This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa File: 3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa (raw, json) Hash identifier: PZ/4WKeZMNOGnissnDCGQzcLPSCR2YK9mBe1jPf7rSc= Subject key identifier: 66:1B:4B:6B:F5:94:74:1B:97:B5:E4:04:FA:3C:49:A2:DE:26:77:63 Certificate issuer: /CN=2901A096C59DC3A27E514C8163A5215B8F72629A Certificate serial: 371358989897610ADF9D9A869D4894552C36B472 Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa Signing time: Wed 07 Jan 2026 07:59:10 +0000 ROA not before: Wed 07 Jan 2026 07:54:10 +0000 ROA not after: Wed 06 Jan 2027 07:59:10 +0000 asID: 265524 IP address blocks: 160.20.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:13:58:98:98:97:61:0a:df:9d:9a:86:9d:48:94:55:2c:36:b4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A Validity Not Before: Jan 7 07:54:10 2026 GMT Not After : Jan 6 07:59:10 2027 GMT Subject: CN=661B4B6BF594741B97B5E404FA3C49A2DE267763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:9b:be:4d:0e:c8:95:03:6a:2d:f6:d1:ca: 0d:1e:e0:ef:20:a3:69:58:81:86:2f:30:87:aa:25: 70:92:3c:d9:90:88:d9:fb:1f:32:86:5b:be:88:c1: 83:d9:d2:6e:09:f3:9f:9d:9d:ba:93:7e:56:da:44: d1:1f:11:fe:8f:a5:1f:02:20:bf:07:43:ba:87:3b: 36:43:18:76:f9:21:75:0e:67:bd:67:1a:89:4f:b7: e0:4e:ec:d5:33:ae:16:8f:95:4a:0a:dc:6d:8c:74: 66:14:5d:26:d4:c8:07:51:ce:d4:65:89:74:b5:69: 8b:79:ef:e5:57:de:03:06:a0:78:78:44:c1:5a:74: 96:1d:03:9f:7f:1c:43:bc:84:ff:98:6f:e7:06:4a: b9:95:71:ec:82:e4:b2:45:57:02:71:ea:16:5b:7b: 54:25:6e:fd:1b:91:9a:a3:ea:28:47:92:d9:30:6e: 38:21:75:7d:4f:dd:f9:cc:79:c5:ca:a8:5d:af:6d: 4b:02:a8:57:f2:24:25:99:a3:4a:7e:73:29:72:8c: 17:82:75:ff:50:ff:26:09:49:ca:b0:7a:55:a5:96: af:83:42:9d:30:69:6d:2e:f7:89:d9:9a:5c:6b:8c: f6:9c:76:67:f7:9f:40:99:d3:5c:fa:4f:d1:ee:d0: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1B:4B:6B:F5:94:74:1B:97:B5:E4:04:FA:3C:49:A2:DE:26:77:63 X509v3 Authority Key Identifier: keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.172.0/22 Signature Algorithm: sha256WithRSAEncryption a8:5b:53:00:06:6b:e1:3c:a7:a7:58:9c:b0:bd:9d:64:6e:69: a1:e0:f6:6b:f5:31:4b:17:7c:9b:e1:cc:f7:90:d2:01:94:92: 43:8e:cd:20:73:b4:f2:9a:99:89:75:3e:ad:bc:a9:75:b0:fe: 49:42:ef:50:09:b5:24:0f:4e:19:b9:e1:76:a0:8f:8e:07:0b: 65:8e:0e:2c:14:c6:44:54:fd:0d:fb:36:17:b6:4a:81:95:2b: c2:f5:b8:c9:be:8e:eb:f7:b4:62:dd:d3:46:ca:06:9e:db:93: a5:43:a0:c3:45:54:eb:97:bd:e1:f7:d1:69:88:d8:d9:05:31: ee:a7:fd:3a:f5:17:c2:37:13:51:7d:9a:c8:23:29:37:c3:31: da:f6:99:87:ec:8e:18:f3:d3:07:f6:71:ed:17:6b:23:c9:0a: aa:73:8a:d8:f3:6e:aa:95:01:b9:c6:0b:b8:cc:c6:56:3e:5a: 0f:fb:e7:6c:2a:a3:3c:d3:19:99:da:35:bb:25:7f:1e:22:f3: f9:b2:47:6c:ca:73:78:b7:af:56:86:bc:c1:46:27:63:a5:e9: ff:94:b0:32:d4:b5:49:13:4f:d2:98:cc:bf:14:f6:c9:86:12: 79:8b:31:3d:a0:53:ae:f1:66:26:99:90:cd:0d:9a:0f:bb:01: 3f:78:4e:47 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNxNYmJiXYQrfnZqGnUiUVSw2tHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwMUEwOTZDNTlEQzNBMjdFNTE0QzgxNjNBNTIxNUI4 RjcyNjI5QTAeFw0yNjAxMDcwNzU0MTBaFw0yNzAxMDYwNzU5MTBaMDMxMTAvBgNV BAMTKDY2MUI0QjZCRjU5NDc0MUI5N0I1RTQwNEZBM0M0OUEyREUyNjc3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUpu+TQ7IlQNqLfbRyg0e4O8g o2lYgYYvMIeqJXCSPNmQiNn7HzKGW76IwYPZ0m4J85+dnbqTflbaRNEfEf6PpR8C IL8HQ7qHOzZDGHb5IXUOZ71nGolPt+BO7NUzrhaPlUoK3G2MdGYUXSbUyAdRztRl iXS1aYt57+VX3gMGoHh4RMFadJYdA59/HEO8hP+Yb+cGSrmVceyC5LJFVwJx6hZb e1Qlbv0bkZqj6ihHktkwbjghdX1P3fnMecXKqF2vbUsCqFfyJCWZo0p+cylyjBeC df9Q/yYJScqwelWllq+DQp0waW0u94nZmlxrjPacdmf3n0CZ01z6T9Hu0LwNAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUZhtLa/WUdBuXteQE+jxJot4md2MwHwYDVR0j BBgwFoAUKQGglsWdw6J+UUyBY6UhW49yYpowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNzMxRDE2MDhERjg0NDYxRDhENjg5MkJGODI0RjQ3MzEx Q0REM0JEMEM4QkQ4OUE0REZFOEQ2NkI5QzFGOEE0LzAvMjkwMUEwOTZDNTlEQzNB MjdFNTE0QzgxNjNBNTIxNUI4RjcyNjI5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTAxQTA5NkM1OURDM0EyN0U1 MTRDODE2M0E1MjE1QjhGNzI2MjlBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzczMUQxNjA4REY4NDQ2MUQ4RDY4OTJCRjgyNEY0NzMxMUNERDNCRDBD OEJEODlBNERGRThENjZCOUMxRjhBNC8wLzMxMzYzMDJlMzIzMDJlMzEzNzMyMmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzMjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoBSs MA0GCSqGSIb3DQEBCwUAA4IBAQCoW1MABmvhPKenWJywvZ1kbmmh4PZr9TFLF3yb 4cz3kNIBlJJDjs0gc7TympmJdT6tvKl1sP5JQu9QCbUkD04ZueF2oI+OBwtljg4s FMZEVP0N+zYXtkqBlSvC9bjJvo7r97Ri3dNGygae25OlQ6DDRVTrl73h99FpiNjZ BTHup/069RfCNxNRfZrIIyk3wzHa9pmH7I4Y89MH9nHtF2sjyQqqc4rY826qlQG5 xgu4zMZWPloP++dsKqM80xmZ2jW7JX8eIvP5skdsynN4t69WhrzBRidjpen/lLAy 1LVJE0/SmMy/FPbJhhJ5izE9oFOu8WYmmZDNDZoPuwE/eE5H -----END CERTIFICATE-----Generated at Sun Jan 25 21:54:58 2026 by rpki-client