This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa File: 3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa (raw, json) Hash identifier: wtf4LcH104jnWBnMvJmICHpbImDUsVo8/i5+G640xPo= Subject key identifier: 88:7C:5D:F3:CD:ED:69:73:3E:19:F2:C3:86:83:3E:03:71:42:02:FB Certificate issuer: /CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF Certificate serial: 1CD92A325C035FBFC7C21016434901F9C5135BCB Authority key identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa Signing time: Tue 06 Jan 2026 20:57:05 +0000 ROA not before: Tue 06 Jan 2026 20:52:05 +0000 ROA not after: Tue 05 Jan 2027 20:57:05 +0000 asID: 263691 IP address blocks: 198.49.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:2a:32:5c:03:5f:bf:c7:c2:10:16:43:49:01:f9:c5:13:5b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF Validity Not Before: Jan 6 20:52:05 2026 GMT Not After : Jan 5 20:57:05 2027 GMT Subject: CN=887C5DF3CDED69733E19F2C386833E03714202FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:12:ac:7e:e4:40:3e:f0:74:48:c9:e1:e1: 54:46:9d:a9:ad:54:42:bf:9e:c9:cc:9f:2b:b2:03: 68:c8:6b:88:9c:41:85:85:1b:a2:66:3e:d8:f1:e0: 87:d9:a9:3b:d2:de:cc:76:c6:56:96:00:38:02:12: 54:71:d9:f8:d6:c0:19:4d:1e:ef:d7:f9:cd:ed:95: c1:57:25:fe:26:34:ed:5b:3b:a8:b3:6b:d1:7a:bf: 42:a1:dd:54:80:6b:eb:84:56:1d:c5:02:1c:26:f8: cc:e4:b6:18:74:2a:cc:0a:e3:64:52:fa:49:6e:7c: c0:92:5e:b7:00:47:af:28:68:63:27:b9:32:f3:c5: 19:c3:41:0d:07:f8:5e:9f:b7:54:2e:90:1d:47:d5: 8a:65:5a:77:22:b4:b5:06:4d:8b:75:90:5b:4d:f7: 7e:25:15:d7:45:59:fc:90:b5:f1:10:7e:25:e4:85: 52:5d:8e:52:a7:86:a4:84:13:ab:ce:e9:80:93:4d: c8:06:f4:be:d6:4c:d1:12:ff:94:76:61:9a:71:a7: 3b:1c:fe:58:4f:9f:38:d4:01:24:e3:1d:11:58:d0: 80:61:de:26:30:f6:16:51:e9:18:be:68:b7:c6:60: d4:2f:f1:f3:ac:90:6f:e6:16:88:20:d7:f7:41:05: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7C:5D:F3:CD:ED:69:73:3E:19:F2:C3:86:83:3E:03:71:42:02:FB X509v3 Authority Key Identifier: keyid:DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.49.128.0/22 Signature Algorithm: sha256WithRSAEncryption 12:8f:47:e3:39:de:14:a6:34:31:4a:52:58:0a:9d:76:46:49: bf:f8:af:35:38:20:b5:95:93:ea:61:79:5e:c0:c0:30:6d:0a: c5:3f:99:1d:8b:00:57:35:90:b1:a7:d7:ad:e9:0a:c5:41:c4: a7:f7:aa:e1:ed:a7:74:29:03:a1:b2:b4:77:a5:cf:d0:b3:3f: d5:1e:e6:80:5c:8e:43:26:b9:a1:72:94:89:0f:84:8e:a9:1d: 24:31:d7:a1:69:96:26:82:cc:39:47:08:92:ae:23:91:6c:37: ae:49:3c:8f:c3:66:d1:c8:1c:19:6d:9e:41:3f:0d:3a:0a:35: f9:62:11:66:e6:0d:de:c5:45:2f:2e:89:40:c7:0c:67:db:e8: ab:29:79:88:e9:a3:02:78:ac:42:e0:fa:8e:8d:f1:ef:1b:7b: 15:14:56:b3:a3:e8:59:b1:b2:ee:84:79:e5:af:a7:0b:3c:11: 9d:1a:a4:09:2e:ce:6c:48:f4:4a:e6:a1:4b:00:4f:3b:35:c3: ab:0c:15:ba:e1:13:c5:39:10:1f:da:dd:67:8f:9b:e2:cd:a5: 39:d2:10:e1:b7:78:29:a7:5e:e7:ea:6b:83:c2:f2:f3:d5:30: 03:d7:a1:f2:21:31:5f:92:a7:54:4d:a7:ea:8b:c6:4c:72:54: ee:14:3c:66 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUHNkqMlwDX7/HwhAWQ0kB+cUTW8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGMTJBNTc4MTZGNkUxODJBRkIwM0ZERkE4NzcyMzI2 OEFDMUNBRjAeFw0yNjAxMDYyMDUyMDVaFw0yNzAxMDUyMDU3MDVaMDMxMTAvBgNV BAMTKDg4N0M1REYzQ0RFRDY5NzMzRTE5RjJDMzg2ODMzRTAzNzE0MjAyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCuxKsfuRAPvB0SMnh4VRGnamt VEK/nsnMnyuyA2jIa4icQYWFG6JmPtjx4IfZqTvS3sx2xlaWADgCElRx2fjWwBlN Hu/X+c3tlcFXJf4mNO1bO6iza9F6v0Kh3VSAa+uEVh3FAhwm+Mzkthh0KswK42RS +klufMCSXrcAR68oaGMnuTLzxRnDQQ0H+F6ft1QukB1H1YplWncitLUGTYt1kFtN 934lFddFWfyQtfEQfiXkhVJdjlKnhqSEE6vO6YCTTcgG9L7WTNES/5R2YZpxpzsc /lhPnzjUASTjHRFY0IBh3iYw9hZR6Ri+aLfGYNQv8fOskG/mFogg1/dBBbnlAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUiHxd883taXM+GfLDhoM+A3FCAvswHwYDVR0j BBgwFoAU3fEqV4Fvbhgq+wP9+odyMmisHK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMUE3MTE2QTZGQjlFMURCREIzQjkyN0RFNTQ5MzIxNTIw OTFFNzQxMzgxNjk0RjAzNUI2QjUxMTc2Mjg4QUMzLzAvRERGMTJBNTc4MTZGNkUx ODJBRkIwM0ZERkE4NzcyMzI2OEFDMUNBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREYxMkE1NzgxNkY2RTE4MkFG QjAzRkRGQTg3NzIzMjY4QUMxQ0FGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjFBNzExNkE2RkI5RTFEQkRCM0I5MjdERTU0OTMyMTUyMDkxRTc0MTM4 MTY5NEYwMzVCNkI1MTE3NjI4OEFDMy8wLzMxMzkzODJlMzQzOTJlMzEzMjM4MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjGA MA0GCSqGSIb3DQEBCwUAA4IBAQASj0fjOd4UpjQxSlJYCp12Rkm/+K81OCC1lZPq YXlewMAwbQrFP5kdiwBXNZCxp9et6QrFQcSn96rh7ad0KQOhsrR3pc/Qsz/VHuaA XI5DJrmhcpSJD4SOqR0kMdehaZYmgsw5RwiSriORbDeuSTyPw2bRyBwZbZ5BPw06 CjX5YhFm5g3exUUvLolAxwxn2+irKXmI6aMCeKxC4PqOjfHvG3sVFFazo+hZsbLu hHnlr6cLPBGdGqQJLs5sSPRK5qFLAE87NcOrDBW64RPFORAf2t1nj5vizaU50hDh t3gpp17n6muDwvLz1TAD16HyITFfkqdUTafqi8ZMclTuFDxm -----END CERTIFICATE-----Generated at Sun Jan 25 14:29:44 2026 by rpki-client