This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa File: 3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa (raw, json) Hash identifier: QWoQ9+iUkYoGKBLYFQHaCyclQmIaMnIamRlgcO4fi2Y= Subject key identifier: BD:ED:99:F4:14:79:E4:37:FC:6B:53:A1:16:62:9D:F1:D4:4C:A2:BD Certificate issuer: /CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640 Certificate serial: 78E71564CF4D351576A1344462C9202DDB5774A9 Authority key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa Signing time: Tue 06 Jan 2026 19:08:21 +0000 ROA not before: Tue 06 Jan 2026 19:03:21 +0000 ROA not after: Tue 05 Jan 2027 19:08:21 +0000 asID: 267858 IP address blocks: 170.244.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:15:64:cf:4d:35:15:76:a1:34:44:62:c9:20:2d:db:57:74:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640 Validity Not Before: Jan 6 19:03:21 2026 GMT Not After : Jan 5 19:08:21 2027 GMT Subject: CN=BDED99F41479E437FC6B53A116629DF1D44CA2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:60:a3:06:bc:a3:54:b3:12:d2:43:3b:4c: 53:5a:ce:90:fe:fc:8a:be:2d:44:41:15:3b:81:d6: 7e:b5:77:92:fe:c5:59:04:9f:fd:a5:e5:52:e4:45: 2b:c3:76:ff:2f:73:bc:cc:ac:da:c8:32:01:08:b9: 80:26:6d:29:d6:60:0e:1c:4c:e2:2f:db:bb:38:bf: c5:80:62:2d:06:71:8d:f2:81:2d:e5:8c:77:d6:0c: ea:b5:0d:23:79:3c:48:9e:b3:f8:b1:97:b2:96:e7: 08:62:62:4d:fc:76:71:08:6b:1b:61:a5:83:8e:eb: d5:5f:45:79:ec:9c:fe:49:17:32:8e:77:e3:c7:0d: 58:5f:6a:1b:3f:86:d4:4a:29:9d:22:c4:2f:c3:a7: be:6e:a3:d4:04:da:43:b4:f5:75:64:77:83:51:a1: 61:8f:f3:8b:7e:2c:b9:55:f2:f0:15:3e:f7:cb:c4: a7:cf:93:30:20:cc:74:21:1d:8c:63:2f:f0:4a:73: 37:6d:2f:ae:3e:cb:3f:46:36:a5:9b:26:a4:39:9d: 3e:64:7a:36:fb:c3:49:e2:37:96:08:74:d2:80:66: e9:3a:60:b6:78:96:56:d3:f4:f3:72:4a:96:99:b5: c5:0f:22:5a:2d:2e:61:5d:7b:7f:59:c5:b8:45:ca: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:ED:99:F4:14:79:E4:37:FC:6B:53:A1:16:62:9D:F1:D4:4C:A2:BD X509v3 Authority Key Identifier: keyid:5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:01:02:22:1d:14:04:f4:b4:cd:50:8b:66:66:c3:d5:f8:44: e4:c4:93:75:ad:52:4c:2e:28:e0:9c:8e:f0:34:06:9f:17:03: 53:44:7f:ff:9f:a2:15:ba:17:ed:69:28:82:06:cc:af:f5:35: dc:2e:3b:1a:9c:74:9a:f6:6a:4a:9d:57:1c:3c:ef:7b:cb:8c: ef:44:af:ca:59:a6:c1:27:63:87:0a:9c:43:17:af:f2:2b:d6: b3:d0:6f:63:76:15:07:33:35:5e:1b:a7:b5:44:4d:8e:b4:cd: c8:a5:36:0c:ff:be:d0:94:ba:d8:99:75:87:b8:ea:41:94:3e: c7:7c:b3:fa:9b:60:00:29:3b:36:1c:c5:6f:35:e6:a7:8d:76: 7f:39:a5:fa:39:f1:90:4c:20:40:a6:90:60:37:9b:f7:d2:5c: ea:6f:75:d9:3d:94:7c:ff:c0:e2:53:b7:43:07:fa:bd:6c:de: e7:b7:71:db:91:7a:79:17:0f:8d:c6:dd:2f:13:2c:f8:70:06: 1c:ee:83:60:d0:a2:00:d2:bb:5e:ed:f1:d3:d7:b1:81:22:f6: ed:53:43:43:a6:26:5c:f9:3b:c7:25:e9:12:4d:0c:94:8a:5b: ef:04:8f:a2:e2:2d:66:38:59:8a:b7:0d:e0:38:75:d8:31:a2: da:70:02:7c -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUeOcVZM9NNRV2oTREYskgLdtXdKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBQzRGQTg5MjE4MjAzMjE0NTczQUVBNkVDNDQ5QkM0 Q0ZEOTY0MDAeFw0yNjAxMDYxOTAzMjFaFw0yNzAxMDUxOTA4MjFaMDMxMTAvBgNV BAMTKEJERUQ5OUY0MTQ3OUU0MzdGQzZCNTNBMTE2NjI5REYxRDQ0Q0EyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX32CjBryjVLMS0kM7TFNazpD+ /Iq+LURBFTuB1n61d5L+xVkEn/2l5VLkRSvDdv8vc7zMrNrIMgEIuYAmbSnWYA4c TOIv27s4v8WAYi0GcY3ygS3ljHfWDOq1DSN5PEies/ixl7KW5whiYk38dnEIaxth pYOO69VfRXnsnP5JFzKOd+PHDVhfahs/htRKKZ0ixC/Dp75uo9QE2kO09XVkd4NR oWGP84t+LLlV8vAVPvfLxKfPkzAgzHQhHYxjL/BKczdtL64+yz9GNqWbJqQ5nT5k ejb7w0niN5YIdNKAZuk6YLZ4llbT9PNySpaZtcUPIlotLmFde39ZxbhFyo9NAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUve2Z9BR55Df8a1OhFmKd8dRMor0wHwYDVR0j BBgwFoAUX6xPqJIYIDIUVzrqbsRJvEz9lkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NDNGQjAzMjAzQUM0NDUxN0VGQzREQzc0OEE0RjQ2MDkw Njk3RkFEMkIzNjI0Q0QxRDY2REExRkM0RUIyOUNBLzAvNUZBQzRGQTg5MjE4MjAz MjE0NTczQUVBNkVDNDQ5QkM0Q0ZEOTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RkFDNEZBODkyMTgyMDMyMTQ1 NzNBRUE2RUM0NDlCQzRDRkQ5NjQwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODQzRkIwMzIwM0FDNDQ1MTdFRkM0REM3NDhBNEY0NjA5MDY5N0ZBRDJC MzYyNENEMUQ2NkRBMUZDNEVCMjlDQS8wLzMxMzczMDJlMzIzNDM0MmUzMTM3MzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczODM1Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq 9KswDQYJKoZIhvcNAQELBQADggEBABoBAiIdFAT0tM1Qi2Zmw9X4ROTEk3WtUkwu KOCcjvA0Bp8XA1NEf/+fohW6F+1pKIIGzK/1NdwuOxqcdJr2akqdVxw873vLjO9E r8pZpsEnY4cKnEMXr/Ir1rPQb2N2FQczNV4bp7VETY60zcilNgz/vtCUutiZdYe4 6kGUPsd8s/qbYAApOzYcxW815qeNdn85pfo58ZBMIECmkGA3m/fSXOpvddk9lHz/ wOJTt0MH+r1s3ue3cduRenkXD43G3S8TLPhwBhzug2DQogDSu17t8dPXsYEi9u1T Q0OmJlz5O8cl6RJNDJSKW+8Ej6LiLWY4WYq3DeA4ddgxotpwAnw= -----END CERTIFICATE-----Generated at Mon Jan 26 09:12:56 2026 by rpki-client