This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32332d3233203d3e20323733303731.roa File: 3230302e3135302e3234382e302f32332d3233203d3e20323733303731.roa (raw, json) Hash identifier: nS+fcUh/qUAIUm5ZKhUSC7Mvfbtnk+kqlR93Ev6pLAk= Subject key identifier: 75:28:5F:25:13:33:55:D0:13:EA:CD:A1:31:E7:89:E1:DA:3B:08:0C Certificate issuer: /CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739 Certificate serial: 0A27495A627071FE18D420704C215102BAB7C40F Authority key identifier: 8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32332d3233203d3e20323733303731.roa Signing time: Sat 10 Jan 2026 13:35:00 +0000 ROA not before: Sat 10 Jan 2026 13:30:00 +0000 ROA not after: Sat 09 Jan 2027 13:35:00 +0000 asID: 273071 IP address blocks: 200.150.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 13:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:27:49:5a:62:70:71:fe:18:d4:20:70:4c:21:51:02:ba:b7:c4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739 Validity Not Before: Jan 10 13:30:00 2026 GMT Not After : Jan 9 13:35:00 2027 GMT Subject: CN=75285F25133355D013EACDA131E789E1DA3B080C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:f2:3a:23:28:83:e1:4b:6e:15:9e:fb:b9: 73:be:f7:7c:38:5c:39:7d:1d:73:07:04:37:0f:f1: c3:15:7a:3a:98:13:66:30:f1:e5:16:d9:cc:b1:a1: 6f:8d:d7:00:3d:71:16:7f:f3:12:cf:5e:49:ed:a6: d5:0e:73:c7:43:1e:a5:67:64:ba:b3:c9:d0:c2:c9: 3d:5d:04:0b:39:d8:5d:53:58:f9:08:07:c7:41:30: 61:ae:38:8e:0a:78:b4:4b:b0:7c:aa:ef:26:ed:94: 67:c3:60:3b:6f:2f:e3:ef:0a:07:c9:93:b2:84:f5: b9:16:37:ff:60:51:db:50:fc:c7:22:cc:46:dc:f8: 13:90:ad:2e:f1:de:34:f2:1f:1d:28:09:c2:fb:6c: 86:4e:ca:ea:76:fc:16:86:5b:98:7f:80:42:8c:11: c2:1e:69:a0:9b:e5:4c:3f:87:3e:c5:2c:0b:2a:d6: a7:9f:22:60:9a:f0:60:65:b4:fb:bc:67:47:27:f5: ec:7c:24:8d:75:e5:c6:2e:03:f6:14:d3:f2:ed:13: 8f:31:a3:cb:b1:7e:e9:ee:a5:de:48:73:3c:9f:96: bf:d7:db:5c:37:1a:a8:98:a8:37:bc:d5:3f:1d:1e: 4c:00:0c:aa:fe:dd:29:c2:75:8a:d2:15:b4:16:4e: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:5F:25:13:33:55:D0:13:EA:CD:A1:31:E7:89:E1:DA:3B:08:0C X509v3 Authority Key Identifier: keyid:8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32332d3233203d3e20323733303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.150.248.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:9f:bd:4c:96:9f:f1:c9:60:67:d5:19:81:69:62:ae:41:cb: 66:ad:36:0c:fc:57:07:e4:9f:e1:83:63:da:01:f4:1a:58:e2: 6d:29:59:eb:c1:12:01:a1:a2:72:43:da:f5:26:ac:c0:ca:7b: 87:4a:9a:e8:d3:42:d0:e2:4b:04:6b:1d:90:2a:fd:39:e4:43: ab:95:e4:e7:87:48:cf:68:29:bc:4c:67:c1:f1:ff:a0:ce:7a: 37:85:3c:48:6d:8e:af:b0:51:ce:fb:04:a8:37:3d:da:7e:33: fb:bd:1b:27:f8:48:8c:76:7e:8f:37:76:42:2b:54:43:aa:00: a8:f1:77:70:b0:70:56:2c:51:38:1e:c2:1d:e1:48:58:de:46: f1:6b:ea:e5:45:28:a0:00:ec:e0:6e:8d:cf:fb:74:97:80:28: fa:07:1c:04:6e:96:6c:16:9f:68:8b:6d:d5:2d:f1:ad:13:49: d7:f9:cb:a0:42:42:68:04:9b:a6:ec:e2:9e:82:61:2b:9a:90: 28:dd:33:54:3a:16:f5:b8:66:66:41:27:52:59:4e:24:ef:47: 20:9d:db:0d:5e:99:1b:74:1d:0d:72:f5:f0:46:5d:be:76:50: 0d:aa:92:01:fd:88:02:bb:ab:14:de:42:59:22:42:99:88:c8: 67:7e:c7:cc -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUCidJWmJwcf4Y1CBwTCFRArq3xA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5Q0Y4NkM5ODE2MEJDNUNBMEYxQTcyREI0NTgyNjE3 MkM0QTczOTAeFw0yNjAxMTAxMzMwMDBaFw0yNzAxMDkxMzM1MDBaMDMxMTAvBgNV BAMTKDc1Mjg1RjI1MTMzMzU1RDAxM0VBQ0RBMTMxRTc4OUUxREEzQjA4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioPI6IyiD4UtuFZ77uXO+93w4 XDl9HXMHBDcP8cMVejqYE2Yw8eUW2cyxoW+N1wA9cRZ/8xLPXkntptUOc8dDHqVn ZLqzydDCyT1dBAs52F1TWPkIB8dBMGGuOI4KeLRLsHyq7ybtlGfDYDtvL+PvCgfJ k7KE9bkWN/9gUdtQ/McizEbc+BOQrS7x3jTyHx0oCcL7bIZOyup2/BaGW5h/gEKM EcIeaaCb5Uw/hz7FLAsq1qefImCa8GBltPu8Z0cn9ex8JI115cYuA/YU0/LtE48x o8uxfunupd5Iczyflr/X21w3GqiYqDe81T8dHkwADKr+3SnCdYrSFbQWTj9VAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUdShfJRMzVdAT6s2hMeeJ4do7CAwwHwYDVR0j BBgwFoAUipz4bJgWC8XKDxpy20WCYXLEpzkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QTVGQjQzRTVFMEYzQ0EzQTA4QjU2MDlEOTZFREVCOTUx NERFNERBRUFCRkNBNjlFQzI1N0FGMUM0N0REMUUzLzAvOEE5Q0Y4NkM5ODE2MEJD NUNBMEYxQTcyREI0NTgyNjE3MkM0QTczOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTlDRjg2Qzk4MTYwQkM1Q0Ew RjFBNzJEQjQ1ODI2MTcyQzRBNzM5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEE1RkI0M0U1RTBGM0NBM0EwOEI1NjA5RDk2RURFQjk1MTRERTREQUVB QkZDQTY5RUMyNTdBRjFDNDdERDFFMy8wLzMyMzAzMDJlMzEzNTMwMmUzMjM0Mzgy ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzMzMDM3MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHI lvgwDQYJKoZIhvcNAQELBQADggEBAGqfvUyWn/HJYGfVGYFpYq5By2atNgz8Vwfk n+GDY9oB9BpY4m0pWevBEgGhonJD2vUmrMDKe4dKmujTQtDiSwRrHZAq/TnkQ6uV 5OeHSM9oKbxMZ8Hx/6DOejeFPEhtjq+wUc77BKg3Pdp+M/u9Gyf4SIx2fo83dkIr VEOqAKjxd3CwcFYsUTgewh3hSFjeRvFr6uVFKKAA7OBujc/7dJeAKPoHHARulmwW n2iLbdUt8a0TSdf5y6BCQmgEm6bs4p6CYSuakCjdM1Q6FvW4ZmZBJ1JZTiTvRyCd 2w1emRt0HQ1y9fBGXb52UA2qkgH9iAK7qxTeQlkiQpmIyGd+x8w= -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:23 2026 by rpki-client