This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa File: 3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa (raw, json) Hash identifier: mFmAAVE6/gdGaHNBrFOBplbQUj1x/uHcwMPcTE3EwVo= Subject key identifier: A5:F1:74:33:E1:78:78:C8:3E:B9:E2:5B:ED:80:77:E0:04:2D:FF:DF Certificate issuer: /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4 Certificate serial: 06A57BA9C3DFAF45607DAFCE946D75651B14E51F Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa Signing time: Tue 06 Jan 2026 19:01:38 +0000 ROA not before: Tue 06 Jan 2026 18:56:38 +0000 ROA not after: Tue 05 Jan 2027 19:01:38 +0000 asID: 264773 IP address blocks: 168.197.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a5:7b:a9:c3:df:af:45:60:7d:af:ce:94:6d:75:65:1b:14:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4 Validity Not Before: Jan 6 18:56:38 2026 GMT Not After : Jan 5 19:01:38 2027 GMT Subject: CN=A5F17433E17878C83EB9E25BED8077E0042DFFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:40:a6:c5:69:33:58:18:4f:3f:44:9b:d4: 7b:63:43:be:70:a3:3d:7f:b5:04:e4:4e:db:13:65: 1b:84:86:35:90:b7:d6:2a:49:5b:8f:7b:23:5e:72: 4f:19:81:7a:6b:e5:93:de:26:09:59:e3:a1:1a:a5: d9:48:39:02:15:16:f4:18:0b:14:a5:50:82:92:31: 80:16:bb:be:3b:9d:1b:ec:05:43:08:da:8d:28:74: 9a:87:b1:95:14:c4:06:55:12:d3:4a:67:18:33:25: 05:76:d6:1a:e1:c4:5b:54:18:07:a2:39:88:fc:62: 57:fb:46:f4:c3:52:5b:69:2a:67:32:21:04:f3:77: 88:3e:57:35:7f:69:94:d6:5c:8e:35:8f:3e:44:33: 6c:31:c3:4e:b9:7f:c2:c1:2f:74:09:19:7e:88:79: 79:e7:ef:65:71:03:ec:67:4e:42:d3:f8:11:f7:b4: a5:ac:ac:41:b2:87:fb:af:da:25:72:3d:4f:3d:fa: ea:34:4d:c2:3e:de:df:57:a4:7b:4d:86:a4:b2:3f: 59:ca:94:87:64:f7:c4:5b:3b:ec:9c:e5:24:a2:d0: 1f:06:da:88:77:01:ac:bb:90:68:00:0e:ed:d1:d7: 5b:b8:41:c3:3d:28:1f:58:c5:68:f7:e2:cc:15:03: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:74:33:E1:78:78:C8:3E:B9:E2:5B:ED:80:77:E0:04:2D:FF:DF X509v3 Authority Key Identifier: keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:e2:e9:ef:a9:08:72:d3:04:e4:78:7f:86:84:2c:af:54:77: fc:dd:6b:6a:e4:d7:a5:aa:ce:8c:5c:dc:1d:18:0d:ed:ce:49: 1c:a4:aa:05:1f:be:87:c0:5c:78:0a:81:af:f7:22:68:02:d1: d2:d0:88:b7:a6:a4:02:25:03:f8:79:1e:2e:6e:88:78:1f:ac: bb:1c:05:e7:40:b3:a9:9d:96:47:e1:4e:81:2c:30:1b:dc:07: 1b:2a:ed:05:54:7c:e0:03:8e:63:3c:1a:3f:03:ed:d8:f4:bc: 67:fe:d3:af:88:48:8b:15:0a:7d:18:f9:ef:c1:08:63:87:2f: 90:a1:3b:00:6f:d6:f7:bf:6d:a7:27:fd:8e:61:82:da:63:81: 9d:ee:26:80:d0:c9:3c:13:60:9d:97:e1:17:b6:48:fe:e1:e0: fd:73:1e:06:40:3f:d8:98:23:18:e8:24:de:f4:3f:50:06:e3: b0:d4:b2:6a:b3:a2:96:b4:6d:41:7d:26:cb:b1:b5:9e:b3:20: bb:f2:1f:c6:34:9a:0b:dd:cd:ff:f4:ff:5b:f6:2f:2e:c9:ab: d7:6f:76:14:6a:04:97:43:6b:69:d9:54:82:d0:c9:90:d5:86: 82:ac:9d:7f:c1:71:f7:49:78:5d:64:05:f3:c1:f1:75:d1:cc: d3:57:90:94 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUBqV7qcPfr0Vgfa/OlG11ZRsU5R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDODU0MkEzQ0EzOEJDQzc2NzNGMTdFOUYxMUJBNURE NTFCMjVFNDAeFw0yNjAxMDYxODU2MzhaFw0yNzAxMDUxOTAxMzhaMDMxMTAvBgNV BAMTKEE1RjE3NDMzRTE3ODc4QzgzRUI5RTI1QkVEODA3N0UwMDQyREZGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtO0CmxWkzWBhPP0Sb1HtjQ75w oz1/tQTkTtsTZRuEhjWQt9YqSVuPeyNeck8ZgXpr5ZPeJglZ46EapdlIOQIVFvQY CxSlUIKSMYAWu747nRvsBUMI2o0odJqHsZUUxAZVEtNKZxgzJQV21hrhxFtUGAei OYj8Ylf7RvTDUltpKmcyIQTzd4g+VzV/aZTWXI41jz5EM2wxw065f8LBL3QJGX6I eXnn72VxA+xnTkLT+BH3tKWsrEGyh/uv2iVyPU89+uo0TcI+3t9XpHtNhqSyP1nK lIdk98RbO+yc5SSi0B8G2oh3Aay7kGgADu3R11u4QcM9KB9YxWj34swVAw4xAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUpfF0M+F4eMg+ueJb7YB34AQt/98wHwYDVR0j BBgwFoAUaMhUKjyji8x2c/F+nxG6XdUbJeQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FOTE5NDYyNEQzQTA4NUEwRUQ2RTIyNTQyRDAxOEU4OEUx NjJCODg0MTNGREUzOTc3MjUxQjIwNDQ2Q0VBMDA4LzAvNjhDODU0MkEzQ0EzOEJD Qzc2NzNGMTdFOUYxMUJBNURENTFCMjVFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEM4NTQyQTNDQTM4QkNDNzY3 M0YxN0U5RjExQkE1REQ1MUIyNUU0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTkxOTQ2MjREM0EwODVBMEVENkUyMjU0MkQwMThFODhFMTYyQjg4NDEz RkRFMzk3NzI1MUIyMDQ0NkNFQTAwOC8wLzMxMzYzODJlMzEzOTM3MmUzMTM3MzIy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM3MzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo xawwDQYJKoZIhvcNAQELBQADggEBAD3i6e+pCHLTBOR4f4aELK9Ud/zda2rk16Wq zoxc3B0YDe3OSRykqgUfvofAXHgKga/3ImgC0dLQiLempAIlA/h5Hi5uiHgfrLsc BedAs6mdlkfhToEsMBvcBxsq7QVUfOADjmM8Gj8D7dj0vGf+06+ISIsVCn0Y+e/B CGOHL5ChOwBv1ve/bacn/Y5hgtpjgZ3uJoDQyTwTYJ2X4Re2SP7h4P1zHgZAP9iY IxjoJN70P1AG47DUsmqzopa0bUF9JsuxtZ6zILvyH8Y0mgvdzf/0/1v2Ly7Jq9dv dhRqBJdDa2nZVILQyZDVhoKsnX/BcfdJeF1kBfPB8XXRzNNXkJQ= -----END CERTIFICATE-----Generated at Sun Jan 25 08:30:05 2026 by rpki-client