This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa File: 3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa (raw, json) Hash identifier: mJHn2VoVNtPF95XaTBSkz1w4X0fOsdWiznIPuLXmUH4= Subject key identifier: 53:D9:79:1F:2F:A1:6E:CE:AD:32:6E:A4:EA:34:38:D9:7A:95:49:05 Certificate issuer: /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3 Certificate serial: 31BE0D557159E96B34B6C8DABF4D977A838A5CA7 Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa Signing time: Tue 06 Jan 2026 19:29:08 +0000 ROA not before: Tue 06 Jan 2026 19:24:08 +0000 ROA not after: Tue 05 Jan 2027 19:29:08 +0000 asID: 265740 IP address blocks: 128.201.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:be:0d:55:71:59:e9:6b:34:b6:c8:da:bf:4d:97:7a:83:8a:5c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3 Validity Not Before: Jan 6 19:24:08 2026 GMT Not After : Jan 5 19:29:08 2027 GMT Subject: CN=53D9791F2FA16ECEAD326EA4EA3438D97A954905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:b0:08:5f:b2:28:a5:6f:43:fa:88:ac:20: ca:ac:28:34:8a:b8:eb:e8:17:8d:8c:b8:a0:5e:58: 44:72:12:e4:ac:be:cc:f5:d6:b3:2e:9b:cc:67:d6: c9:f6:eb:ff:60:3d:4a:d2:35:db:32:85:a0:4d:88: 30:85:52:c0:da:38:61:0e:fb:c8:02:ef:4c:f6:b7: 4d:18:c8:68:34:3d:26:1d:f1:58:b2:63:38:ee:6f: 38:c3:3c:46:37:3b:1f:29:53:33:1f:b7:80:09:1f: 1b:4a:74:e9:6e:71:3f:71:2f:f9:71:3f:4b:e9:a0: c3:c8:06:b9:32:51:65:09:ce:e4:f3:fa:a5:ff:bd: 59:10:ae:82:7e:29:45:b4:30:75:ca:7b:d2:6d:c9: 3c:2e:5b:3e:32:74:49:64:5c:11:35:ad:c4:4a:f0: 0d:f1:7d:32:03:df:4e:4b:ce:1d:e6:bc:aa:1b:61: 65:70:83:78:46:86:e8:05:60:61:7c:aa:b6:0b:12: 4e:c9:b4:af:ef:a3:93:3d:80:9d:07:f7:d8:be:f5: f5:da:27:0d:60:88:03:81:08:8b:6a:71:e8:84:16: 43:e3:ca:9f:72:92:95:81:3a:ff:0e:a1:e5:e2:8c: ea:1a:98:94:5e:16:30:6e:17:d4:f9:2f:c4:0c:d9: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:79:1F:2F:A1:6E:CE:AD:32:6E:A4:EA:34:38:D9:7A:95:49:05 X509v3 Authority Key Identifier: keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.20.0/22 Signature Algorithm: sha256WithRSAEncryption 74:03:53:3b:7e:11:2c:4d:60:28:59:8c:e0:88:a3:16:af:c0: f9:80:8c:d3:d9:3c:53:88:77:8a:e3:24:83:5d:67:a7:41:7b: e6:ad:b4:84:e3:bb:00:ba:a5:c2:9c:3d:2e:7c:de:bf:d9:d2: a6:ef:7b:53:b8:7a:66:3b:67:b3:d5:df:36:e0:2b:6f:21:55: d9:4f:28:27:ff:ba:d9:ec:ac:e6:15:8b:b8:e2:07:7d:4d:4d: 30:9c:6c:3e:7c:e2:96:4f:43:66:16:18:c6:4d:c8:01:ec:ca: 50:dc:fb:0f:4f:17:aa:e6:1f:78:bc:0c:00:45:ef:ae:83:0e: c6:34:37:04:1a:33:75:67:51:37:78:0e:5e:73:c8:1a:1b:6e: 39:96:bc:90:75:95:e4:c3:b3:37:62:4c:70:84:f0:d9:98:65: 3d:6f:6f:75:8e:31:4e:97:33:be:f7:86:b8:88:14:72:2b:c3: 36:0e:55:57:7c:c6:be:d5:d4:e1:b4:8d:1a:39:00:5f:c5:4c: ee:a9:06:25:2c:e9:88:f7:d8:fe:c1:e8:7c:56:10:bf:af:f2: 6e:07:0b:11:78:0e:76:2a:29:e1:48:3a:c5:4b:75:b8:e2:59: ab:76:7b:a0:8a:52:00:1b:d7:82:b1:7a:f2:b1:1a:b6:76:3b: 9e:81:22:ed -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUMb4NVXFZ6Ws0tsjav02XeoOKXKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVBQTEyRUMyODY4QjkwQTY5M0VFQUQyNTYzMkIxNUUy NDUyNUVEMzAeFw0yNjAxMDYxOTI0MDhaFw0yNzAxMDUxOTI5MDhaMDMxMTAvBgNV BAMTKDUzRDk3OTFGMkZBMTZFQ0VBRDMyNkVBNEVBMzQzOEQ5N0E5NTQ5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzrAIX7IopW9D+oisIMqsKDSK uOvoF42MuKBeWERyEuSsvsz11rMum8xn1sn26/9gPUrSNdsyhaBNiDCFUsDaOGEO +8gC70z2t00YyGg0PSYd8ViyYzjubzjDPEY3Ox8pUzMft4AJHxtKdOlucT9xL/lx P0vpoMPIBrkyUWUJzuTz+qX/vVkQroJ+KUW0MHXKe9JtyTwuWz4ydElkXBE1rcRK 8A3xfTID305Lzh3mvKobYWVwg3hGhugFYGF8qrYLEk7JtK/vo5M9gJ0H99i+9fXa Jw1giAOBCItqceiEFkPjyp9ykpWBOv8OoeXijOoamJReFjBuF9T5L8QM2Yx5AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUU9l5Hy+hbs6tMm6k6jQ42XqVSQUwHwYDVR0j BBgwFoAUJaoS7ChouQppPurSVjKxXiRSXtMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NzE1ODc3MDE0RDZBMzU2MkI5MDU5N0VDMzk0QjkxNEYx NkZEM0E1M0M1ODkzOUE3NzAzODhCM0ZFN0Q3MjdBLzAvMjVBQTEyRUMyODY4Qjkw QTY5M0VFQUQyNTYzMkIxNUUyNDUyNUVEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUFBMTJFQzI4NjhCOTBBNjkz RUVBRDI1NjMyQjE1RTI0NTI1RUQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODcxNTg3NzAxNEQ2QTM1NjJCOTA1OTdFQzM5NEI5MTRGMTZGRDNBNTND NTg5MzlBNzcwMzg4QjNGRTdENzI3QS8wLzMxMzIzODJlMzIzMDMxMmUzMjMwMmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzczNDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkU MA0GCSqGSIb3DQEBCwUAA4IBAQB0A1M7fhEsTWAoWYzgiKMWr8D5gIzT2TxTiHeK 4ySDXWenQXvmrbSE47sAuqXCnD0ufN6/2dKm73tTuHpmO2ez1d824CtvIVXZTygn /7rZ7KzmFYu44gd9TU0wnGw+fOKWT0NmFhjGTcgB7MpQ3PsPTxeq5h94vAwARe+u gw7GNDcEGjN1Z1E3eA5ec8gaG245lryQdZXkw7M3YkxwhPDZmGU9b291jjFOlzO+ 94a4iBRyK8M2DlVXfMa+1dThtI0aOQBfxUzuqQYlLOmI99j+weh8VhC/r/JuBwsR eA52KinhSDrFS3W44lmrdnugilIAG9eCsXrysRq2djuegSLt -----END CERTIFICATE-----Generated at Sun Jan 25 15:04:55 2026 by rpki-client