This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa File: 3133322e3235312e302e302f31372d3234203d3e203139393035.roa (raw, json) Hash identifier: Xiaeudpoc03Ix84ZBYxHDGvJb/Qx8v8B15J/YOkt9BA= Subject key identifier: 4F:17:79:86:B8:BC:DA:3A:E1:A1:48:19:CA:E7:D4:0C:B7:D6:AF:8A Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046 Certificate serial: 29EB8457833286C81D23612BFC22A6AA3D519F52 Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa Signing time: Tue 06 Jan 2026 19:14:12 +0000 ROA not before: Tue 06 Jan 2026 19:09:12 +0000 ROA not after: Tue 05 Jan 2027 19:14:12 +0000 asID: 19905 IP address blocks: 132.251.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:eb:84:57:83:32:86:c8:1d:23:61:2b:fc:22:a6:aa:3d:51:9f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046 Validity Not Before: Jan 6 19:09:12 2026 GMT Not After : Jan 5 19:14:12 2027 GMT Subject: CN=4F177986B8BCDA3AE1A14819CAE7D40CB7D6AF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:08:d3:6e:a3:00:bb:74:03:c5:b5:30:cc: c2:7f:c2:69:e5:63:48:5e:a0:93:0d:23:35:22:e6: cc:a8:de:35:c0:c0:68:38:c9:2a:47:30:34:26:2e: fc:90:96:4e:74:6e:c6:6b:69:05:c5:40:47:17:40: 4a:29:e5:19:f8:e5:11:9f:50:a9:72:1f:cc:ce:f5: 9c:c9:68:fe:38:27:f2:72:11:4b:66:ee:04:61:3e: d2:2e:ec:c5:ca:50:60:c7:ce:d0:74:81:38:c7:23: 07:6b:10:6c:fa:a7:d6:90:19:81:55:b3:17:48:d8: 96:f2:bd:fd:2a:7b:17:08:80:96:e2:d9:d8:92:7a: f0:66:06:02:7f:d6:d9:0c:41:3c:ee:f8:90:96:cb: 5f:e4:d6:26:61:80:a3:4a:85:85:23:64:8a:ca:9a: 3f:5e:88:98:bf:7a:2f:8c:0f:1d:bf:ae:4e:d1:f8: b0:aa:db:f9:5e:6a:8d:9f:ff:4b:7c:38:60:7e:31: 73:d3:b2:ee:a6:2a:8b:38:1b:b0:03:72:ef:c4:29: e0:5b:bf:22:8a:df:67:c1:15:26:a8:7c:5e:ed:fe: a2:01:92:c7:ae:29:33:9c:aa:06:7e:3d:13:eb:4f: 46:82:f4:b4:97:39:13:57:4b:eb:47:6e:67:fe:ea: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:79:86:B8:BC:DA:3A:E1:A1:48:19:CA:E7:D4:0C:B7:D6:AF:8A X509v3 Authority Key Identifier: keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.251.0.0/17 Signature Algorithm: sha256WithRSAEncryption 95:1a:50:38:19:d1:52:c6:53:83:c1:b2:40:64:56:c8:15:ff: ce:58:4e:d9:23:1d:d7:33:8f:88:79:fb:65:f6:d2:8e:6d:ec: e8:a7:06:43:b8:11:3e:42:78:8e:4d:51:68:43:e9:29:06:a6: 15:6b:64:c0:bf:64:d4:47:cb:f8:74:c0:e8:dd:d0:d0:fe:fb: 20:fc:1f:08:56:99:89:ac:0d:f9:c6:cb:82:4a:1f:2f:e3:bd: 55:a3:37:f2:f6:75:8d:c0:22:7d:53:d4:36:d5:94:36:be:0a: ed:c3:9e:03:43:96:e9:15:02:c5:5e:53:4a:34:d0:96:04:35: 9f:3f:e3:54:3d:25:24:13:8b:50:21:51:32:dc:36:8a:b0:55: 6f:4e:50:82:18:2d:c7:8e:b3:fa:95:88:cc:e5:62:e5:18:08: 9e:55:9b:f4:0f:93:3b:0f:e5:4f:0b:d2:dd:7a:ab:b4:c5:e3: f7:39:7f:6c:62:a8:37:75:09:a2:3e:d6:8e:f6:cc:32:78:6d: a8:d7:39:00:26:ff:67:6f:44:fe:1f:7b:15:32:e3:92:58:61: ab:2f:5e:f6:b5:9d:d9:fa:04:37:49:30:e3:d1:db:1c:60:e5: e7:98:98:6e:97:c1:6d:f3:aa:0a:36:cf:ac:af:2a:8a:07:71: c4:19:32:ee -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUKeuEV4MyhsgdI2Er/CKmqj1Rn1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTJaFw0yNzAxMDUxOTE0MTJaMDMxMTAvBgNV BAMTKDRGMTc3OTg2QjhCQ0RBM0FFMUExNDgxOUNBRTdENDBDQjdENkFGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVgjTbqMAu3QDxbUwzMJ/wmnl Y0heoJMNIzUi5syo3jXAwGg4ySpHMDQmLvyQlk50bsZraQXFQEcXQEop5Rn45RGf UKlyH8zO9ZzJaP44J/JyEUtm7gRhPtIu7MXKUGDHztB0gTjHIwdrEGz6p9aQGYFV sxdI2Jbyvf0qexcIgJbi2diSevBmBgJ/1tkMQTzu+JCWy1/k1iZhgKNKhYUjZIrK mj9eiJi/ei+MDx2/rk7R+LCq2/leao2f/0t8OGB+MXPTsu6mKos4G7ADcu/EKeBb vyKK32fBFSaofF7t/qIBkseuKTOcqgZ+PRPrT0aC9LSXORNXS+tHbmf+6uGnAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUTxd5hri82jrhoUgZyufUDLfWr4owHwYDVR0j BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5 NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMDJlMzAy ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeE+wAwDQYJ KoZIhvcNAQELBQADggEBAJUaUDgZ0VLGU4PBskBkVsgV/85YTtkjHdczj4h5+2X2 0o5t7OinBkO4ET5CeI5NUWhD6SkGphVrZMC/ZNRHy/h0wOjd0ND++yD8HwhWmYms DfnGy4JKHy/jvVWjN/L2dY3AIn1T1DbVlDa+Cu3DngNDlukVAsVeU0o00JYENZ8/ 41Q9JSQTi1AhUTLcNoqwVW9OUIIYLceOs/qViMzlYuUYCJ5Vm/QPkzsP5U8L0t16 q7TF4/c5f2xiqDd1CaI+1o72zDJ4bajXOQAm/2dvRP4fexUy45JYYasvXva1ndn6 BDdJMOPR2xxg5eeYmG6XwW3zqgo2z6yvKooHccQZMu4= -----END CERTIFICATE-----Generated at Sun Jan 25 08:26:37 2026 by rpki-client