This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa File: 3136372e3234392e382e302f32322d3234203d3e203237383433.roa (raw, json) Hash identifier: zlySKX+t1TxeYlLRGMXMRudiNykM6qvZq1dcEcz7a3g= Subject key identifier: 40:F2:46:77:BD:51:A5:92:A5:BD:3E:37:BB:83:E7:DC:84:C3:0A:B2 Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84 Certificate serial: 1D2139A1E9DA47BFCC80C45C98FD455CD8F5399B Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa Signing time: Tue 06 Jan 2026 19:03:46 +0000 ROA not before: Tue 06 Jan 2026 18:58:46 +0000 ROA not after: Tue 05 Jan 2027 19:03:46 +0000 asID: 27843 IP address blocks: 167.249.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 11:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:21:39:a1:e9:da:47:bf:cc:80:c4:5c:98:fd:45:5c:d8:f5:39:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84 Validity Not Before: Jan 6 18:58:46 2026 GMT Not After : Jan 5 19:03:46 2027 GMT Subject: CN=40F24677BD51A592A5BD3E37BB83E7DC84C30AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:14:49:cb:73:fd:54:38:9f:3b:6f:34:6e: 79:89:21:ce:d9:ae:15:2d:8a:42:e1:dd:6f:7a:6f: d9:56:73:48:2e:b3:6a:8b:62:6c:93:5e:13:1f:c0: e3:16:7b:14:2d:58:9f:3b:5f:91:9d:58:3f:34:a4: 27:89:82:e6:c0:e9:ee:75:52:93:45:86:1d:de:41: 39:d8:64:96:9f:a0:58:b8:b0:2d:99:cb:8f:cd:6b: 78:74:72:9e:28:14:0b:19:5e:f1:48:f7:6a:6f:b1: 3b:a9:1a:97:5f:9d:e9:64:3f:46:5a:4f:d4:8a:6b: 06:18:8b:ae:67:00:94:a7:0a:25:cf:5c:92:48:7a: 49:0d:27:a8:cf:a5:27:8b:3e:42:9c:cd:29:f9:13: cb:ec:f0:e7:80:82:aa:cb:46:d0:01:61:5c:3c:25: c9:f7:a5:f5:91:1b:e0:5f:74:55:2c:1a:b6:95:32: 24:b5:3b:9f:a8:9a:99:ed:4a:4c:42:35:52:17:f0: a3:6a:50:c7:21:27:3a:54:8d:a4:9c:bc:4e:94:06: f4:5b:b1:fa:f4:e7:42:b5:d5:24:65:c5:5c:85:a2: d0:84:b6:f3:42:e2:19:f1:84:27:ee:a9:10:4e:a2: fa:a2:51:68:8b:11:f3:06:f2:29:97:b0:7c:ea:41: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:46:77:BD:51:A5:92:A5:BD:3E:37:BB:83:E7:DC:84:C3:0A:B2 X509v3 Authority Key Identifier: keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:d7:15:32:df:c8:b4:39:63:2c:8f:26:1c:d5:eb:8a:2b:a6: 0e:27:0c:3d:c4:df:ac:31:9e:75:04:2d:be:88:b4:76:ed:72: 37:4b:6a:c1:73:70:2d:f0:67:ab:d9:b0:e3:49:0c:ff:33:92: 45:11:06:95:72:41:42:b3:80:06:cf:64:ef:2d:63:20:1e:f1: 52:c2:78:c8:dc:46:e7:93:27:40:6c:d0:20:f7:fc:46:f0:74: ef:82:9c:55:9d:a5:65:0d:fc:c4:ad:11:17:c3:12:e9:6d:79: 97:2f:36:4b:ac:8f:c5:68:f3:14:f6:53:73:0a:2b:2f:f8:97: e1:43:76:56:69:a9:9e:58:d7:83:e5:bf:1c:7e:9c:be:8d:3b: a8:ac:9e:5e:8c:53:27:7f:9e:3e:59:fe:78:76:6d:7e:4d:f5: 3a:50:e8:f1:7d:7a:c4:a7:9c:cb:6c:1e:5b:f3:71:70:e6:2f: f7:dd:69:9a:d5:48:47:f6:3e:12:3a:d0:87:75:c7:a6:ff:75: 20:02:63:98:82:fe:be:8a:3c:00:ca:40:55:6a:bf:86:63:75: 65:a5:58:5f:17:3a:bc:e8:42:53:f8:46:b6:07:e1:ae:32:3e: 3f:d9:3d:17:ed:05:ca:3b:d7:b2:31:f3:b1:1d:6b:74:f7:2f: 73:b7:8f:a4 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUHSE5oenaR7/MgMRcmP1FXNj1OZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy NkNFOEY4NDAeFw0yNjAxMDYxODU4NDZaFw0yNzAxMDUxOTAzNDZaMDMxMTAvBgNV BAMTKDQwRjI0Njc3QkQ1MUE1OTJBNUJEM0UzN0JCODNFN0RDODRDMzBBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7BRJy3P9VDifO280bnmJIc7Z rhUtikLh3W96b9lWc0gus2qLYmyTXhMfwOMWexQtWJ87X5GdWD80pCeJgubA6e51 UpNFhh3eQTnYZJafoFi4sC2Zy4/Na3h0cp4oFAsZXvFI92pvsTupGpdfnelkP0Za T9SKawYYi65nAJSnCiXPXJJIekkNJ6jPpSeLPkKczSn5E8vs8OeAgqrLRtABYVw8 Jcn3pfWRG+BfdFUsGraVMiS1O5+ompntSkxCNVIX8KNqUMchJzpUjaScvE6UBvRb sfr050K11SRlxVyFotCEtvNC4hnxhCfuqRBOovqiUWiLEfMG8imXsHzqQRh/AgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUQPJGd71RpZKlvT43u4Pn3ITDCrIwHwYDVR0j BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0 NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5 QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzYzNzJlMzIzNDM5MmUzODJlMzAy ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczODM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKn+QgwDQYJ KoZIhvcNAQELBQADggEBAH3XFTLfyLQ5YyyPJhzV64orpg4nDD3E36wxnnUELb6I tHbtcjdLasFzcC3wZ6vZsONJDP8zkkURBpVyQUKzgAbPZO8tYyAe8VLCeMjcRueT J0Bs0CD3/EbwdO+CnFWdpWUN/MStERfDEulteZcvNkusj8Vo8xT2U3MKKy/4l+FD dlZpqZ5Y14Plvxx+nL6NO6isnl6MUyd/nj5Z/nh2bX5N9TpQ6PF9esSnnMtsHlvz cXDmL/fdaZrVSEf2PhI60Id1x6b/dSACY5iC/r6KPADKQFVqv4ZjdWWlWF8XOrzo QlP4RrYH4a4yPj/ZPRftBco717Ix87Eda3T3L3O3j6Q= -----END CERTIFICATE-----Generated at Sun Jan 25 12:57:27 2026 by rpki-client