This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa File: 3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa (raw, json) Hash identifier: 3MxTH+HldtukuvWBDBdfzDqKLtWq18XiCGBgUJLq3Z4= Subject key identifier: 16:DF:5E:E3:4A:E5:52:1D:C7:7F:FD:7C:B9:68:0E:F5:D8:77:3E:58 Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B Certificate serial: 0C3A424C245E088244A019F376E94C73D5750858 Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa Signing time: Tue 06 Jan 2026 19:22:08 +0000 ROA not before: Tue 06 Jan 2026 19:17:08 +0000 ROA not after: Tue 05 Jan 2027 19:22:08 +0000 asID: 27875 IP address blocks: 170.210.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 15:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3a:42:4c:24:5e:08:82:44:a0:19:f3:76:e9:4c:73:d5:75:08:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B Validity Not Before: Jan 6 19:17:08 2026 GMT Not After : Jan 5 19:22:08 2027 GMT Subject: CN=16DF5EE34AE5521DC77FFD7CB9680EF5D8773E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:2b:0d:e0:a7:d8:40:33:53:ae:01:ff:ea: d1:dc:c8:6c:c1:ee:3b:d9:03:ec:e5:85:05:2f:d0: f2:fb:2b:77:9a:01:48:e4:a0:be:66:53:ae:af:67: f6:d5:9c:47:ac:49:b6:73:3e:1c:5d:bb:88:7b:9a: 11:b1:77:7e:88:cb:9f:30:b2:0c:42:95:fe:90:c9: cf:50:86:1c:6b:be:54:21:77:2d:f1:c8:a1:b5:14: a6:a4:44:ca:31:51:ab:c7:45:0d:4d:e8:f8:c9:04: 97:c3:ee:14:e0:6f:2b:a7:9a:9c:d1:f1:e8:52:0d: 9e:c4:eb:34:0d:39:ff:db:10:d1:a3:31:7b:38:51: 56:60:75:1a:f4:eb:c0:77:f6:0b:54:84:fd:f0:cc: b0:20:fb:9a:ee:a3:19:bf:53:84:54:dd:a6:0d:3c: f5:b8:b9:7e:93:ae:c8:7e:8e:36:d4:b1:71:63:ed: 2e:22:af:50:2a:91:2f:02:58:d9:ea:b0:ff:60:d7: 89:77:0a:90:03:cb:d2:3c:29:66:a8:7a:af:e9:37: 4a:b5:e7:57:ce:bf:17:d3:73:5d:4f:b3:90:f6:b6: 15:c9:f7:a7:76:79:65:9c:20:38:4a:ad:22:7c:14: c1:31:1f:b4:d6:c7:2c:22:ce:7a:a1:e6:f9:61:c0: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DF:5E:E3:4A:E5:52:1D:C7:7F:FD:7C:B9:68:0E:F5:D8:77:3E:58 X509v3 Authority Key Identifier: keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3134342e302f32312d3234203d3e203237383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.210.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:be:eb:76:07:ed:33:70:7d:21:6b:b0:db:5d:87:25:5a:09: cb:c6:f2:ef:09:c6:37:f0:b7:47:b9:e9:c5:99:d2:39:31:e8: 72:a8:da:d5:e8:7c:95:d0:e9:8a:94:93:30:1c:7d:60:b1:d7: 78:c1:e2:9d:c8:c3:c6:d0:11:7d:1f:fe:b6:1a:2d:bc:28:5c: bc:42:d1:21:3d:f3:38:9a:42:16:b7:5c:81:d1:fd:37:ed:dc: bf:ca:f0:ba:c5:d0:ae:c3:eb:53:ed:e5:b9:4d:88:3c:4a:ef: 70:87:f1:9f:ec:64:f0:40:b5:a9:d3:5a:f7:4c:28:4f:73:b2: 43:36:de:ba:13:4e:26:c2:4d:89:05:c8:07:a3:c6:35:98:4c: 3f:59:6f:be:fb:e4:d5:8b:d0:6c:5d:79:4d:10:ba:25:9d:8a: c9:71:34:ea:29:e4:85:5b:06:0a:73:d7:5b:c7:dd:e6:24:6f: df:9c:c7:5b:b5:90:5f:4a:7c:c7:f6:db:0b:cf:b3:51:5f:5b: 68:59:65:09:27:ce:4c:78:9b:16:a4:7b:9e:5e:cf:52:89:65: 22:c9:0b:52:5c:a6:41:d3:70:01:92:d5:17:f3:44:8c:b9:91: 2e:d9:14:4c:63:1b:10:ac:b4:27:ee:ba:0d:b2:4d:eb:4e:92: c1:d9:c5:74 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUDDpCTCReCIJEoBnzdulMc9V1CFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz RDQ1N0YwQjAeFw0yNjAxMDYxOTE3MDhaFw0yNzAxMDUxOTIyMDhaMDMxMTAvBgNV BAMTKDE2REY1RUUzNEFFNTUyMURDNzdGRkQ3Q0I5NjgwRUY1RDg3NzNFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3SsN4KfYQDNTrgH/6tHcyGzB 7jvZA+zlhQUv0PL7K3eaAUjkoL5mU66vZ/bVnEesSbZzPhxdu4h7mhGxd36Iy58w sgxClf6Qyc9QhhxrvlQhdy3xyKG1FKakRMoxUavHRQ1N6PjJBJfD7hTgbyunmpzR 8ehSDZ7E6zQNOf/bENGjMXs4UVZgdRr068B39gtUhP3wzLAg+5ruoxm/U4RU3aYN PPW4uX6Trsh+jjbUsXFj7S4ir1AqkS8CWNnqsP9g14l3CpADy9I8KWaoeq/pN0q1 51fOvxfTc11Ps5D2thXJ96d2eWWcIDhKrSJ8FMExH7TWxywiznqh5vlhwLyHAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUFt9e40rlUh3Hf/18uWgO9dh3PlgwHwYDVR0j BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0 MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1 NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMTM0MzQy ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzgzNzM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqtKQ MA0GCSqGSIb3DQEBCwUAA4IBAQCMvut2B+0zcH0ha7DbXYclWgnLxvLvCcY38LdH uenFmdI5MehyqNrV6HyV0OmKlJMwHH1gsdd4weKdyMPG0BF9H/62Gi28KFy8QtEh PfM4mkIWt1yB0f037dy/yvC6xdCuw+tT7eW5TYg8Su9wh/Gf7GTwQLWp01r3TChP c7JDNt66E04mwk2JBcgHo8Y1mEw/WW++++TVi9BsXXlNELolnYrJcTTqKeSFWwYK c9dbx93mJG/fnMdbtZBfSnzH9tsLz7NRX1toWWUJJ85MeJsWpHueXs9SiWUiyQtS XKZB03ABktUX80SMuZEu2RRMYxsQrLQn7roNsk3rTpLB2cV0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:09:24 2026 by rpki-client