This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa File: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (raw, json) Hash identifier: m0NGfYx5qfHiIZeFiCvtxN+EDVGwFXPY/gwPeOs7NQM= Subject key identifier: 29:41:FE:B8:BC:A1:E3:A3:75:EA:CB:E7:E3:2B:17:BE:D3:F7:E3:81 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 71EFFFC19D63EE470E148E914D868F5461E65E6B Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa Signing time: Tue 06 Jan 2026 19:07:47 +0000 ROA not before: Tue 06 Jan 2026 19:02:47 +0000 ROA not after: Tue 05 Jan 2027 19:07:47 +0000 asID: 265773 IP address blocks: 131.196.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 22:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ef:ff:c1:9d:63:ee:47:0e:14:8e:91:4d:86:8f:54:61:e6:5e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Jan 6 19:02:47 2026 GMT Not After : Jan 5 19:07:47 2027 GMT Subject: CN=2941FEB8BCA1E3A375EACBE7E32B17BED3F7E381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:73:25:40:33:57:64:a1:74:e1:31:e0:f6: 66:22:32:ab:79:89:62:1c:1b:6c:4f:b7:0b:32:28: 8d:db:61:ec:32:2d:44:73:df:58:3a:6f:7e:3c:72: d5:ef:04:02:8f:d4:2f:d6:2a:e4:73:3a:b2:17:21: ad:9c:28:6d:c6:10:f8:04:e2:bd:e0:a7:ef:c3:78: 33:f9:b7:37:9c:83:e5:0b:1f:d5:ce:a3:c3:2b:19: c3:2f:6f:6c:a3:00:a5:43:fc:50:97:c2:a7:4c:dc: 2d:16:b6:2a:84:aa:0d:87:47:60:41:78:d8:4d:7f: 0e:ac:a6:6c:93:f8:c0:2a:bb:3e:9a:cc:44:9e:ce: bb:3a:ef:d8:10:95:aa:74:05:62:3d:ec:e9:9a:21: 75:e6:a5:c6:9e:1d:d6:a4:77:63:1c:67:5e:fd:e2: f0:d2:78:b1:0c:d6:90:9e:ad:7e:26:61:f1:01:77: cd:05:a3:71:e5:16:d5:cc:a8:1a:58:ed:0f:72:69: e1:6f:72:eb:b2:ac:19:de:43:d6:a6:57:d8:d1:ef: da:8d:15:f4:8e:26:b0:a2:22:86:0c:43:8d:f3:4c: ad:66:9f:40:aa:e5:72:f2:c5:f5:3f:4b:2b:7a:91: 19:21:88:df:17:27:7b:8b:c5:2f:b4:1a:dc:34:e2: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:FE:B8:BC:A1:E3:A3:75:EA:CB:E7:E3:2B:17:BE:D3:F7:E3:81 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.36.0/22 Signature Algorithm: sha256WithRSAEncryption 85:87:d0:67:03:c5:6a:4e:82:c5:74:43:84:99:bd:d5:e2:bc: ea:4e:eb:2e:d9:37:2e:2d:bb:c9:bf:cc:0d:54:5e:d0:2e:2e: 2a:fd:97:16:1f:63:e6:ba:5c:0d:0e:0b:43:20:fc:a6:9f:51: 2e:d9:45:c8:af:fb:c6:29:a6:1c:9b:20:b1:3f:ec:13:ac:e4: 57:30:ff:60:50:71:fc:69:a6:ef:1b:60:31:0e:c5:2f:69:54: 29:9a:22:64:c1:23:07:76:fd:6d:8f:1b:85:81:ff:42:15:47: 13:22:28:05:ed:24:a8:75:41:28:a9:61:a6:f7:de:dc:e6:f6: 47:b5:18:3e:7d:f3:6c:c0:d7:7a:76:55:78:e8:24:7c:c9:81: aa:9b:eb:d5:56:88:57:d6:19:67:90:f8:bb:e9:f8:a8:6d:13: 34:44:33:d0:22:06:5f:17:d4:5e:dc:71:f5:04:e2:d3:ae:14: 11:55:f6:0e:f4:3d:80:2f:8f:49:9a:8f:9f:04:91:52:32:9f: 72:1d:50:34:c5:a8:db:15:cd:52:4d:b9:ec:3f:6a:c6:75:92: 49:2d:96:d6:88:07:11:63:5c:1c:09:12:62:4c:e7:98:be:23: 68:bf:26:95:13:e1:36:f1:f2:14:39:11:29:a4:a5:39:98:ef: ff:26:a4:4a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUce//wZ1j7kcOFI6RTYaPVGHmXmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNjAxMDYxOTAyNDdaFw0yNzAxMDUxOTA3NDdaMDMxMTAvBgNV BAMTKDI5NDFGRUI4QkNBMUUzQTM3NUVBQ0JFN0UzMkIxN0JFRDNGN0UzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut3MlQDNXZKF04THg9mYiMqt5 iWIcG2xPtwsyKI3bYewyLURz31g6b348ctXvBAKP1C/WKuRzOrIXIa2cKG3GEPgE 4r3gp+/DeDP5tzecg+ULH9XOo8MrGcMvb2yjAKVD/FCXwqdM3C0WtiqEqg2HR2BB eNhNfw6spmyT+MAquz6azESezrs679gQlap0BWI97OmaIXXmpcaeHdakd2McZ179 4vDSeLEM1pCerX4mYfEBd80Fo3HlFtXMqBpY7Q9yaeFvcuuyrBneQ9amV9jR79qN FfSOJrCiIoYMQ43zTK1mn0Cq5XLyxfU/Syt6kRkhiN8XJ3uLxS+0Gtw04snTAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUKUH+uLyh46N16svn4ysXvtP344EwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzMxMzMzMTJlMzEzOTM2MmUzMzM2MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNzMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg8Qk MA0GCSqGSIb3DQEBCwUAA4IBAQCFh9BnA8VqToLFdEOEmb3V4rzqTusu2TcuLbvJ v8wNVF7QLi4q/ZcWH2PmulwNDgtDIPymn1Eu2UXIr/vGKaYcmyCxP+wTrORXMP9g UHH8aabvG2AxDsUvaVQpmiJkwSMHdv1tjxuFgf9CFUcTIigF7SSodUEoqWGm997c 5vZHtRg+ffNswNd6dlV46CR8yYGqm+vVVohX1hlnkPi76fiobRM0RDPQIgZfF9Re 3HH1BOLTrhQRVfYO9D2AL49Jmo+fBJFSMp9yHVA0xajbFc1STbnsP2rGdZJJLZbW iAcRY1wcCRJiTOeYviNovyaVE+E28fIUOREppKU5mO//JqRK -----END CERTIFICATE-----Generated at Sun Jan 25 13:17:56 2026 by rpki-client