This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa File: 3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa (raw, json) Hash identifier: zw8gr/HLzpkyOptZHFfKu+62LAWNeGilAHDTqzkK9S8= Subject key identifier: B4:38:C4:F2:9B:A1:4A:93:B0:D4:5B:AE:C4:95:91:2D:80:AA:F2:14 Certificate issuer: /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231 Certificate serial: 1CE109D3F6C10D140777AE5F7D705907E230DFA9 Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa Signing time: Tue 06 Jan 2026 19:19:27 +0000 ROA not before: Tue 06 Jan 2026 19:14:27 +0000 ROA not after: Tue 05 Jan 2027 19:19:27 +0000 asID: 263768 IP address blocks: 170.81.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e1:09:d3:f6:c1:0d:14:07:77:ae:5f:7d:70:59:07:e2:30:df:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231 Validity Not Before: Jan 6 19:14:27 2026 GMT Not After : Jan 5 19:19:27 2027 GMT Subject: CN=B438C4F29BA14A93B0D45BAEC495912D80AAF214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:fd:c7:2e:ce:96:d0:74:e3:c8:6e:7d:4a: 39:08:be:d5:1c:b7:75:f1:eb:2b:cb:6c:eb:15:9c: 8f:72:72:26:ee:0f:ea:cb:c2:49:5e:7e:7d:73:b5: 5b:95:c8:e7:ea:bc:00:0b:42:bc:a0:dd:e6:42:89: d6:64:10:d3:ea:a7:00:78:5e:0d:25:33:dc:4b:31: c3:9a:56:01:eb:e2:1c:ad:c0:88:3c:a9:6c:5c:cd: 93:87:74:98:3d:df:6a:d4:fc:c0:84:29:66:bd:ef: 70:0c:33:14:80:93:11:1a:9e:22:94:14:28:ed:dd: 3c:f3:ac:0c:33:84:ab:47:33:9d:7e:e8:4e:f0:69: 3c:2c:9d:34:71:74:32:6f:cf:ca:2d:96:36:7a:25: 30:51:ff:46:04:65:f3:62:7f:14:c5:d7:6b:2c:8c: 70:a6:ae:ca:bd:be:27:72:fc:16:b7:58:b2:b7:60: 49:82:ca:f5:b3:b4:bd:3c:cc:76:e7:75:a1:79:1d: da:a3:54:04:10:91:99:87:23:7f:b5:67:2a:f8:9d: c1:04:3e:f1:8b:d9:ef:05:7c:91:d7:f5:3b:a1:a0: b3:e3:6b:e6:e3:22:a1:33:ea:16:0b:1b:da:06:b1: 27:1a:fd:cf:6e:63:f0:0b:f6:6c:a0:3e:6f:ab:f9: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:C4:F2:9B:A1:4A:93:B0:D4:5B:AE:C4:95:91:2D:80:AA:F2:14 X509v3 Authority Key Identifier: keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.212.0/22 Signature Algorithm: sha256WithRSAEncryption 85:0f:12:c5:00:38:21:41:74:86:a6:dc:ab:83:a9:b7:17:be: 40:70:1b:66:5f:74:43:2d:c1:fd:98:ca:56:b6:c7:07:08:ef: a4:1f:8a:c1:86:d5:94:1e:bc:d8:52:d5:d7:a6:1c:0c:97:d3: 28:bb:29:5b:11:69:9b:77:3c:2e:f5:f8:c4:70:03:a4:ef:1c: 1e:8b:d9:73:65:d0:eb:6c:73:b1:8b:64:49:f7:d8:4d:2b:5b: ad:d1:f7:bf:f6:3a:15:f4:a3:01:3d:05:47:b4:cd:5e:a5:8f: 10:bc:8f:77:51:08:35:53:86:74:b0:37:1d:79:6b:9e:08:2b: 12:4b:87:4b:bc:36:17:21:18:f5:ad:3a:c7:6f:19:86:0d:c6: eb:dc:39:ec:25:fa:15:62:5b:72:96:05:42:d4:1e:7d:d4:c1: f3:0f:a1:48:85:04:b5:ea:ad:63:97:b9:69:36:0d:7d:59:2c: 4c:3b:4d:09:b7:02:dc:68:41:7b:bb:f9:2f:15:30:65:bd:a8: d3:eb:d7:43:91:7f:a3:7d:72:9a:d7:ad:d0:e0:55:a2:37:62: 7d:a0:b9:a2:11:af:39:fc:bf:1d:02:58:40:f9:75:0b:43:a2: 7c:73:fd:6d:63:8f:1e:20:65:cd:6d:83:82:a0:ea:99:89:1a: d0:e5:64:c1 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUHOEJ0/bBDRQHd65ffXBZB+Iw36kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYzRkZFQUFBMDlBNENGQ0M2MzVFNDhBNENGQzA2NTlC Q0JBNDIzMTAeFw0yNjAxMDYxOTE0MjdaFw0yNzAxMDUxOTE5MjdaMDMxMTAvBgNV BAMTKEI0MzhDNEYyOUJBMTRBOTNCMEQ0NUJBRUM0OTU5MTJEODBBQUYyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoP3HLs6W0HTjyG59SjkIvtUc t3Xx6yvLbOsVnI9ycibuD+rLwklefn1ztVuVyOfqvAALQryg3eZCidZkENPqpwB4 Xg0lM9xLMcOaVgHr4hytwIg8qWxczZOHdJg932rU/MCEKWa973AMMxSAkxEaniKU FCjt3TzzrAwzhKtHM51+6E7waTwsnTRxdDJvz8otljZ6JTBR/0YEZfNifxTF12ss jHCmrsq9vidy/Ba3WLK3YEmCyvWztL08zHbndaF5HdqjVAQQkZmHI3+1Zyr4ncEE PvGL2e8FfJHX9TuhoLPja+bjIqEz6hYLG9oGsSca/c9uY/AL9mygPm+r+cBlAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUtDjE8puhSpOw1FuuxJWRLYCq8hQwHwYDVR0j BBgwFoAU7z/+qqCaTPzGNeSKTPwGWby6QjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RkJFMjUzNzcxNzY0OEJFNDU4NEUwRjYzRTk4Q0I3NTEx NkU3ODcyRjFFRDM4NTREMjRCN0RFREVBOTRCNUNFLzAvRUYzRkZFQUFBMDlBNENG Q0M2MzVFNDhBNENGQzA2NTlCQ0JBNDIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNGRkVBQUEwOUE0Q0ZDQzYz NUU0OEE0Q0ZDMDY1OUJDQkE0MjMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUZCRTI1Mzc3MTc2NDhCRTQ1ODRFMEY2M0U5OENCNzUxMTZFNzg3MkYx RUQzODU0RDI0QjdERURFQTk0QjVDRS8wLzMxMzczMDJlMzgzMTJlMzIzMTMyMmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlHU MA0GCSqGSIb3DQEBCwUAA4IBAQCFDxLFADghQXSGptyrg6m3F75AcBtmX3RDLcH9 mMpWtscHCO+kH4rBhtWUHrzYUtXXphwMl9MouylbEWmbdzwu9fjEcAOk7xwei9lz ZdDrbHOxi2RJ99hNK1ut0fe/9joV9KMBPQVHtM1epY8QvI93UQg1U4Z0sDcdeWue CCsSS4dLvDYXIRj1rTrHbxmGDcbr3DnsJfoVYltylgVC1B591MHzD6FIhQS16q1j l7lpNg19WSxMO00JtwLcaEF7u/kvFTBlvajT69dDkX+jfXKa163Q4FWiN2J9oLmi Ea85/L8dAlhA+XULQ6J8c/1tY48eIGXNbYOCoOqZiRrQ5WTB -----END CERTIFICATE-----Generated at Sun Jan 25 08:31:13 2026 by rpki-client