This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa File: 3230302e34322e3234302e302f32302d3233203d3e203238313138.roa (raw, json) Hash identifier: rzBi9lpGl5QNl9xLjQtH17mB9YQy5+hwh2cVIEjazAw= Subject key identifier: 8A:30:34:57:B4:0E:B4:E9:A4:A7:AA:48:96:F9:EB:A5:F2:F5:A5:4D Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B Certificate serial: 38F15721A5C0C7D5CB1674B7512153FC2BFA37A3 Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa Signing time: Tue 06 Jan 2026 19:39:47 +0000 ROA not before: Tue 06 Jan 2026 19:34:47 +0000 ROA not after: Tue 05 Jan 2027 19:39:47 +0000 asID: 28118 IP address blocks: 200.42.240.0/20 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f1:57:21:a5:c0:c7:d5:cb:16:74:b7:51:21:53:fc:2b:fa:37:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B Validity Not Before: Jan 6 19:34:47 2026 GMT Not After : Jan 5 19:39:47 2027 GMT Subject: CN=8A303457B40EB4E9A4A7AA4896F9EBA5F2F5A54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:4a:db:1e:d3:3d:c0:6a:8e:bb:5a:3c:c9: bc:61:2a:72:e9:ce:d7:14:05:79:02:98:a5:f5:0d: 5f:ae:5f:37:82:a9:c6:ad:99:ed:1f:92:91:b7:5b: ec:5b:f2:d9:f1:6c:11:95:0c:8f:84:e9:db:d6:8a: 62:2a:0a:f8:cd:21:00:0d:54:0e:f1:37:60:a0:35: 7a:cc:19:bb:1d:df:86:b5:94:ce:0d:bb:5c:3e:03: fc:96:fc:b7:1e:84:1a:b9:58:d2:85:31:98:a3:79: 29:56:7d:e5:a3:cf:ee:4a:e6:de:cf:be:c6:a2:7e: e2:4b:3f:cd:61:df:1b:b6:da:42:1f:80:41:0c:98: 17:83:c4:85:d2:39:eb:25:e0:d4:aa:a6:c2:03:b6: e2:dc:e1:de:37:13:39:80:63:bb:cd:f9:0a:ab:9d: 9d:27:bc:42:92:14:9a:00:28:96:d5:86:83:cc:19: 69:88:c8:a3:dc:5e:cb:38:e3:4b:7f:31:73:6a:1a: a0:bc:86:39:84:c0:f2:09:96:92:2b:90:aa:c9:0f: 68:db:b3:e4:a7:38:0c:a1:06:3a:db:6a:89:71:b1: 1a:4d:66:3c:06:09:92:4d:1b:e5:dc:8a:2c:0d:08: 5c:29:35:cc:bb:39:b8:09:0b:7f:cc:8f:b8:00:4b: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:30:34:57:B4:0E:B4:E9:A4:A7:AA:48:96:F9:EB:A5:F2:F5:A5:4D X509v3 Authority Key Identifier: keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.42.240.0/20 Signature Algorithm: sha256WithRSAEncryption 09:a9:b1:e2:ea:1f:73:66:14:08:08:f4:b4:3c:96:67:81:46: 12:65:29:4f:c1:d5:e0:89:61:a8:a5:f3:49:c9:66:ae:c7:8e: 81:e9:8b:3e:75:cb:5f:0b:6a:44:fe:93:33:10:78:a7:0b:a2: ba:92:1a:9a:07:8a:97:e8:6a:d4:b5:3a:86:2b:ac:48:41:e1: e0:b6:27:c4:11:5d:7f:1d:77:d8:f8:af:f6:54:eb:e4:66:6d: 55:4b:e9:7f:ae:a5:06:b3:d0:87:54:a9:a2:6f:91:63:73:e3: 39:0e:5c:84:88:8a:e5:fd:d1:b6:01:24:bf:78:21:00:9c:21: ca:de:7b:c0:d7:b7:52:4a:27:fb:cd:37:3a:82:47:d2:aa:64: 80:e4:d9:10:6b:2f:20:e7:26:47:67:29:e1:2f:2e:2d:cc:44: 3c:7c:ff:c9:d8:9f:e8:a2:79:e1:0d:d5:a8:8d:f6:41:8a:41: 87:9b:84:6d:10:4f:b6:f6:98:bd:98:ac:86:15:49:d6:55:a3: 8b:10:f5:56:0f:89:ab:4d:38:d9:f1:2f:ea:ee:82:ae:3c:2b: b1:b4:72:5e:3b:52:6e:60:0e:e8:9a:a5:2c:85:3c:52:de:54: 7b:cf:73:3d:89:23:41:41:5f:17:f4:9b:87:22:05:77:48:7a: d8:e2:f6:70 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUOPFXIaXAx9XLFnS3USFT/Cv6N6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy NjBBRTY5QjAeFw0yNjAxMDYxOTM0NDdaFw0yNzAxMDUxOTM5NDdaMDMxMTAvBgNV BAMTKDhBMzAzNDU3QjQwRUI0RTlBNEE3QUE0ODk2RjlFQkE1RjJGNUE1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiErbHtM9wGqOu1o8ybxhKnLp ztcUBXkCmKX1DV+uXzeCqcatme0fkpG3W+xb8tnxbBGVDI+E6dvWimIqCvjNIQAN VA7xN2CgNXrMGbsd34a1lM4Nu1w+A/yW/LcehBq5WNKFMZijeSlWfeWjz+5K5t7P vsaifuJLP81h3xu22kIfgEEMmBeDxIXSOesl4NSqpsIDtuLc4d43EzmAY7vN+Qqr nZ0nvEKSFJoAKJbVhoPMGWmIyKPcXss440t/MXNqGqC8hjmEwPIJlpIrkKrJD2jb s+SnOAyhBjrbaolxsRpNZjwGCZJNG+XciiwNCFwpNcy7ObgJC3/Mj7gAS0a7AgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUijA0V7QOtOmkp6pIlvnrpfL1pU0wHwYDVR0j BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3 QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1 QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMyMzAzMDJlMzQzMjJlMzIzNDMwMmUz MDJmMzIzMDJkMzIzMzIwM2QzZTIwMzIzODMxMzEzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgq8DAN BgkqhkiG9w0BAQsFAAOCAQEACamx4uofc2YUCAj0tDyWZ4FGEmUpT8HV4IlhqKXz SclmrseOgemLPnXLXwtqRP6TMxB4pwuiupIamgeKl+hq1LU6hiusSEHh4LYnxBFd fx132Piv9lTr5GZtVUvpf66lBrPQh1Spom+RY3PjOQ5chIiK5f3RtgEkv3ghAJwh yt57wNe3Ukon+803OoJH0qpkgOTZEGsvIOcmR2cp4S8uLcxEPHz/ydif6KJ54Q3V qI32QYpBh5uEbRBPtvaYvZishhVJ1lWjixD1Vg+Jq0042fEv6u6CrjwrsbRyXjtS bmAO6JqlLIU8Ut5Ue89zPYkjQUFfF/SbhyIFd0h62OL2cA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:26:29 2026 by rpki-client