This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3233362e302f32322d3234203d3e203237383433.roa File: 3136382e3132312e3233362e302f32322d3234203d3e203237383433.roa (raw, json) Hash identifier: YMQr+v4MOUQPv9c2wjKev0e01POiUt6c6+/afYG4FiU= Subject key identifier: 13:28:86:40:A4:5F:C8:2F:E9:33:03:0E:68:8E:63:54:A1:1D:CC:66 Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84 Certificate serial: 556128EACFA5575853E9A3789D4828CFDE2752FC Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3233362e302f32322d3234203d3e203237383433.roa Signing time: Tue 06 Jan 2026 19:03:47 +0000 ROA not before: Tue 06 Jan 2026 18:58:47 +0000 ROA not after: Tue 05 Jan 2027 19:03:47 +0000 asID: 27843 IP address blocks: 168.121.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 11:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:61:28:ea:cf:a5:57:58:53:e9:a3:78:9d:48:28:cf:de:27:52:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84 Validity Not Before: Jan 6 18:58:47 2026 GMT Not After : Jan 5 19:03:47 2027 GMT Subject: CN=13288640A45FC82FE933030E688E6354A11DCC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:5d:7f:97:10:44:6b:a9:c9:f1:41:4e:28: 8f:4f:6d:9d:dc:83:54:1d:42:f3:f0:31:4f:45:6b: 78:3f:31:4e:0d:d1:04:26:ac:26:0d:43:b3:95:64: c8:dd:61:83:77:88:8c:db:92:79:aa:dc:25:11:3e: 20:04:bc:7b:3a:07:11:40:06:d6:ce:fc:e4:6e:1b: ac:1a:04:76:9c:cb:0e:fd:0b:ce:ff:b4:35:28:89: 8a:2d:d7:ec:f6:41:e2:7c:08:40:d7:cb:70:e3:47: ea:de:58:80:c9:f9:15:04:ba:d9:ee:ea:27:f9:8d: f7:2f:03:25:ca:7e:ab:f1:aa:04:2c:75:d8:b9:92: 4a:ae:4f:ee:61:53:04:d3:40:a4:f9:fa:b3:95:bf: cd:1b:aa:da:84:4d:36:af:ec:21:9d:28:1b:96:e5: da:91:8d:d7:05:c0:15:0d:40:ec:bc:cb:d5:82:da: 43:ef:30:16:dd:89:88:7f:2d:fa:74:f5:f3:1e:b9: d5:b3:28:2a:5a:f3:96:c7:ca:0c:a1:2a:5e:62:32: 79:26:d7:53:b5:5c:f9:a8:96:77:14:38:22:76:9e: 79:92:e9:9a:5a:2f:83:75:fb:37:94:02:cc:53:76: ee:e4:0d:1d:9e:8e:07:99:0a:95:c6:ca:53:5f:80: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:28:86:40:A4:5F:C8:2F:E9:33:03:0E:68:8E:63:54:A1:1D:CC:66 X509v3 Authority Key Identifier: keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3233362e302f32322d3234203d3e203237383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.236.0/22 Signature Algorithm: sha256WithRSAEncryption 79:be:05:31:5b:25:e6:74:44:2d:e1:88:aa:f6:45:42:7a:dd: 8f:48:f8:93:98:f2:35:db:b2:ce:a2:bf:7e:79:ce:a6:c9:66: 6f:f7:fb:a1:da:54:a2:9f:a8:31:8c:8c:ff:f5:ec:bc:77:df: 0c:16:24:e0:56:4a:d0:76:35:42:2d:63:27:4e:c7:20:88:63: 12:f5:37:75:95:9f:a5:24:ad:77:d2:e1:fd:e9:ba:39:0a:6d: 9d:9e:42:50:38:58:49:02:4d:65:00:37:f4:ff:a2:e3:65:24: 5b:ba:c6:28:09:20:b2:20:9d:b7:4b:40:f1:d9:7c:72:45:23: f3:b5:79:6d:78:1b:91:f7:21:b2:e8:b4:19:66:a8:3a:29:d0: f1:2a:fc:02:78:be:6c:40:94:09:8e:a0:74:c8:16:bd:ca:a5: f0:64:bb:3f:a4:44:2d:e2:fc:9a:40:63:a3:a4:c9:be:f7:31: 83:8f:94:00:96:78:a0:0e:ed:eb:0f:6e:ed:83:c4:a1:c7:e4: e1:5c:c3:8a:b0:74:69:85:d9:8c:ac:32:90:30:b5:2a:a9:00: 40:15:de:66:24:fc:32:fa:88:da:68:a3:44:69:16:0c:77:6b: 0c:0e:64:39:f1:df:08:37:71:0b:ee:56:06:da:94:96:0d:c1: 16:90:67:c3 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUVWEo6s+lV1hT6aN4nUgoz94nUvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy NkNFOEY4NDAeFw0yNjAxMDYxODU4NDdaFw0yNzAxMDUxOTAzNDdaMDMxMTAvBgNV BAMTKDEzMjg4NjQwQTQ1RkM4MkZFOTMzMDMwRTY4OEU2MzU0QTExRENDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKl1/lxBEa6nJ8UFOKI9PbZ3c g1QdQvPwMU9Fa3g/MU4N0QQmrCYNQ7OVZMjdYYN3iIzbknmq3CURPiAEvHs6BxFA BtbO/ORuG6waBHacyw79C87/tDUoiYot1+z2QeJ8CEDXy3DjR+reWIDJ+RUEutnu 6if5jfcvAyXKfqvxqgQsddi5kkquT+5hUwTTQKT5+rOVv80bqtqETTav7CGdKBuW 5dqRjdcFwBUNQOy8y9WC2kPvMBbdiYh/Lfp09fMeudWzKCpa85bHygyhKl5iMnkm 11O1XPmolncUOCJ2nnmS6ZpaL4N1+zeUAsxTdu7kDR2ejgeZCpXGylNfgIHHAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUEyiGQKRfyC/pMwMOaI5jVKEdzGYwHwYDVR0j BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0 NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5 QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzYzODJlMzEzMjMxMmUzMjMzMzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzgzNDMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqHns MA0GCSqGSIb3DQEBCwUAA4IBAQB5vgUxWyXmdEQt4Yiq9kVCet2PSPiTmPI127LO or9+ec6myWZv9/uh2lSin6gxjIz/9ey8d98MFiTgVkrQdjVCLWMnTscgiGMS9Td1 lZ+lJK130uH96bo5Cm2dnkJQOFhJAk1lADf0/6LjZSRbusYoCSCyIJ23S0Dx2Xxy RSPztXlteBuR9yGy6LQZZqg6KdDxKvwCeL5sQJQJjqB0yBa9yqXwZLs/pEQt4vya QGOjpMm+9zGDj5QAlnigDu3rD27tg8Shx+ThXMOKsHRphdmMrDKQMLUqqQBAFd5m JPwy+ojaaKNEaRYMd2sMDmQ58d8IN3EL7lYG2pSWDcEWkGfD -----END CERTIFICATE-----Generated at Sun Jan 25 12:57:26 2026 by rpki-client