This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa File: 3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa (raw, json) Hash identifier: VFIEHma75tY63lxcFTJJOidAJSPYQWRhw1i0G6jI70A= Subject key identifier: F4:F7:65:04:87:D9:08:1B:C4:AA:F3:87:02:B1:B8:F0:73:D1:B4:21 Certificate issuer: /CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Certificate serial: 28595924A1D6BAFF0EFC4AB343B86CF8900215CE Authority key identifier: 32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa Signing time: Tue 06 Jan 2026 19:27:39 +0000 ROA not before: Tue 06 Jan 2026 19:22:39 +0000 ROA not after: Tue 05 Jan 2027 19:27:39 +0000 asID: 262248 IP address blocks: 131.108.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 11:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:59:59:24:a1:d6:ba:ff:0e:fc:4a:b3:43:b8:6c:f8:90:02:15:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Validity Not Before: Jan 6 19:22:39 2026 GMT Not After : Jan 5 19:27:39 2027 GMT Subject: CN=F4F7650487D9081BC4AAF38702B1B8F073D1B421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:a3:85:f6:e9:ec:0b:59:23:ad:30:7a:f4: d0:1d:70:eb:41:25:aa:2a:18:e6:39:80:f4:b7:9e: 90:d6:89:0f:a5:6e:c8:7e:f7:b7:ea:a9:f1:7b:46: 14:7b:69:e6:62:70:67:25:9d:54:09:95:7a:3f:46: fd:4d:b3:04:1e:67:98:55:ab:58:7f:fb:b0:c7:fd: ee:fa:5d:c7:0f:13:f2:1b:b0:f1:30:b9:2b:92:b9: 1c:0f:bb:5d:00:ba:ae:5f:d5:dd:88:4e:b7:24:91: 64:3f:8b:13:fe:87:5a:32:f9:fd:56:22:69:08:97: 2d:2a:ba:46:34:e2:1c:ec:aa:3a:59:98:a8:ad:ef: 4c:c9:01:c8:36:96:ee:bb:32:41:96:90:ce:71:bd: 51:ea:8a:39:7f:7b:95:fa:e3:29:8e:a0:19:91:30: ca:60:02:44:5c:a2:e6:1a:e7:59:45:7b:0f:ff:6a: d6:ae:94:c3:41:f8:da:e7:c3:04:0b:84:63:d8:1c: 26:b2:15:68:4a:d4:c3:86:63:d2:7c:a5:c6:49:a1: ce:06:1d:b2:a1:f4:52:56:4e:ba:6c:d3:44:f6:36: aa:cf:c7:3e:d4:90:39:8b:61:7b:ff:9d:90:8b:22: f4:9f:30:55:9b:b7:84:c2:31:ce:c5:29:de:88:23: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:65:04:87:D9:08:1B:C4:AA:F3:87:02:B1:B8:F0:73:D1:B4:21 X509v3 Authority Key Identifier: keyid:32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:da:e3:18:0a:eb:1b:c8:51:43:d9:d5:dc:dd:53:c8:45:fb: e0:84:97:c0:d0:35:53:ac:91:48:c1:d2:6f:d1:76:fd:39:1c: 8b:7a:c4:93:d7:7c:7d:3e:06:2d:b7:5d:db:40:7d:ca:be:66: 5f:bc:c6:51:f1:d4:9d:a2:d4:72:8c:93:cd:27:b7:d8:55:f1: f0:41:8e:20:7d:28:7e:f0:ba:c7:27:d9:a4:e9:fe:a6:4a:16: 2e:1b:2b:04:20:03:46:68:aa:82:f8:34:a7:74:5d:ea:4f:11: 07:fa:2a:26:14:80:25:fc:f5:4b:e6:03:5d:b6:12:aa:59:49: fe:8c:fd:d6:8b:2e:02:31:89:21:7a:fe:2a:5e:3c:fe:78:80: 33:60:4d:a8:8c:e5:4f:f3:2a:6e:1c:5a:ef:a1:bb:e7:0d:ff: 36:6a:99:3b:93:64:34:47:e6:eb:b1:de:3b:fc:81:2b:fa:4c: f5:f7:dd:c1:74:db:db:11:5d:e9:00:ac:63:ba:12:0e:fc:46: 09:95:9f:21:98:26:33:43:58:00:aa:b3:f6:e4:e6:ae:0a:05: 97:3e:4b:82:c8:4f:56:a9:25:df:d1:5b:9e:e4:f6:c3:15:b7: f5:75:5f:54:c3:0e:bb:d6:a8:69:60:97:b8:7b:4f:e8:27:c5: 2c:54:0b:f7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUKFlZJKHWuv8O/EqzQ7hs+JACFc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1QzMwQTYyQTI4RjFDQzY3NkRFQzJFRjk3QUY2NjBD N0EyOTk4NTAeFw0yNjAxMDYxOTIyMzlaFw0yNzAxMDUxOTI3MzlaMDMxMTAvBgNV BAMTKEY0Rjc2NTA0ODdEOTA4MUJDNEFBRjM4NzAyQjFCOEYwNzNEMUI0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3qOF9unsC1kjrTB69NAdcOtB JaoqGOY5gPS3npDWiQ+lbsh+97fqqfF7RhR7aeZicGclnVQJlXo/Rv1NswQeZ5hV q1h/+7DH/e76XccPE/IbsPEwuSuSuRwPu10Auq5f1d2ITrckkWQ/ixP+h1oy+f1W ImkIly0qukY04hzsqjpZmKit70zJAcg2lu67MkGWkM5xvVHqijl/e5X64ymOoBmR MMpgAkRcouYa51lFew//ataulMNB+NrnwwQLhGPYHCayFWhK1MOGY9J8pcZJoc4G HbKh9FJWTrps00T2NqrPxz7UkDmLYXv/nZCLIvSfMFWbt4TCMc7FKd6II13zAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU9PdlBIfZCBvEqvOHArG48HPRtCEwHwYDVR0j BBgwFoAUMlwwpioo8cxnbewu+Xr2YMeimYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMzM0MDcyMDRFMUE5QUU3Rjk1QTFFN0IxOTQ4OTFFN0FC QUY2Q0M1Q0VBNzc2NTBERkI5NkIwREU2REM3QjhGLzAvMzI1QzMwQTYyQTI4RjFD QzY3NkRFQzJFRjk3QUY2NjBDN0EyOTk4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjVDMzBBNjJBMjhGMUNDNjc2 REVDMkVGOTdBRjY2MEM3QTI5OTg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjMzNDA3MjA0RTFBOUFFN0Y5NUExRTdCMTk0ODkxRTdBQkFGNkNDNUNF QTc3NjUwREZCOTZCMERFNkRDN0I4Ri8wLzMxMzMzMTJlMzEzMDM4MmUzMjMwMmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzIzNDM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg2wU MA0GCSqGSIb3DQEBCwUAA4IBAQBq2uMYCusbyFFD2dXc3VPIRfvghJfA0DVTrJFI wdJv0Xb9ORyLesST13x9PgYtt13bQH3KvmZfvMZR8dSdotRyjJPNJ7fYVfHwQY4g fSh+8LrHJ9mk6f6mShYuGysEIANGaKqC+DSndF3qTxEH+iomFIAl/PVL5gNdthKq WUn+jP3Wiy4CMYkhev4qXjz+eIAzYE2ojOVP8ypuHFrvobvnDf82apk7k2Q0R+br sd47/IEr+kz1993BdNvbEV3pAKxjuhIO/EYJlZ8hmCYzQ1gAqrP25OauCgWXPkuC yE9WqSXf0Vue5PbDFbf1dV9Uww671qhpYJe4e0/oJ8UsVAv3 -----END CERTIFICATE-----Generated at Sun Jan 25 21:14:07 2026 by rpki-client