This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3133382e39392e3132382e302f32322d3234203d3e20323633373638.roa File: 3133382e39392e3132382e302f32322d3234203d3e20323633373638.roa (raw, json) Hash identifier: DrhjQOldo3T6UDv+bag79UU8AvUTQ3GSD2QMvNT3Lko= Subject key identifier: 54:4F:76:05:43:19:33:FD:44:5F:6F:FD:8E:1A:08:74:B5:A4:4B:35 Certificate issuer: /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231 Certificate serial: 20218CB9EE4A2220B96C259E6044FCE03826AAB8 Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3133382e39392e3132382e302f32322d3234203d3e20323633373638.roa Signing time: Tue 06 Jan 2026 19:19:27 +0000 ROA not before: Tue 06 Jan 2026 19:14:27 +0000 ROA not after: Tue 05 Jan 2027 19:19:27 +0000 asID: 263768 IP address blocks: 138.99.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:21:8c:b9:ee:4a:22:20:b9:6c:25:9e:60:44:fc:e0:38:26:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231 Validity Not Before: Jan 6 19:14:27 2026 GMT Not After : Jan 5 19:19:27 2027 GMT Subject: CN=544F7605431933FD445F6FFD8E1A0874B5A44B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:08:39:a5:74:62:ab:f4:95:0b:69:94:a0: 27:92:cf:5f:aa:b5:cd:02:5e:b7:2a:5a:71:1f:2e: 5f:c6:7e:dc:c0:37:ca:3a:04:31:e4:f0:26:aa:a8: b5:e9:68:c7:02:c5:fa:98:f3:8f:29:34:a6:a7:df: 69:ea:dd:1b:1b:85:21:d7:52:fe:86:fd:48:6d:d6: e6:17:6a:66:b0:dd:1b:04:a8:92:34:da:f6:61:e8: 94:3c:a4:d1:24:c7:bc:2b:9e:a7:f6:f7:76:e3:be: 17:19:ce:94:d8:69:44:76:ab:22:38:c6:b0:0f:de: e8:dc:a5:d3:75:87:d0:a9:dd:97:7e:3c:c7:e1:8e: b6:99:38:0d:08:31:4b:37:7b:a0:4a:8a:d2:90:1b: cf:4f:09:41:c9:3a:26:de:dc:2e:66:b6:c5:33:36: ca:1e:d8:8e:be:99:b5:43:b6:28:98:28:e8:64:80: 4f:a0:32:48:91:4b:e3:ea:80:5a:ad:97:6f:d3:76: 39:f1:44:94:ef:6f:eb:2a:6c:96:a3:27:82:ce:e7: 94:42:e1:b4:70:81:3f:fb:16:0c:76:20:cb:7d:38: 7d:17:af:fd:48:a0:46:b2:a9:0c:0f:bf:fe:d9:59: 35:09:e6:f6:2d:72:eb:84:37:a6:09:63:55:bd:8e: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4F:76:05:43:19:33:FD:44:5F:6F:FD:8E:1A:08:74:B5:A4:4B:35 X509v3 Authority Key Identifier: keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3133382e39392e3132382e302f32322d3234203d3e20323633373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.128.0/22 Signature Algorithm: sha256WithRSAEncryption 77:98:43:8d:b9:df:f2:d8:81:e7:b1:5f:eb:06:8f:cc:df:66: 3c:f0:fa:0b:8c:76:d0:60:27:9b:c1:16:97:0b:15:34:60:e8: 00:9a:26:9a:2f:97:cc:d3:5d:37:1c:87:21:21:24:f5:07:cb: b4:d2:b6:95:c2:c3:09:02:52:10:99:14:38:b9:45:13:a1:62: 12:07:68:45:e2:11:ec:d7:76:b3:0c:da:36:68:e8:fc:1a:78: ee:37:b7:1e:1b:15:24:5d:e6:89:e8:5b:ae:1e:4e:78:c6:46: 63:8f:c5:86:f4:a9:a7:44:36:2a:77:4a:e7:c1:99:ed:f1:bd: 7e:fd:38:12:91:5b:5a:ca:4b:05:a9:68:33:32:c0:15:44:80: ac:75:7b:c9:82:89:23:fa:15:86:a0:a9:9c:a2:82:4a:a7:34: c6:88:bd:9d:30:46:69:07:db:e6:b2:5c:5c:93:fa:4c:a8:f3: ab:da:2b:ef:71:db:ca:16:0e:41:cc:5b:0e:7c:9b:73:d9:6f: e3:06:e6:5d:55:d4:94:92:74:8e:01:38:fd:52:45:84:23:50: 37:20:54:2f:6c:95:af:18:b2:b2:fb:08:04:0f:a6:49:55:5b: c5:7d:b1:8e:33:74:9d:c7:14:7e:96:d7:dd:7e:7b:f7:e9:a4: 5f:73:44:9a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUICGMue5KIiC5bCWeYET84DgmqrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYzRkZFQUFBMDlBNENGQ0M2MzVFNDhBNENGQzA2NTlC Q0JBNDIzMTAeFw0yNjAxMDYxOTE0MjdaFw0yNzAxMDUxOTE5MjdaMDMxMTAvBgNV BAMTKDU0NEY3NjA1NDMxOTMzRkQ0NDVGNkZGRDhFMUEwODc0QjVBNDRCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaQg5pXRiq/SVC2mUoCeSz1+q tc0CXrcqWnEfLl/GftzAN8o6BDHk8CaqqLXpaMcCxfqY848pNKan32nq3RsbhSHX Uv6G/Uht1uYXamaw3RsEqJI02vZh6JQ8pNEkx7wrnqf293bjvhcZzpTYaUR2qyI4 xrAP3ujcpdN1h9Cp3Zd+PMfhjraZOA0IMUs3e6BKitKQG89PCUHJOibe3C5mtsUz Nsoe2I6+mbVDtiiYKOhkgE+gMkiRS+PqgFqtl2/TdjnxRJTvb+sqbJajJ4LO55RC 4bRwgT/7Fgx2IMt9OH0Xr/1IoEayqQwPv/7ZWTUJ5vYtcuuEN6YJY1W9jqczAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUVE92BUMZM/1EX2/9jhoIdLWkSzUwHwYDVR0j BBgwFoAU7z/+qqCaTPzGNeSKTPwGWby6QjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RkJFMjUzNzcxNzY0OEJFNDU4NEUwRjYzRTk4Q0I3NTEx NkU3ODcyRjFFRDM4NTREMjRCN0RFREVBOTRCNUNFLzAvRUYzRkZFQUFBMDlBNENG Q0M2MzVFNDhBNENGQzA2NTlCQ0JBNDIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNGRkVBQUEwOUE0Q0ZDQzYz NUU0OEE0Q0ZDMDY1OUJDQkE0MjMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUZCRTI1Mzc3MTc2NDhCRTQ1ODRFMEY2M0U5OENCNzUxMTZFNzg3MkYx RUQzODU0RDI0QjdERURFQTk0QjVDRS8wLzMxMzMzODJlMzkzOTJlMzEzMjM4MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCimOA MA0GCSqGSIb3DQEBCwUAA4IBAQB3mEONud/y2IHnsV/rBo/M32Y88PoLjHbQYCeb wRaXCxU0YOgAmiaaL5fM0103HIchIST1B8u00raVwsMJAlIQmRQ4uUUToWISB2hF 4hHs13azDNo2aOj8GnjuN7ceGxUkXeaJ6FuuHk54xkZjj8WG9KmnRDYqd0rnwZnt 8b1+/TgSkVtayksFqWgzMsAVRICsdXvJgokj+hWGoKmcooJKpzTGiL2dMEZpB9vm slxck/pMqPOr2ivvcdvKFg5BzFsOfJtz2W/jBuZdVdSUknSOATj9UkWEI1A3IFQv bJWvGLKy+wgED6ZJVVvFfbGOM3SdxxR+ltfdfnv36aRfc0Sa -----END CERTIFICATE-----Generated at Sun Jan 25 10:04:51 2026 by rpki-client