This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa File: 3230302e35392e32342e302f32312d3234203d3e203238303838.roa (raw, json) Hash identifier: yfJYqn1LsG8SqOl2C099xmCfkiXWuRc53L+vc4Zsb1o= Subject key identifier: 3F:2B:88:93:14:F4:F8:14:16:21:45:47:E4:C2:63:DA:57:5D:8A:FA Certificate issuer: /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227 Certificate serial: 40891EC4BADA8BA32C00693F04F87862F5C97448 Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa Signing time: Tue 06 Jan 2026 19:25:05 +0000 ROA not before: Tue 06 Jan 2026 19:20:05 +0000 ROA not after: Tue 05 Jan 2027 19:25:05 +0000 asID: 28088 IP address blocks: 200.59.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:89:1e:c4:ba:da:8b:a3:2c:00:69:3f:04:f8:78:62:f5:c9:74:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227 Validity Not Before: Jan 6 19:20:05 2026 GMT Not After : Jan 5 19:25:05 2027 GMT Subject: CN=3F2B889314F4F81416214547E4C263DA575D8AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:ab:ff:c7:2f:29:69:37:fc:65:b5:a3:f8: 1d:e7:e4:c3:aa:df:48:0b:cd:c4:ec:5e:be:82:76: ac:05:97:62:6c:d2:b7:12:32:4a:98:f0:df:12:8f: 82:38:f2:d6:a2:51:ed:71:84:40:e7:c9:4d:cc:87: 4b:75:c2:ad:c0:3e:f2:2f:ab:50:58:95:21:a3:03: 0a:8e:4a:5f:23:04:f1:8a:bb:f3:a6:18:cd:67:f2: 66:31:eb:0d:93:be:9c:03:3a:02:10:70:81:92:48: 37:46:8e:61:14:49:b4:c6:8e:d1:2c:e8:d1:3d:a5: 36:51:db:d6:4f:cc:22:da:cf:e7:2e:d4:4a:28:4c: 2a:fe:ae:aa:98:96:16:7e:0b:17:bb:91:c9:ad:0c: f5:7d:d5:9c:52:34:d5:9e:07:69:48:b7:7d:cc:03: 2d:bd:4a:89:be:f1:58:49:51:f5:72:58:c3:d4:6e: a3:f6:97:53:da:f0:61:bb:3a:70:c1:66:b1:da:9e: 9e:d6:e3:da:ac:d8:20:bb:df:f8:9a:e5:fc:80:28: 54:77:e6:f4:1a:12:cc:d5:67:2f:b9:fa:43:66:49: 28:24:79:f7:74:cb:db:44:d5:d0:a2:60:eb:ca:2b: d5:94:1b:4a:d5:7b:0e:55:f0:f9:2e:61:d9:76:cf: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2B:88:93:14:F4:F8:14:16:21:45:47:E4:C2:63:DA:57:5D:8A:FA X509v3 Authority Key Identifier: keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.59.24.0/21 Signature Algorithm: sha256WithRSAEncryption 00:20:d1:33:d3:05:0a:97:80:25:e6:73:88:17:9c:01:5d:dd: eb:29:5a:e6:9f:e9:ef:df:e4:1b:fe:a0:3f:5e:3c:9a:f0:d7: 18:8d:0a:20:b7:9a:d3:38:7a:9f:b8:cc:1e:8b:46:79:44:5e: 65:c0:5a:20:30:45:89:5d:c7:f0:c1:c8:2e:79:65:23:38:1a: 9d:3a:9d:d1:b1:5e:95:f5:76:8b:53:4f:a0:9a:db:6c:07:a3: 5a:42:aa:32:ee:4f:f4:a3:09:89:fa:e3:ed:12:83:51:2d:a6: 61:be:91:a9:94:e5:cb:84:ea:a5:23:86:6e:f4:4f:42:3a:37: ea:d9:32:ee:81:e2:08:6d:3b:07:99:38:3f:a4:6a:26:f5:57: 7a:17:ec:e5:62:0f:4c:1b:af:f1:b4:70:a7:25:11:9e:dd:0a: 5c:44:90:cd:5a:a0:2a:81:9d:13:c1:21:0e:62:79:f6:53:71: 95:cf:05:6f:ff:4e:d9:ae:b1:fa:d4:e8:7e:5b:fa:cd:84:98: 06:1d:23:56:23:20:ce:ba:c4:c5:33:74:ef:28:59:67:f2:53: dc:96:98:37:7b:d5:56:3e:df:9d:2a:ef:df:ba:af:df:bf:a2: e9:b1:03:90:0c:c0:c6:55:03:6b:f8:9d:f7:3f:ae:f9:cf:2f: 31:a6:7a:d0 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUQIkexLrai6MsAGk/BPh4YvXJdEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVENDJERkYxOTZGM0YxMUI4MjQ2NERFMUZCN0RERDE3 OTNERDIyNzAeFw0yNjAxMDYxOTIwMDVaFw0yNzAxMDUxOTI1MDVaMDMxMTAvBgNV BAMTKDNGMkI4ODkzMTRGNEY4MTQxNjIxNDU0N0U0QzI2M0RBNTc1RDhBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcKv/xy8paTf8ZbWj+B3n5MOq 30gLzcTsXr6CdqwFl2Js0rcSMkqY8N8Sj4I48taiUe1xhEDnyU3Mh0t1wq3APvIv q1BYlSGjAwqOSl8jBPGKu/OmGM1n8mYx6w2TvpwDOgIQcIGSSDdGjmEUSbTGjtEs 6NE9pTZR29ZPzCLaz+cu1EooTCr+rqqYlhZ+Cxe7kcmtDPV91ZxSNNWeB2lIt33M Ay29Som+8VhJUfVyWMPUbqP2l1Pa8GG7OnDBZrHanp7W49qs2CC73/ia5fyAKFR3 5vQaEszVZy+5+kNmSSgkefd0y9tE1dCiYOvKK9WUG0rVew5V8PkuYdl2z4ULAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUPyuIkxT0+BQWIUVH5MJj2lddivowHwYDVR0j BBgwFoAULtQt/xlvPxG4JGTeH7fd0Xk90icwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FM0E0QkY3RDE4MzcyMEREOTU3Q0E5M0M0RTA3RjRERUZC MTAzODhGQzU5RkU4MEUzRUE4RjE1QzQwOTQ0NjFCLzAvMkVENDJERkYxOTZGM0Yx MUI4MjQ2NERFMUZCN0RERDE3OTNERDIyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUQ0MkRGRjE5NkYzRjExQjgy NDY0REUxRkI3REREMTc5M0REMjI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTNBNEJGN0QxODM3MjBERDk1N0NBOTNDNEUwN0Y0REVGQjEwMzg4RkM1 OUZFODBFM0VBOEYxNUM0MDk0NDYxQi8wLzMyMzAzMDJlMzUzOTJlMzIzNDJlMzAy ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMDM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIOxgwDQYJ KoZIhvcNAQELBQADggEBAAAg0TPTBQqXgCXmc4gXnAFd3espWuaf6e/f5Bv+oD9e PJrw1xiNCiC3mtM4ep+4zB6LRnlEXmXAWiAwRYldx/DByC55ZSM4Gp06ndGxXpX1 dotTT6Ca22wHo1pCqjLuT/SjCYn64+0Sg1EtpmG+kamU5cuE6qUjhm70T0I6N+rZ Mu6B4ghtOweZOD+kaib1V3oX7OViD0wbr/G0cKclEZ7dClxEkM1aoCqBnRPBIQ5i efZTcZXPBW//TtmusfrU6H5b+s2EmAYdI1YjIM66xMUzdO8oWWfyU9yWmDd71VY+ 350q79+6r9+/oumxA5AMwMZVA2v4nfc/rvnPLzGmetA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:55:01 2026 by rpki-client