This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32332d3233203d3e20323635373731.roa File: 3132382e3230312e3130382e302f32332d3233203d3e20323635373731.roa (raw, json) Hash identifier: RrXBfUItvO4pV02I0GtCF2K/q8pgQGqZgqdK8TtlO5E= Subject key identifier: 19:97:68:60:0E:D5:08:63:F9:95:0C:98:BA:F2:84:A7:BF:F7:B6:96 Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3 Certificate serial: 1566C4AD14994CD13114DBD7E1E267CD643A8C28 Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32332d3233203d3e20323635373731.roa Signing time: Sat 22 Nov 2025 22:30:00 +0000 ROA not before: Sat 22 Nov 2025 22:25:00 +0000 ROA not after: Sat 21 Nov 2026 22:30:00 +0000 asID: 265771 IP address blocks: 128.201.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 18:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:66:c4:ad:14:99:4c:d1:31:14:db:d7:e1:e2:67:cd:64:3a:8c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3 Validity Not Before: Nov 22 22:25:00 2025 GMT Not After : Nov 21 22:30:00 2026 GMT Subject: CN=199768600ED50863F9950C98BAF284A7BFF7B696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:a4:2b:69:84:5f:f2:1e:e6:1c:88:1f:08: 7c:ad:8a:09:d2:54:d7:bb:26:e8:db:9f:3a:dc:f2: 9e:96:55:b3:2e:90:f4:42:ae:24:83:bc:5c:fc:a9: 94:9f:d3:c2:6f:0c:b8:d0:dc:bf:e4:7b:38:bf:dd: b6:d1:5c:1c:6e:c3:3f:2b:dd:e6:db:94:30:77:f5: 0c:f6:99:f5:57:f2:27:f3:60:e9:d5:96:fd:31:3b: c7:db:26:2b:8c:bb:3d:10:2a:1a:49:48:9b:c6:e0: b1:28:c4:c9:f3:2d:e6:f2:91:e7:78:14:15:f5:a9: 36:86:c1:3d:86:ff:46:1e:34:24:6a:e1:84:d9:67: f3:77:9e:d2:bb:ed:94:ff:c0:a3:00:05:c3:6e:e2: 0f:6f:ae:c1:68:98:b2:c3:d5:dc:a4:8f:0d:ea:09: f1:4c:6d:0b:f7:82:d3:f4:5c:af:bf:fd:11:81:1b: dc:f3:24:af:52:a2:f6:e7:93:65:4c:a9:90:a9:09: 13:33:cf:63:67:bf:44:b0:f8:93:f6:5a:bf:cc:9c: fa:27:f1:5a:88:c3:32:9b:f4:a6:6b:a4:fb:37:43: 3b:50:4f:c1:27:e7:84:3a:38:59:95:8f:35:d1:09: 85:c0:4d:95:3b:13:5b:23:46:04:7a:3d:1a:6c:fa: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:97:68:60:0E:D5:08:63:F9:95:0C:98:BA:F2:84:A7:BF:F7:B6:96 X509v3 Authority Key Identifier: keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32332d3233203d3e20323635373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.108.0/23 Signature Algorithm: sha256WithRSAEncryption 08:8d:49:d0:97:20:b4:a3:d4:0b:cd:b7:72:ed:ce:4a:fb:b3: 86:13:4f:76:ef:fb:8e:bf:dc:04:52:aa:5d:0c:52:d1:13:6d: f2:76:51:02:13:d2:5f:6f:d2:51:b9:98:e1:46:3a:e2:e5:0f: 71:4b:15:1d:77:67:02:34:52:e5:9c:48:f8:10:31:f3:8c:ff: dd:0b:22:14:ab:8e:3b:fc:fe:3c:db:f1:24:25:e1:6e:28:bd: 8c:4a:88:00:64:10:1f:fe:3a:de:09:61:21:51:ef:da:0a:1f: 94:ec:1f:d5:be:3c:8e:df:20:45:34:64:c4:c0:b0:d6:49:8f: c8:f7:58:de:22:67:c7:be:80:7b:f9:a2:84:50:11:e9:6b:41: 99:e4:53:de:b3:bb:3c:6e:09:06:72:4b:fc:bc:ae:4c:38:4d: d7:71:2c:81:fe:90:6a:08:3e:2d:9d:90:fe:3e:70:c9:58:78: 10:0c:dd:d5:10:f7:72:6d:ff:dd:79:6b:40:6f:cf:95:90:89: 27:6b:8e:57:96:11:eb:ed:f8:40:42:19:91:29:a0:3d:0d:38: db:0e:ce:cb:ec:d6:e3:a1:28:2c:20:51:1b:7b:fd:02:2c:3a: c1:16:60:85:48:48:2e:f4:cb:76:87:51:71:72:90:f0:44:0c: d1:ec:35:bd -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUFWbErRSZTNExFNvX4eJnzWQ6jCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOUM0NTY1NTFBOUZBNDMxODU2NUU0RUY1QkY0QzZC NUY5QUFDMzAeFw0yNTExMjIyMjI1MDBaFw0yNjExMjEyMjMwMDBaMDMxMTAvBgNV BAMTKDE5OTc2ODYwMEVENTA4NjNGOTk1MEM5OEJBRjI4NEE3QkZGN0I2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGaQraYRf8h7mHIgfCHytignS VNe7Jujbnzrc8p6WVbMukPRCriSDvFz8qZSf08JvDLjQ3L/kezi/3bbRXBxuwz8r 3ebblDB39Qz2mfVX8ifzYOnVlv0xO8fbJiuMuz0QKhpJSJvG4LEoxMnzLebyked4 FBX1qTaGwT2G/0YeNCRq4YTZZ/N3ntK77ZT/wKMABcNu4g9vrsFomLLD1dykjw3q CfFMbQv3gtP0XK+//RGBG9zzJK9Sovbnk2VMqZCpCRMzz2Nnv0Sw+JP2Wr/MnPon 8VqIwzKb9KZrpPs3QztQT8En54Q6OFmVjzXRCYXATZU7E1sjRgR6PRps+jcxAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUGZdoYA7VCGP5lQyYuvKEp7/3tpYwHwYDVR0j BBgwFoAUjanEVlUan6QxhWXk71v0xrX5qsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNkUwQzAwQjkyMUNDQ0M1M0QyNzNBQ0Q2RjNCMjVGQTY0 Mzk4M0IxOTIwNzc4RTEwOTk2QUQxMDAwODc3OUYxLzAvOERBOUM0NTY1NTFBOUZB NDMxODU2NUU0RUY1QkY0QzZCNUY5QUFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE5QzQ1NjU1MUE5RkE0MzE4 NTY1RTRFRjVCRjRDNkI1RjlBQUMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTZFMEMwMEI5MjFDQ0NDNTNEMjczQUNENkYzQjI1RkE2NDM5ODNCMTky MDc3OEUxMDk5NkFEMTAwMDg3NzlGMS8wLzMxMzIzODJlMzIzMDMxMmUzMTMwMzgy ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzNzM3MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGA yWwwDQYJKoZIhvcNAQELBQADggEBAAiNSdCXILSj1AvNt3Ltzkr7s4YTT3bv+46/ 3ARSql0MUtETbfJ2UQIT0l9v0lG5mOFGOuLlD3FLFR13ZwI0UuWcSPgQMfOM/90L IhSrjjv8/jzb8SQl4W4ovYxKiABkEB/+Ot4JYSFR79oKH5TsH9W+PI7fIEU0ZMTA sNZJj8j3WN4iZ8e+gHv5ooRQEelrQZnkU96zuzxuCQZyS/y8rkw4TddxLIH+kGoI Pi2dkP4+cMlYeBAM3dUQ93Jt/915a0Bvz5WQiSdrjleWEevt+EBCGZEpoD0NONsO zsvs1uOhKCwgURt7/QIsOsEWYIVISC70y3aHUXFykPBEDNHsNb0= -----END CERTIFICATE-----Generated at Sun Dec 7 15:10:53 2025 by rpki-client