This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa File: 3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa (raw, json) Hash identifier: c+hvBq769sPADm4+1m+EVnH3LljNXin+++6aC9x05JU= Subject key identifier: 3C:B8:A7:46:B0:85:7C:5F:AE:22:20:C4:CD:AE:FE:2F:E7:25:EF:E8 Certificate issuer: /CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Certificate serial: 04A198596D3FEA99EDD2C227B369C210CDC6AA76 Authority key identifier: 32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa Signing time: Tue 06 Jan 2026 19:27:39 +0000 ROA not before: Tue 06 Jan 2026 19:22:39 +0000 ROA not after: Tue 05 Jan 2027 19:27:39 +0000 asID: 28005 IP address blocks: 168.121.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 11:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a1:98:59:6d:3f:ea:99:ed:d2:c2:27:b3:69:c2:10:cd:c6:aa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Validity Not Before: Jan 6 19:22:39 2026 GMT Not After : Jan 5 19:27:39 2027 GMT Subject: CN=3CB8A746B0857C5FAE2220C4CDAEFE2FE725EFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:ab:e7:8f:ed:29:99:84:b0:40:eb:9c:67: c8:bf:7b:02:eb:f8:1f:20:1c:4f:28:63:6f:b2:a4: 20:27:51:cc:6a:46:b8:e5:f5:e4:09:cb:67:71:40: ab:d0:a2:99:d9:bc:a6:a0:df:c2:cd:ce:5c:aa:b1: 24:55:e0:de:5e:55:45:4d:96:ff:bb:cf:d8:15:42: cd:34:21:c9:a6:f7:ef:a6:65:18:65:ed:ae:eb:c5: 74:e2:f6:a2:37:3f:f0:d7:11:17:3d:7a:a0:fe:22: ab:eb:f4:cc:85:aa:7c:0c:41:56:cf:65:f5:e1:d9: 8f:16:1f:fb:ae:1a:db:0c:b9:17:ba:01:95:ca:eb: d8:7c:3c:dc:0e:89:46:8e:09:87:e7:be:9e:f9:63: b0:5f:f2:0b:d9:2a:db:2d:10:ab:bb:01:48:6f:38: c7:68:32:b4:21:9d:00:18:a2:12:ed:f9:cd:0e:a6: 8e:6a:71:5b:8b:8a:e2:bb:e6:eb:6c:fb:9d:54:11: 0e:0b:eb:50:e6:0c:78:53:ef:e3:d9:74:79:e1:2e: 55:dc:45:e2:a0:d6:83:ea:69:1b:c1:31:a1:2a:a8: 79:90:0e:85:0d:00:ea:e7:ec:f3:3d:bd:3a:fb:5d: 6d:9f:6e:89:ed:21:b7:d8:2b:bc:33:37:c7:f4:1e: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:A7:46:B0:85:7C:5F:AE:22:20:C4:CD:AE:FE:2F:E7:25:EF:E8 X509v3 Authority Key Identifier: keyid:32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:04:10:2b:7a:10:ac:19:7a:7a:54:c3:84:3f:1b:d3:a8:cd: f0:8b:c6:c1:1d:01:05:72:89:ac:4a:7d:3e:65:1e:5a:9d:7d: 8e:19:ba:5e:51:c2:fc:27:4e:0f:a4:fa:04:66:83:64:3b:1e: 27:8e:d5:fe:dd:d3:39:38:9d:e1:c9:9c:da:b3:99:61:ad:ac: 50:d3:e7:d7:ab:71:a7:88:13:3c:d2:66:42:cb:50:e1:fe:2e: f8:ee:0d:c4:0b:f0:17:84:5f:a4:e3:7f:e7:08:3b:07:8a:ac: 22:dd:3a:19:f8:69:4a:3b:ad:53:ca:e1:c8:c8:b3:fe:b5:5b: 67:29:6c:e0:2e:2c:dd:13:18:27:1c:01:50:73:a6:1e:6d:25: a8:05:09:94:26:bb:bd:60:4d:fd:43:fa:43:5a:c7:93:cb:6c: 63:3b:78:1f:ff:b4:6d:b6:36:b2:ac:ba:52:9b:9a:ec:ac:10: 3c:ff:9a:35:c1:82:46:62:ce:ad:16:62:a3:30:37:9a:2f:c5: 16:8c:b2:5b:80:88:66:00:97:28:7b:40:67:3b:39:da:6d:52: 18:32:fe:e7:16:be:b9:f9:b0:a0:fe:58:f6:a0:89:47:5e:50: 82:d4:5c:aa:7d:d3:c6:a1:9d:3b:56:26:54:83:b5:32:e5:02: 33:19:80:75 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUBKGYWW0/6pnt0sIns2nCEM3GqnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1QzMwQTYyQTI4RjFDQzY3NkRFQzJFRjk3QUY2NjBD N0EyOTk4NTAeFw0yNjAxMDYxOTIyMzlaFw0yNzAxMDUxOTI3MzlaMDMxMTAvBgNV BAMTKDNDQjhBNzQ2QjA4NTdDNUZBRTIyMjBDNENEQUVGRTJGRTcyNUVGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHKvnj+0pmYSwQOucZ8i/ewLr +B8gHE8oY2+ypCAnUcxqRrjl9eQJy2dxQKvQopnZvKag38LNzlyqsSRV4N5eVUVN lv+7z9gVQs00Icmm9++mZRhl7a7rxXTi9qI3P/DXERc9eqD+Iqvr9MyFqnwMQVbP ZfXh2Y8WH/uuGtsMuRe6AZXK69h8PNwOiUaOCYfnvp75Y7Bf8gvZKtstEKu7AUhv OMdoMrQhnQAYohLt+c0Opo5qcVuLiuK75uts+51UEQ4L61DmDHhT7+PZdHnhLlXc ReKg1oPqaRvBMaEqqHmQDoUNAOrn7PM9vTr7XW2fbontIbfYK7wzN8f0Hq+1AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUPLinRrCFfF+uIiDEza7+L+cl7+gwHwYDVR0j BBgwFoAUMlwwpioo8cxnbewu+Xr2YMeimYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMzM0MDcyMDRFMUE5QUU3Rjk1QTFFN0IxOTQ4OTFFN0FC QUY2Q0M1Q0VBNzc2NTBERkI5NkIwREU2REM3QjhGLzAvMzI1QzMwQTYyQTI4RjFD QzY3NkRFQzJFRjk3QUY2NjBDN0EyOTk4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjVDMzBBNjJBMjhGMUNDNjc2 REVDMkVGOTdBRjY2MEM3QTI5OTg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjMzNDA3MjA0RTFBOUFFN0Y5NUExRTdCMTk0ODkxRTdBQkFGNkNDNUNF QTc3NjUwREZCOTZCMERFNkRDN0I4Ri8wLzMxMzYzODJlMzEzMjMxMmUzMTMyMzgy ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzAzMDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqHmA MA0GCSqGSIb3DQEBCwUAA4IBAQB8BBArehCsGXp6VMOEPxvTqM3wi8bBHQEFcoms Sn0+ZR5anX2OGbpeUcL8J04PpPoEZoNkOx4njtX+3dM5OJ3hyZzas5lhraxQ0+fX q3GniBM80mZCy1Dh/i747g3EC/AXhF+k43/nCDsHiqwi3ToZ+GlKO61TyuHIyLP+ tVtnKWzgLizdExgnHAFQc6YebSWoBQmUJru9YE39Q/pDWseTy2xjO3gf/7Rttjay rLpSm5rsrBA8/5o1wYJGYs6tFmKjMDeaL8UWjLJbgIhmAJcoe0BnOznabVIYMv7n Fr65+bCg/lj2oIlHXlCC1FyqfdPGoZ07ViZUg7Uy5QIzGYB1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:09:25 2026 by rpki-client