This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203231353735.roa File: 3230372e3234382e3132312e302f32342d3234203d3e203231353735.roa (raw, json) Hash identifier: RJ/CAjkc8B2xHdJppWSmqaIsaXiS6hhZFiXgZrHIzMI= Subject key identifier: 66:00:95:7B:2C:0F:6A:D1:18:E4:9C:05:F2:3F:5D:7C:00:7A:EA:D3 Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046 Certificate serial: 672F62DAA3CB0A587FDE9D4A0507B0C5DD5D9D92 Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203231353735.roa Signing time: Tue 06 Jan 2026 19:14:21 +0000 ROA not before: Tue 06 Jan 2026 19:09:21 +0000 ROA not after: Tue 05 Jan 2027 19:14:21 +0000 asID: 21575 IP address blocks: 207.248.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:62:da:a3:cb:0a:58:7f:de:9d:4a:05:07:b0:c5:dd:5d:9d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046 Validity Not Before: Jan 6 19:09:21 2026 GMT Not After : Jan 5 19:14:21 2027 GMT Subject: CN=6600957B2C0F6AD118E49C05F23F5D7C007AEAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:36:50:0b:64:60:c6:06:26:35:26:85:bc: a7:51:cd:75:ba:4d:9c:1a:e1:cb:33:3f:f5:8a:a4: 66:56:7d:e9:4a:f7:0a:a9:c9:ce:86:5b:c0:0f:73: 70:e6:33:63:81:2a:6e:f8:db:80:9e:9c:d4:46:8a: b0:ff:6a:28:75:f8:8c:ff:9d:18:3d:57:da:ae:e7: 08:ac:90:e5:a6:d1:4e:b4:98:8e:09:95:1a:69:a1: 2c:c9:6d:59:77:00:dd:5a:8f:d0:12:05:9f:74:2d: 48:c8:12:c0:d9:61:57:a8:66:01:6c:1e:00:26:52: 37:6e:6c:76:db:f1:ad:25:0d:81:bd:91:6b:af:31: d4:9e:cd:5c:87:02:a0:a3:12:cd:86:21:01:60:8b: 4f:78:18:b7:97:2a:f1:ed:2f:2a:8c:47:e9:43:ae: 6c:d5:40:20:08:a6:2c:35:82:18:48:4c:94:e8:52: 1d:62:4d:d1:38:4c:51:5c:70:ce:f2:14:d5:60:2d: b4:cc:92:34:83:fb:65:0a:61:3d:38:7f:a3:7f:fe: c4:79:0d:c3:91:75:44:55:0b:39:14:d2:8e:74:d1: da:0b:2a:48:ef:e6:0f:94:b5:30:e5:b9:c3:60:dd: 69:e6:dd:a9:0e:f2:a1:0f:f2:61:f3:3d:86:ea:ed: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:00:95:7B:2C:0F:6A:D1:18:E4:9C:05:F2:3F:5D:7C:00:7A:EA:D3 X509v3 Authority Key Identifier: keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203231353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.121.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c0:2d:d2:60:45:8e:f4:35:91:bd:ae:49:ae:8d:50:11:76: 49:0f:87:a3:38:35:7f:0a:2f:37:8d:81:c2:cd:0d:98:35:ca: dc:41:96:ad:f1:f5:64:59:de:b7:cd:98:c5:39:fd:15:99:29: 9d:a9:04:28:49:1b:3e:b5:5c:04:10:75:d1:50:07:c2:45:97: 9d:dd:b9:97:41:3d:ab:0e:00:89:c6:38:1e:a0:d7:9f:7e:bc: 27:9c:1e:3f:97:10:43:40:34:b2:8e:03:be:03:35:fb:bc:d4: d3:84:09:ad:62:b0:d7:13:48:a3:6c:b0:12:7d:bb:0c:00:ab: 70:df:e2:74:c6:77:7c:9b:e9:c9:3c:45:aa:33:df:75:13:1e: 14:73:71:e9:93:6f:08:22:b4:b2:15:34:55:b7:a0:87:7b:cf: 5a:bb:71:75:ed:d4:9d:6e:22:ac:de:1d:57:d5:d2:68:a8:47: f7:02:bf:c2:39:44:3e:1a:f6:6b:a6:3c:a7:fd:cb:0b:7f:33: f4:08:95:e7:60:8e:57:be:ca:2c:80:1b:7d:cd:d9:e0:9f:54: 0c:22:6d:27:1c:12:d4:00:2b:26:97:28:9c:f8:86:f9:b5:e5: 87:f7:33:c6:d5:13:17:3f:e0:b7:31:ea:53:ef:eb:c6:f7:b0: 2a:e0:87:13 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUZy9i2qPLClh/3p1KBQewxd1dnZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE MjE3OTA0NjAeFw0yNjAxMDYxOTA5MjFaFw0yNzAxMDUxOTE0MjFaMDMxMTAvBgNV BAMTKDY2MDA5NTdCMkMwRjZBRDExOEU0OUMwNUYyM0Y1RDdDMDA3QUVBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7DZQC2RgxgYmNSaFvKdRzXW6 TZwa4cszP/WKpGZWfelK9wqpyc6GW8APc3DmM2OBKm7424CenNRGirD/aih1+Iz/ nRg9V9qu5wiskOWm0U60mI4JlRppoSzJbVl3AN1aj9ASBZ90LUjIEsDZYVeoZgFs HgAmUjdubHbb8a0lDYG9kWuvMdSezVyHAqCjEs2GIQFgi094GLeXKvHtLyqMR+lD rmzVQCAIpiw1ghhITJToUh1iTdE4TFFccM7yFNVgLbTMkjSD+2UKYT04f6N//sR5 DcORdURVCzkU0o500doLKkjv5g+UtTDlucNg3Wnm3akO8qEP8mHzPYbq7fvtAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUZgCVeywPatEY5JwF8j9dfAB66tMwHwYDVR0j BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5 NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/h5 MA0GCSqGSIb3DQEBCwUAA4IBAQCUwC3SYEWO9DWRva5Jro1QEXZJD4ejODV/Ci83 jYHCzQ2YNcrcQZat8fVkWd63zZjFOf0VmSmdqQQoSRs+tVwEEHXRUAfCRZed3bmX QT2rDgCJxjgeoNeffrwnnB4/lxBDQDSyjgO+AzX7vNTThAmtYrDXE0ijbLASfbsM AKtw3+J0xnd8m+nJPEWqM991Ex4Uc3Hpk28IIrSyFTRVt6CHe89au3F17dSdbiKs 3h1X1dJoqEf3Ar/COUQ+GvZrpjyn/csLfzP0CJXnYI5XvsosgBt9zdngn1QMIm0n HBLUACsmlyic+Ib5teWH9zPG1RMXP+C3MepT7+vG97Aq4IcT -----END CERTIFICATE-----Generated at Sun Jan 25 21:55:00 2026 by rpki-client