49:69:9d:ea:02:8c:ec:22:db:57:51:e5:4e:43:d8:0a: 76:16:b3:6f:65:f8:42:66:00:3e:e2:72:9a:08:ba:b6:57:eb: ce:dd:79:a1:66:63:e4:f9:04:b1:c4:11:f1:0b:63:dc:aa:e8: c1:25:5d:98:cc:fb:de:a1:f6:88:bd:99:43:d0:9b:ab:e4:71: c4:fb:f2:a2:ab:ad:db:93:48:aa:9e:1d:12:21:24:bd:66:ad: 9e:86:70:4f:dd:37:03:bc:de:96:c4:f2:a1:93:32:a4:8f:6d: 5a:c3:a1:90:41:ca:6f:64:d7:f0:1a:bb:7b:d4:0e:3d:41:dc: 5c:f6:f8:17:fa:1f:b2:de:f4:76:e7:14:bb:87:9a:72:ae:de: d9:d7:f1:c6:a9:4c:02:97:53:5f:6b:39:c9:46:05:1a:a0:ae: 60:31:d2:6d:5a:c8:45:77:d9:1a:3b:35:3f:56:5c:8d:97:c6: fa:db:0a:34 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUGM2RZ8xXUjljTv7+tsB61PCqAegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5RDk2NjYxRUM4NTYyN0ExRjQ5OTRFODkzRjI2RkZD NDA4QUZBQzAeFw0yNjAxMDYxOTA4MzBaFw0yNzAxMDUxOTEzMzBaMDMxMTAvBgNV BAMTKENBODYwMTJGRjRCNDM5NDQ5RUNCRDI4QkE1Njc4MDNBMEZEMzhGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm5G/uKaqknJ/1A2BtGhb75qSL 3mlpfKVgUlgY7HNVNYPCiSNQmJe7AYQeD7LD6F8hyzLh9Bp9idl4e8JmxvBlwcra L2sbpZY9WMz8tEy4j1JxJv93OdkISOScpzdA+ePjR/YtyIQ77cnIGMMsjjwG5Uwz 3aTyX/pJa7gokVrx+UuUeAIOcn2EgMUpCkHhTsFYUKrK0DzoLfDTadaagP2RZxuz K7EEgvGpJ4AYittamJ92kquZRzLIHSUMYW7GNHpNx7ETiQOWzC5y6xy5YYnRdhvx rzJuoawt8lmdFqXe+5SQ6rBZSCIAXPkvCAL7mBGVyy8bZ+xcAajq2LNeE9ahAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUyoYBL/S0OUSey9KLpWeAOg/Tj5kwHwYDVR0j BBgwFoAUW52WZh7IVieh9JlOiT8m/8QIr6wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NTAzMUZBQzc2OTE0MzUyQzk1MjgwMzBGOTgzRjA3ODE2 OTY0QjIyRjZENjQ5NkIzMENCQjRFNjM2OTBGODY5LzAvNUI5RDk2NjYxRUM4NTYy N0ExRjQ5OTRFODkzRjI2RkZDNDA4QUZBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjlEOTY2NjFFQzg1NjI3QTFG NDk5NEU4OTNGMjZGRkM0MDhBRkFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzUwMzFGQUM3NjkxNDM1MkM5NTI4MDMwRjk4M0YwNzgxNjk2NEIyMkY2 RDY0OTZCMzBDQkI0RTYzNjkwRjg2OS8wLzMxMzMzODJlMzkzOTJlMzIzMzM2MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzczMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopj7DAN BgkqhkiG9w0BAQsFAAOCAQEAFpZPdYOjHhNgBGOAPma+F1kMoqAmpe09x7YPbfUL xlSwHwvuCs1QGWiF5qd41/ERzZApBlf+tEeGTb7L4JAPi4Xr7Jca6C+Lrw5JaZ3q AozsIttXUeVOQ9gKdhazb2X4QmYAPuJymgi6tlfrzt15oWZj5PkEscQR8Qtj3Kro wSVdmMz73qH2iL2ZQ9Cbq+RxxPvyoqut25NIqp4dEiEkvWatnoZwT903A7zelsTy oZMypI9tWsOhkEHKb2TX8Bq7e9QOPUHcXPb4F/ofst70ducUu4eacq7e2dfxxqlM ApdTX2s5yUYFGqCuYDHSbVrIRXfZGjs1P1ZcjZfG+tsKNA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:30:14 2026 by rpki-client