This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa File: 3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: sftmq9n2vWudfJVUt91hTiC/ZQekw2gjY69kcLrtemw= Subject key identifier: F4:2D:BD:E6:0C:36:0C:47:B9:A3:63:7A:75:6A:3C:6A:86:16:DD:D6 Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046 Certificate serial: 4546D8103F1083FB2EFB547BBACEF74A2718A13E Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa Signing time: Tue 06 Jan 2026 19:14:13 +0000 ROA not before: Tue 06 Jan 2026 19:09:13 +0000 ROA not after: Tue 05 Jan 2027 19:14:13 +0000 asID: 19905 IP address blocks: 207.248.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:46:d8:10:3f:10:83:fb:2e:fb:54:7b:ba:ce:f7:4a:27:18:a1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046 Validity Not Before: Jan 6 19:09:13 2026 GMT Not After : Jan 5 19:14:13 2027 GMT Subject: CN=F42DBDE60C360C47B9A3637A756A3C6A8616DDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:ff:b9:ea:04:bb:f4:eb:1c:38:58:c1:94: 37:35:06:94:a3:32:c3:7e:c1:bd:1a:19:ce:4a:e4: 19:62:37:ce:84:1e:81:78:33:82:cb:78:f4:ec:4c: d0:42:43:4a:c8:4b:b1:b8:8f:34:d2:4a:42:1b:b1: e2:9c:5e:da:ac:62:5b:d4:9c:0c:e8:bb:25:d1:70: 36:ac:18:06:92:4a:a0:57:69:74:e5:fc:15:cc:d9: 74:5c:70:cd:0f:be:e8:8a:f6:43:3c:1f:b4:23:0f: 8c:e2:a6:18:2a:be:02:f1:83:be:28:a2:b0:06:82: 47:c3:0f:ff:6b:b4:1e:6b:fb:0b:24:de:73:b4:a7: 5c:62:0d:4f:3b:fb:8b:fc:1a:de:41:76:dd:2a:44: d3:52:ac:5f:2d:ad:8a:41:a2:cf:66:71:ef:89:26: d0:97:cb:b7:6e:90:15:05:39:cb:3d:ec:c0:f2:3e: 47:d3:af:7c:ab:e5:08:1c:d5:e3:33:94:7c:dd:33: 8b:23:8d:82:8a:68:7f:8d:84:30:15:bc:69:47:c9: e6:25:a6:c7:ad:f7:d4:62:9c:5f:d0:73:ad:33:da: 69:a0:d6:12:20:ee:9e:3b:5d:a3:d4:80:58:28:f6: 3b:54:cd:cd:4e:79:a7:d2:47:04:1d:91:ef:7a:3f: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:BD:E6:0C:36:0C:47:B9:A3:63:7A:75:6A:3C:6A:86:16:DD:D6 X509v3 Authority Key Identifier: keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:02:24:e4:ca:18:dc:7b:ea:ef:df:ec:56:77:0f:fe:79:d8: 96:a0:cf:e2:4b:b4:b1:5e:68:8c:e5:55:ca:3c:08:e9:f5:aa: b3:3d:3e:cd:bf:af:45:83:1a:c5:ef:7e:81:c4:60:bc:f4:da: d1:07:d3:33:f6:df:31:6d:7e:6a:9b:06:b4:c1:32:c1:5d:8a: 0b:49:b1:17:a2:11:b7:5b:8f:e9:f4:c7:b0:31:6b:10:58:0c: 8b:ea:e5:68:46:84:57:e7:49:c3:f5:f2:e8:23:94:e1:de:28: 07:cb:ce:ff:76:55:9e:cf:c1:cf:61:d4:12:ad:bb:d0:5c:68: ad:e4:01:40:f9:9b:cf:b7:0b:39:7d:46:06:00:38:e8:4f:f6: b5:ec:2f:21:76:bb:72:0f:e1:e6:13:ea:3e:6b:cc:29:99:ef: a0:17:ec:60:89:d0:e6:87:6d:ce:8e:f7:9f:7d:9f:84:22:a9: 0d:a3:b1:77:22:18:7a:d0:96:bd:f9:36:0c:d8:dc:45:a1:bc: a7:d2:63:96:8a:ec:00:ed:83:ae:57:61:28:75:e2:ce:f9:5f: 9e:c2:50:05:cf:c6:5e:59:9f:93:c4:34:ee:b9:d2:1d:53:cf: 6c:ec:43:c0:75:69:55:d4:76:d8:d9:70:42:ed:a4:c9:26:42: fc:c3:3f:e6 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIURUbYED8Qg/su+1R7us73SicYoT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTNaFw0yNzAxMDUxOTE0MTNaMDMxMTAvBgNV BAMTKEY0MkRCREU2MEMzNjBDNDdCOUEzNjM3QTc1NkEzQzZBODYxNkRERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnSv+56gS79OscOFjBlDc1BpSj MsN+wb0aGc5K5BliN86EHoF4M4LLePTsTNBCQ0rIS7G4jzTSSkIbseKcXtqsYlvU nAzouyXRcDasGAaSSqBXaXTl/BXM2XRccM0PvuiK9kM8H7QjD4ziphgqvgLxg74o orAGgkfDD/9rtB5r+wsk3nO0p1xiDU87+4v8Gt5Bdt0qRNNSrF8trYpBos9mce+J JtCXy7dukBUFOcs97MDyPkfTr3yr5Qgc1eMzlHzdM4sjjYKKaH+NhDAVvGlHyeYl pset99RinF/Qc60z2mmg1hIg7p47XaPUgFgo9jtUzc1OeafSRwQdke96PwKJAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU9C295gw2DEe5o2N6dWo8aoYW3dYwHwYDVR0j BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5 NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/h5 MA0GCSqGSIb3DQEBCwUAA4IBAQBfAiTkyhjce+rv3+xWdw/+ediWoM/iS7SxXmiM 5VXKPAjp9aqzPT7Nv69FgxrF736BxGC89NrRB9Mz9t8xbX5qmwa0wTLBXYoLSbEX ohG3W4/p9MewMWsQWAyL6uVoRoRX50nD9fLoI5Th3igHy87/dlWez8HPYdQSrbvQ XGit5AFA+ZvPtws5fUYGADjoT/a17C8hdrtyD+HmE+o+a8wpme+gF+xgidDmh23O jveffZ+EIqkNo7F3Ihh60Ja9+TYM2NxFobyn0mOWiuwA7YOuV2EodeLO+V+ewlAF z8ZeWZ+TxDTuudIdU89s7EPAdWlV1HbY2XBC7aTJJkL8wz/m -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:22 2026 by rpki-client