This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238313130.roa File: 3133382e3132312e3134302e302f32322d3234203d3e203238313130.roa (raw, json) Hash identifier: KNrlo6Z1zn6T4Bvcbt/Dz2N/HfioUj/tFtToKqO6aJo= Subject key identifier: 3C:8F:D7:9F:33:E7:CE:0F:37:4C:4E:84:A9:A4:A9:FE:EB:7E:FD:08 Certificate issuer: /CN=858889372446EF678E35E9D349C0785A81B8FBB7 Certificate serial: 4109087C391B86E4078B71042B6990D2590434DB Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238313130.roa Signing time: Wed 19 Nov 2025 16:53:12 +0000 ROA not before: Wed 19 Nov 2025 16:48:12 +0000 ROA not after: Wed 18 Nov 2026 16:53:12 +0000 asID: 28110 IP address blocks: 138.121.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Dec 2025 12:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:08:7c:39:1b:86:e4:07:8b:71:04:2b:69:90:d2:59:04:34:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7 Validity Not Before: Nov 19 16:48:12 2025 GMT Not After : Nov 18 16:53:12 2026 GMT Subject: CN=3C8FD79F33E7CE0F374C4E84A9A4A9FEEB7EFD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:22:74:fa:f8:b8:43:58:8b:1c:22:d8:a5: 5a:f3:1e:ca:51:ab:d9:8c:95:8e:83:da:38:e7:45: 61:47:f7:76:d3:b6:2e:68:19:ba:58:2a:97:5d:e6: 64:49:d0:65:a2:8a:ce:f3:86:ea:ba:5a:98:0e:55: f6:74:8a:aa:ba:b5:5d:c4:51:b8:54:db:be:9e:e0: d0:b8:71:3a:99:93:5d:d5:ea:1b:d0:0a:1b:42:a6: fb:d8:bc:6e:23:5e:02:47:04:77:f6:d2:6a:bf:bb: 8d:8c:8e:ef:90:df:77:5a:09:2f:a0:2c:e5:f9:13: 9d:50:18:2f:9a:7c:06:d7:0b:12:fa:50:2b:45:6d: a4:16:fe:66:7c:6f:d3:63:dc:8f:5e:b5:3e:7c:04: a7:36:57:60:0e:82:52:1e:18:fd:23:53:60:d8:04: f9:c4:77:f9:b4:d9:2a:ec:0f:b3:a8:fd:c6:89:d7: bd:8c:c5:d1:0e:62:a6:0e:a1:1b:81:b1:a5:c3:d7: 20:db:9e:9d:b0:b3:3e:d7:a3:aa:b8:ac:69:9f:44: 17:4e:f2:d3:9d:5b:55:bd:0f:cb:43:8e:f3:7b:96: 28:a3:a2:70:1e:cb:c7:f6:59:d2:af:25:11:9f:dd: 8d:9d:ca:89:9b:e0:60:41:13:fe:5f:74:cd:d8:5e: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:D7:9F:33:E7:CE:0F:37:4C:4E:84:A9:A4:A9:FE:EB:7E:FD:08 X509v3 Authority Key Identifier: keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:84:59:2a:09:a5:99:c3:ed:77:a5:37:b8:84:1b:be:c0:62: fa:b0:ca:16:56:00:6b:f3:69:ab:84:4d:f2:ef:e7:aa:7c:77: f4:39:cd:e9:5c:5d:10:c8:0b:a7:1c:19:56:0e:d6:c9:36:ac: ec:ff:5c:10:33:3a:27:73:dd:b1:15:24:39:32:d3:bf:de:2a: e8:4b:92:5f:93:14:f7:93:2b:3c:58:a8:d5:a6:8a:94:79:22: d6:b7:8e:38:c3:c3:35:b3:7f:b2:f3:67:93:fb:00:c9:00:82: f8:8b:cb:c2:5e:ab:48:c4:ac:30:3e:a9:6f:50:b7:33:fa:cd: 6c:9b:f2:ff:17:d6:5b:1d:b1:b6:d1:3c:04:8c:1a:05:c4:f9: 16:f0:eb:b0:4c:0b:b5:78:73:cf:ac:df:15:b9:e0:45:6c:b5: 86:24:37:0e:31:e5:ad:87:4e:b8:62:a6:76:f1:1f:b8:96:e5: 9a:59:28:37:c7:5c:03:b4:2b:2d:51:ba:58:24:b1:64:f2:8c: 92:a6:ef:0e:7e:44:f5:ac:ad:4d:0d:01:ff:d7:18:da:5b:75: 70:3c:22:1b:af:fd:17:00:ca:c3:78:4c:ed:1b:3a:3a:92:81: 45:23:20:a4:f1:ad:61:79:f9:d6:06:f6:d9:a4:6d:25:5b:83: d8:34:95:1d -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUQQkIfDkbhuQHi3EEK2mQ0lkENNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4 MUI4RkJCNzAeFw0yNTExMTkxNjQ4MTJaFw0yNjExMTgxNjUzMTJaMDMxMTAvBgNV BAMTKDNDOEZENzlGMzNFN0NFMEYzNzRDNEU4NEE5QTRBOUZFRUI3RUZEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPyJ0+vi4Q1iLHCLYpVrzHspR q9mMlY6D2jjnRWFH93bTti5oGbpYKpdd5mRJ0GWiis7zhuq6WpgOVfZ0iqq6tV3E UbhU276e4NC4cTqZk13V6hvQChtCpvvYvG4jXgJHBHf20mq/u42Mju+Q33daCS+g LOX5E51QGC+afAbXCxL6UCtFbaQW/mZ8b9Nj3I9etT58BKc2V2AOglIeGP0jU2DY BPnEd/m02SrsD7Oo/caJ172MxdEOYqYOoRuBsaXD1yDbnp2wsz7Xo6q4rGmfRBdO 8tOdW1W9D8tDjvN7liijonAey8f2WdKvJRGf3Y2dyomb4GBBE/5fdM3YXkLHAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUPI/XnzPnzg83TE6EqaSp/ut+/QgwHwYDVR0j BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2 NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4 QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzMzODJlMzEzMjMxMmUzMTM0MzAy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEzMTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinmM MA0GCSqGSIb3DQEBCwUAA4IBAQAthFkqCaWZw+13pTe4hBu+wGL6sMoWVgBr82mr hE3y7+eqfHf0Oc3pXF0QyAunHBlWDtbJNqzs/1wQMzonc92xFSQ5MtO/3iroS5Jf kxT3kys8WKjVpoqUeSLWt444w8M1s3+y82eT+wDJAIL4i8vCXqtIxKwwPqlvULcz +s1sm/L/F9ZbHbG20TwEjBoFxPkW8OuwTAu1eHPPrN8VueBFbLWGJDcOMeWth064 YqZ28R+4luWaWSg3x1wDtCstUbpYJLFk8oySpu8OfkT1rK1NDQH/1xjaW3VwPCIb r/0XAMrDeEztGzo6koFFIyCk8a1hefnWBvbZpG0lW4PYNJUd -----END CERTIFICATE-----Generated at Sun Dec 7 00:41:22 2025 by rpki-client