This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa File: 3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa (raw, json) Hash identifier: xFBMDXHjbLeKHNne8IZ41dn5dIQAWERb+hSkjQ5vCf4= Subject key identifier: 1D:41:1D:77:38:A9:A0:B3:28:10:11:2C:35:04:E6:D0:72:12:7C:EC Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5 Certificate serial: 21CBC355BDB2AD3D6863590AD687071E9B2121E7 Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa Signing time: Tue 06 Jan 2026 19:36:09 +0000 ROA not before: Tue 06 Jan 2026 19:31:09 +0000 ROA not after: Tue 05 Jan 2027 19:36:09 +0000 asID: 21575 IP address blocks: 148.102.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 12:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cb:c3:55:bd:b2:ad:3d:68:63:59:0a:d6:87:07:1e:9b:21:21:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5 Validity Not Before: Jan 6 19:31:09 2026 GMT Not After : Jan 5 19:36:09 2027 GMT Subject: CN=1D411D7738A9A0B32810112C3504E6D072127CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:a8:b4:d7:c7:dc:1d:69:73:4a:44:18:03: 3b:bf:4f:7d:07:2f:2f:0d:4d:6d:09:c5:aa:0e:58: 9a:32:01:3a:f4:d7:47:d4:0f:9f:b9:a2:76:73:51: 4b:2c:63:2c:94:ec:a0:54:f9:0e:20:c7:2c:10:da: 54:e5:25:c5:6f:3c:89:35:ac:95:c2:ed:c5:c8:f6: d2:64:de:65:bd:fc:c5:65:b6:e2:2c:be:fe:19:d2: e6:e7:a6:23:1e:f6:7f:0b:46:62:cc:bb:95:a8:91: 87:c9:d9:aa:d0:4f:6a:1d:ce:19:a3:3a:19:c1:de: b8:50:8e:16:8c:14:86:cf:3c:8b:05:f5:49:72:aa: 4f:71:55:33:8a:77:82:5d:f6:3c:52:f8:ff:27:ab: ff:59:a6:24:0d:43:26:6f:e2:df:79:c0:10:1d:9c: 27:6b:72:51:80:f5:37:7a:f2:66:8c:7e:79:e4:56: 1b:af:a1:e7:ee:c9:64:21:f7:8d:eb:b3:b3:99:6e: 91:04:bf:55:db:64:0e:8c:1e:75:9f:b7:d5:26:b6: b6:23:f3:c7:1f:60:db:ca:12:d0:49:48:98:00:1c: f1:ab:55:62:a1:97:aa:47:22:43:f1:2a:0a:5b:25: 06:4f:cf:4a:6f:d7:4c:3f:1a:69:f1:82:1c:30:87: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:41:1D:77:38:A9:A0:B3:28:10:11:2C:35:04:E6:D0:72:12:7C:EC X509v3 Authority Key Identifier: keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.102.111.0/24 Signature Algorithm: sha256WithRSAEncryption 28:09:bb:03:cf:5d:da:34:5f:d2:0f:4c:4b:06:fd:d2:39:a3: fc:bb:35:ac:5d:f2:fe:9c:5f:45:52:03:10:e8:31:b0:08:f2: 75:2d:06:44:03:c7:27:21:a4:3a:cd:81:95:84:0a:45:96:46: 03:fc:f7:f3:7f:3f:ef:da:b1:97:ed:db:a4:e4:6b:5e:8c:ff: 1e:c4:40:24:02:fb:0f:65:5e:10:c8:b7:ae:10:10:8a:39:ce: cb:f9:e2:81:54:c6:47:79:7e:40:cc:5a:b6:07:16:5e:7d:59: f6:d2:7e:77:06:16:67:0b:f5:e8:ca:61:59:06:d6:a9:ed:a9: a3:34:13:eb:bc:b0:f3:d6:a4:d6:7f:06:4e:c0:26:4d:8e:20: fe:1a:6b:db:3f:99:19:73:45:7f:13:a3:35:ec:b2:fa:3a:1e: 44:10:42:dd:ea:e5:92:1a:0b:44:11:97:ba:e3:eb:72:a0:b2: 3e:76:8e:c0:c9:8f:c6:49:a9:a4:b6:99:69:68:b7:95:5e:10: 05:2d:06:13:7d:39:49:b3:94:4c:5d:76:9a:8e:b1:86:94:11: 09:98:7e:6a:23:ff:82:ae:e7:18:59:e8:fa:2f:e3:7e:9c:55: aa:8e:d3:9c:5e:d9:bd:0b:8c:04:5d:38:d7:f7:00:50:88:01: e9:34:e0:84 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUIcvDVb2yrT1oY1kK1ocHHpshIecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC M0E2NzhFNTAeFw0yNjAxMDYxOTMxMDlaFw0yNzAxMDUxOTM2MDlaMDMxMTAvBgNV BAMTKDFENDExRDc3MzhBOUEwQjMyODEwMTEyQzM1MDRFNkQwNzIxMjdDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oai018fcHWlzSkQYAzu/T30H Ly8NTW0JxaoOWJoyATr010fUD5+5onZzUUssYyyU7KBU+Q4gxywQ2lTlJcVvPIk1 rJXC7cXI9tJk3mW9/MVltuIsvv4Z0ubnpiMe9n8LRmLMu5WokYfJ2arQT2odzhmj OhnB3rhQjhaMFIbPPIsF9Ulyqk9xVTOKd4Jd9jxS+P8nq/9ZpiQNQyZv4t95wBAd nCdrclGA9Td68maMfnnkVhuvoefuyWQh943rs7OZbpEEv1XbZA6MHnWft9UmtrYj 88cfYNvKEtBJSJgAHPGrVWKhl6pHIkPxKgpbJQZPz0pv10w/Gmnxghwwh3h3AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUHUEddzipoLMoEBEsNQTm0HISfOwwHwYDVR0j BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0 QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1 NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2 MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzQzODJlMzEzMDMyMmUzMTMxMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlGZv MA0GCSqGSIb3DQEBCwUAA4IBAQAoCbsDz13aNF/SD0xLBv3SOaP8uzWsXfL+nF9F UgMQ6DGwCPJ1LQZEA8cnIaQ6zYGVhApFlkYD/Pfzfz/v2rGX7duk5GtejP8exEAk AvsPZV4QyLeuEBCKOc7L+eKBVMZHeX5AzFq2BxZefVn20n53BhZnC/XoymFZBtap 7amjNBPrvLDz1qTWfwZOwCZNjiD+GmvbP5kZc0V/E6M17LL6Oh5EEELd6uWSGgtE EZe64+tyoLI+do7AyY/GSamktplpaLeVXhAFLQYTfTlJs5RMXXaajrGGlBEJmH5q I/+CrucYWej6L+N+nFWqjtOcXtm9C4wEXTjX9wBQiAHpNOCE -----END CERTIFICATE-----Generated at Sun Jan 25 18:40:55 2026 by rpki-client