This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa File: 3133382e302e382e302f32322d3234203d3e203532333439.roa (raw, json) Hash identifier: yLgNNzGG/8h4v8LOyGPhhxMA3Fqp31KmGVmhgn8ZKq0= Subject key identifier: 02:E7:88:FA:B8:40:1B:E6:31:0E:DB:6B:CE:5C:5B:B1:57:A3:77:38 Certificate issuer: /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099 Certificate serial: 3CEB8E21015A0B66E141F20F45FFB3BC98A7BE3A Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa Signing time: Tue 06 Jan 2026 19:22:03 +0000 ROA not before: Tue 06 Jan 2026 19:17:03 +0000 ROA not after: Tue 05 Jan 2027 19:22:03 +0000 asID: 52349 IP address blocks: 138.0.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:eb:8e:21:01:5a:0b:66:e1:41:f2:0f:45:ff:b3:bc:98:a7:be:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099 Validity Not Before: Jan 6 19:17:03 2026 GMT Not After : Jan 5 19:22:03 2027 GMT Subject: CN=02E788FAB8401BE6310EDB6BCE5C5BB157A37738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:c2:ab:30:bd:f7:93:d8:a5:b0:96:30:7b: 43:b6:59:00:7b:77:3d:37:b2:63:ab:b6:d5:13:da: e5:bd:76:df:64:c4:2d:ff:22:fa:46:70:af:71:ff: b8:82:d5:ac:be:96:5b:bb:ab:4a:8f:c8:c6:db:0d: f1:d2:11:5a:9b:79:4c:ae:61:85:b7:f7:99:49:93: cd:5b:c1:31:2e:08:ae:bc:28:b7:aa:e1:d6:1c:f3: 61:8f:e3:b0:3c:e4:77:f6:da:2c:b0:de:06:97:86: ae:24:6a:4e:a2:87:7d:03:52:b0:ce:20:76:83:e9: 2b:6b:56:01:43:d0:40:79:2f:95:4e:b4:c6:53:48: 14:dc:62:f7:5b:07:d3:d4:e1:57:a8:4f:bd:1a:12: 4b:46:fa:2d:96:1d:07:c5:3e:55:45:e6:21:8f:88: e6:2b:99:f9:3b:4d:a1:f8:02:a1:f6:5d:d4:9f:32: 17:0f:38:66:74:77:a0:59:fe:37:9a:01:94:09:8b: 53:8c:c5:ae:8a:c5:db:13:01:d6:23:eb:4a:39:18: f8:bd:ef:83:95:dc:c9:09:6c:72:3c:55:a3:80:1f: 72:75:b1:4c:12:25:8c:3f:1c:1d:db:84:2c:57:f0: b8:00:b3:06:7f:4e:7a:4b:25:b2:d6:1e:74:de:c1: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E7:88:FA:B8:40:1B:E6:31:0E:DB:6B:CE:5C:5B:B1:57:A3:77:38 X509v3 Authority Key Identifier: keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.8.0/22 Signature Algorithm: sha256WithRSAEncryption 24:c9:3d:9d:da:5d:47:47:dc:6e:c4:22:4a:e9:e6:92:70:3f: d6:ea:a6:d5:a7:39:2f:59:e4:51:eb:40:44:7c:ed:55:dd:d3: 6c:0d:ff:cb:49:a0:34:48:89:81:96:99:f9:1d:5c:a6:bf:36: 18:cd:ca:ad:a2:6f:6f:9d:9e:73:d8:f6:91:d0:c0:1e:e8:60: 3c:26:7b:91:03:39:d4:6a:66:87:1d:50:39:da:c2:a8:76:93: 4a:0e:33:bf:3d:2d:d0:89:3b:c9:0f:a6:73:5a:9a:93:a1:05: 01:e0:19:e8:2f:78:3b:c2:6d:37:40:23:e2:fc:7c:d9:2f:78: fb:16:bb:c3:67:69:9b:c2:1f:23:7e:8c:57:6e:a4:75:30:30: 28:dc:54:70:f6:0f:4b:14:2d:db:cf:5a:bb:67:ff:f2:31:af: 7d:66:75:46:46:61:1f:84:46:52:a9:98:ce:81:52:d2:83:36: 71:cd:99:54:1d:8e:4e:d0:14:54:40:82:c9:da:cd:a6:c4:d0: eb:ec:15:96:0f:a9:c8:91:0c:66:0d:6f:82:f5:b7:0f:69:d1: e5:83:fc:91:fd:e0:9a:0c:5d:67:3d:f2:36:ec:49:9f:0b:5a: 23:a5:e6:29:ee:67:06:5a:b3:e2:7b:3e:59:54:70:94:21:22: 88:b8:df:b2 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIUPOuOIQFaC2bhQfIPRf+zvJinvjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNENzE2Q0RCNTY1RUJFMzNCMjRGOTk1QkZCNzRGQkJF MTQ5MzA5OTAeFw0yNjAxMDYxOTE3MDNaFw0yNzAxMDUxOTIyMDNaMDMxMTAvBgNV BAMTKDAyRTc4OEZBQjg0MDFCRTYzMTBFREI2QkNFNUM1QkIxNTdBMzc3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT8KrML33k9ilsJYwe0O2WQB7 dz03smOrttUT2uW9dt9kxC3/IvpGcK9x/7iC1ay+llu7q0qPyMbbDfHSEVqbeUyu YYW395lJk81bwTEuCK68KLeq4dYc82GP47A85Hf22iyw3gaXhq4kak6ih30DUrDO IHaD6StrVgFD0EB5L5VOtMZTSBTcYvdbB9PU4VeoT70aEktG+i2WHQfFPlVF5iGP iOYrmfk7TaH4AqH2XdSfMhcPOGZ0d6BZ/jeaAZQJi1OMxa6KxdsTAdYj60o5GPi9 74OV3MkJbHI8VaOAH3J1sUwSJYw/HB3bhCxX8LgAswZ/TnpLJbLWHnTewc+bAgMB AAGjggLCMIICvjAdBgNVHQ4EFgQUAueI+rhAG+YxDttrzlxbsVejdzgwHwYDVR0j BBgwFoAUQ9cWzbVl6+M7JPmVv7dPu+FJMJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0EyOENDRkI4Njg1ODUwQkE5NzlEQzExRDE1OTUyNTI0 QTU0NkNDOTY2NzZERkIwQTA1QUY4QUFBQTJCRDdDLzAvNDNENzE2Q0RCNTY1RUJF MzNCMjRGOTk1QkZCNzRGQkJFMTQ5MzA5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0Q3MTZDREI1NjVFQkUzM0Iy NEY5OTVCRkI3NEZCQkUxNDkzMDk5LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdBMjhDQ0ZCODY4NTg1MEJBOTc5REMxMUQxNTk1MjUyNEE1NDZDQzk2 Njc2REZCMEEwNUFGOEFBQUEyQkQ3Qy8wLzMxMzMzODJlMzAyZTM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzMjMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAooACDANBgkqhkiG 9w0BAQsFAAOCAQEAJMk9ndpdR0fcbsQiSunmknA/1uqm1ac5L1nkUetARHztVd3T bA3/y0mgNEiJgZaZ+R1cpr82GM3KraJvb52ec9j2kdDAHuhgPCZ7kQM51Gpmhx1Q OdrCqHaTSg4zvz0t0Ik7yQ+mc1qak6EFAeAZ6C94O8JtN0Aj4vx82S94+xa7w2dp m8IfI36MV26kdTAwKNxUcPYPSxQt289au2f/8jGvfWZ1RkZhH4RGUqmYzoFS0oM2 cc2ZVB2OTtAUVECCydrNpsTQ6+wVlg+pyJEMZg1vgvW3D2nR5YP8kf3gmgxdZz3y NuxJnwtaI6XmKe5nBlqz4ns+WVRwlCEiiLjfsg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:59:25 2026 by rpki-client