This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa File: 3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa (raw, json) Hash identifier: f1esh0eeev3D9Ui8sSLLk1pUbI1VnqcQ/wgPnRUKqw0= Subject key identifier: 68:B4:F1:3F:BB:A1:85:A3:F5:DB:30:C1:8B:C3:20:0B:74:19:22:56 Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B Certificate serial: 4E169F30D79302762ACD564E1ED040C578385110 Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa Signing time: Tue 06 Jan 2026 19:22:13 +0000 ROA not before: Tue 06 Jan 2026 19:17:13 +0000 ROA not after: Tue 05 Jan 2027 19:22:13 +0000 asID: 27790 IP address blocks: 170.210.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 15:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:16:9f:30:d7:93:02:76:2a:cd:56:4e:1e:d0:40:c5:78:38:51:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B Validity Not Before: Jan 6 19:17:13 2026 GMT Not After : Jan 5 19:22:13 2027 GMT Subject: CN=68B4F13FBBA185A3F5DB30C18BC3200B74192256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:29:05:73:7c:a3:3e:a5:70:42:f0:02:2b: 46:de:2c:9a:e8:b8:76:a4:cd:81:d3:be:c0:28:6d: 23:1a:af:27:ad:f5:08:a0:4b:37:ef:cd:f1:b2:4c: d8:78:96:83:60:4c:a7:97:3e:01:72:80:55:5a:3f: ea:4f:b2:cc:45:ab:ee:e7:86:57:f3:76:cc:f4:f0: 1e:6c:0d:f5:c4:16:8b:04:f8:92:18:e9:3c:f4:6e: 09:09:4e:ef:e2:46:c1:ed:c8:2e:b0:f0:dd:78:41: 8d:ee:57:dc:c9:36:43:17:51:8f:33:59:a9:b0:c9: 5e:64:e8:9d:f7:57:6d:18:45:92:64:61:8a:43:15: 79:01:fa:d7:c8:d2:9c:63:07:63:cb:6c:47:07:53: a0:69:13:96:59:7b:d4:be:d6:b8:47:53:37:10:0a: ed:68:a4:43:5a:08:d0:39:63:6e:b1:26:9a:d3:32: d7:b9:71:1d:ae:9f:18:7f:3b:4f:b9:18:35:54:64: f6:e9:10:e3:18:84:f3:07:b5:ec:be:ce:77:42:48: f7:7c:de:57:cf:86:ce:86:5b:57:06:ab:a6:13:87: 5d:53:2a:ca:00:db:72:d0:8b:6a:22:41:a5:f4:c5: 24:09:84:92:04:20:10:f2:cb:28:ea:e7:df:64:d6: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:F1:3F:BB:A1:85:A3:F5:DB:30:C1:8B:C3:20:0B:74:19:22:56 X509v3 Authority Key Identifier: keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.210.248.0/21 Signature Algorithm: sha256WithRSAEncryption b9:d6:b6:2a:60:08:22:3c:43:23:e8:b6:ff:36:09:8d:2f:0c: c3:3a:62:4d:2b:1e:20:33:a5:ac:f4:11:67:b7:10:17:1d:7a: f6:60:ad:1c:e6:f3:76:32:6d:cb:a2:28:03:12:59:18:35:eb: 57:c6:95:86:e1:ae:66:4e:23:71:d2:90:1b:11:e7:c8:0a:35: 48:0e:f4:7d:82:2c:3b:f8:4b:2f:65:98:2e:12:7e:2f:91:f9: b5:f8:8e:e9:81:43:12:38:30:24:3e:19:5d:13:11:7d:a1:b5: d4:21:6d:c7:50:b4:01:39:79:96:23:6f:80:04:42:8a:07:66: a0:cf:f7:32:ee:7a:6f:37:bd:90:9f:0c:18:e8:40:ac:8d:f7: ff:55:87:60:9b:bc:c5:27:ef:e1:be:be:04:1b:46:22:f3:ca: 9c:38:09:d7:49:09:93:92:9d:77:01:d7:34:17:cb:90:29:61: 3c:fe:4c:2d:26:fc:17:11:15:cc:25:00:d3:69:29:68:e3:dc: 9b:3f:8c:13:42:c9:12:d9:e8:52:3e:ae:78:96:93:55:49:25: 62:64:ec:76:1d:ae:0a:97:54:1e:34:a9:78:31:7c:94:a9:45: 22:a9:04:71:d7:3c:b3:59:71:7c:67:e2:ad:be:91:73:4a:3d: 06:d1:bd:f4 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUThafMNeTAnYqzVZOHtBAxXg4URAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz RDQ1N0YwQjAeFw0yNjAxMDYxOTE3MTNaFw0yNzAxMDUxOTIyMTNaMDMxMTAvBgNV BAMTKDY4QjRGMTNGQkJBMTg1QTNGNURCMzBDMThCQzMyMDBCNzQxOTIyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUcikFc3yjPqVwQvACK0beLJro uHakzYHTvsAobSMaryet9QigSzfvzfGyTNh4loNgTKeXPgFygFVaP+pPssxFq+7n hlfzdsz08B5sDfXEFosE+JIY6Tz0bgkJTu/iRsHtyC6w8N14QY3uV9zJNkMXUY8z WamwyV5k6J33V20YRZJkYYpDFXkB+tfI0pxjB2PLbEcHU6BpE5ZZe9S+1rhHUzcQ Cu1opENaCNA5Y26xJprTMte5cR2unxh/O0+5GDVUZPbpEOMYhPMHtey+zndCSPd8 3lfPhs6GW1cGq6YTh11TKsoA23LQi2oiQaX0xSQJhJIEIBDyyyjq599k1nklAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUaLTxP7uhhaP12zDBi8MgC3QZIlYwHwYDVR0j BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0 MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1 NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMjM0Mzgy ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM3MzczOTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqtL4 MA0GCSqGSIb3DQEBCwUAA4IBAQC51rYqYAgiPEMj6Lb/NgmNLwzDOmJNKx4gM6Ws 9BFntxAXHXr2YK0c5vN2Mm3LoigDElkYNetXxpWG4a5mTiNx0pAbEefICjVIDvR9 giw7+EsvZZguEn4vkfm1+I7pgUMSODAkPhldExF9obXUIW3HULQBOXmWI2+ABEKK B2agz/cy7npvN72QnwwY6ECsjff/VYdgm7zFJ+/hvr4EG0Yi88qcOAnXSQmTkp13 Adc0F8uQKWE8/kwtJvwXERXMJQDTaSlo49ybP4wTQskS2ehSPq54lpNVSSViZOx2 Ha4Kl1QeNKl4MXyUqUUiqQRx1zyzWXF8Z+KtvpFzSj0G0b30 -----END CERTIFICATE-----Generated at Sun Jan 25 19:09:20 2026 by rpki-client