This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230342e302f32322d3234203d3e20323633373034.roa File: 3133382e3138352e3230342e302f32322d3234203d3e20323633373034.roa (raw, json) Hash identifier: Ek7Jg8Cts3PET//8kO4pnpCWGdpLOMBosAxNPRmDavs= Subject key identifier: 47:E8:D4:B3:8F:01:EB:63:4F:C1:5B:EF:1D:DF:F7:85:5D:EB:FD:DC Certificate issuer: /CN=D6D506245328F9A3F0499B715D40967C3D5A3303 Certificate serial: 617685D50C16250EF2ED81555EEC11D1375FF967 Authority key identifier: D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230342e302f32322d3234203d3e20323633373034.roa Signing time: Tue 11 Nov 2025 18:35:00 +0000 ROA not before: Tue 11 Nov 2025 18:30:00 +0000 ROA not after: Tue 10 Nov 2026 18:35:00 +0000 asID: 263704 IP address blocks: 138.185.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 10:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:76:85:d5:0c:16:25:0e:f2:ed:81:55:5e:ec:11:d1:37:5f:f9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D506245328F9A3F0499B715D40967C3D5A3303 Validity Not Before: Nov 11 18:30:00 2025 GMT Not After : Nov 10 18:35:00 2026 GMT Subject: CN=47E8D4B38F01EB634FC15BEF1DDFF7855DEBFDDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:12:b0:8d:d0:93:c7:dd:78:0f:d5:20:45: 30:04:b9:e9:e8:99:91:06:c6:14:c8:9c:48:1e:f2: c6:e1:35:1b:4e:a1:5f:32:79:94:be:b3:c2:9a:19: 26:a7:26:84:32:e0:78:b1:05:35:d0:10:12:fb:37: e7:29:b7:97:06:77:b7:d7:d8:22:1f:37:c5:4a:6b: f2:31:90:34:6d:78:cb:87:c6:a9:36:78:1c:2b:2a: b7:42:be:bb:af:ba:87:fe:e1:77:f0:91:27:e5:38: 8d:f0:9e:25:1c:bb:03:ac:c5:1f:b2:e2:76:9f:62: 77:8c:f4:f8:f4:4b:9a:bd:d6:19:30:a3:06:a3:0e: 40:17:76:bc:db:40:90:4e:d8:05:e1:f2:e2:2e:83: 54:4c:13:d9:74:fc:4e:fc:0e:e6:74:fb:eb:6d:2b: 72:3c:51:dd:f6:61:a7:76:ee:21:39:18:96:a6:58: 61:7a:99:1c:e1:70:c1:52:fc:74:eb:f6:bf:9f:04: 25:25:c7:80:1d:fa:5b:93:cb:09:45:fb:7d:2b:7e: aa:79:08:90:1b:9d:ce:f3:e7:d6:dd:da:11:6d:23: b7:ff:31:a1:29:b6:17:d4:e7:bb:46:c7:ac:90:af: 9c:55:60:a5:67:73:07:1a:d4:d5:56:6e:8c:06:ad: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:D4:B3:8F:01:EB:63:4F:C1:5B:EF:1D:DF:F7:85:5D:EB:FD:DC X509v3 Authority Key Identifier: keyid:D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230342e302f32322d3234203d3e20323633373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.204.0/22 Signature Algorithm: sha256WithRSAEncryption a4:62:73:b4:a5:cf:af:49:35:09:67:40:95:5c:4e:e8:00:56: 15:2a:95:a3:e2:55:f7:b2:ea:53:67:ab:46:69:ca:13:01:cd: 88:b1:d2:da:4b:51:56:b4:e4:97:7f:95:8c:7d:20:17:a0:16: 80:ae:49:f0:fb:99:aa:a2:01:91:9f:3f:ae:8d:4c:bb:e0:e1: c1:41:a3:71:60:49:8c:9f:5b:9a:73:62:13:6e:28:86:22:a2: 4a:24:b3:d4:81:9d:2b:31:51:71:b5:76:88:30:1b:79:de:73: 6d:b4:6a:69:3a:45:f2:da:5e:1a:6e:7e:39:c9:7f:47:91:a3: 65:93:7f:8e:e1:b1:f8:06:28:f8:e7:f5:d8:2b:49:db:1b:1d: 75:2e:59:a5:bc:12:f4:15:a7:38:24:2d:2f:fa:a4:53:23:9b: c1:b5:85:52:19:74:17:e4:c6:7a:2f:3c:db:d5:06:c6:c0:76: de:72:03:a7:33:f7:1f:fb:4d:74:74:32:c8:aa:49:36:d8:2f: d4:97:89:7d:7e:02:71:8c:9c:a2:1e:18:45:06:d5:31:0f:65: 42:31:6c:01:c8:51:6b:f1:f3:c5:fe:46:1a:63:3c:ac:75:20: 78:cf:dd:42:1a:39:55:80:90:32:89:f9:97:7e:14:c4:63:06: cd:50:29:23 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUYXaF1QwWJQ7y7YFVXuwR0Tdf+WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZENTA2MjQ1MzI4RjlBM0YwNDk5QjcxNUQ0MDk2N0Mz RDVBMzMwMzAeFw0yNTExMTExODMwMDBaFw0yNjExMTAxODM1MDBaMDMxMTAvBgNV BAMTKDQ3RThENEIzOEYwMUVCNjM0RkMxNUJFRjFEREZGNzg1NURFQkZEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH/RKwjdCTx914D9UgRTAEueno mZEGxhTInEge8sbhNRtOoV8yeZS+s8KaGSanJoQy4HixBTXQEBL7N+cpt5cGd7fX 2CIfN8VKa/IxkDRteMuHxqk2eBwrKrdCvruvuof+4XfwkSflOI3wniUcuwOsxR+y 4nafYneM9Pj0S5q91hkwowajDkAXdrzbQJBO2AXh8uIug1RME9l0/E78DuZ0++tt K3I8Ud32Yad27iE5GJamWGF6mRzhcMFS/HTr9r+fBCUlx4Ad+luTywlF+30rfqp5 CJAbnc7z59bd2hFtI7f/MaEpthfU57tGx6yQr5xVYKVncwca1NVWbowGrROvAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUR+jUs48B62NPwVvvHd/3hV3r/dwwHwYDVR0j BBgwFoAU1tUGJFMo+aPwSZtxXUCWfD1aMwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NTRBRThFQ0Y5NjI2NTEwQkI1NzYxQjJDNjE3NENBMUZD NkUyNzQzQzU3NjYyNkUzOTRDMDU2NDcxMzM1MDc4LzAvRDZENTA2MjQ1MzI4RjlB M0YwNDk5QjcxNUQ0MDk2N0MzRDVBMzMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENkQ1MDYyNDUzMjhGOUEzRjA0 OTlCNzE1RDQwOTY3QzNENUEzMzAzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDU0QUU4RUNGOTYyNjUxMEJCNTc2MUIyQzYxNzRDQTFGQzZFMjc0M0M1 NzY2MjZFMzk0QzA1NjQ3MTMzNTA3OC8wLzMxMzMzODJlMzEzODM1MmUzMjMwMzQy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMwMzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK ucwwDQYJKoZIhvcNAQELBQADggEBAKRic7Slz69JNQlnQJVcTugAVhUqlaPiVfey 6lNnq0ZpyhMBzYix0tpLUVa05Jd/lYx9IBegFoCuSfD7maqiAZGfP66NTLvg4cFB o3FgSYyfW5pzYhNuKIYiokoks9SBnSsxUXG1dogwG3nec220amk6RfLaXhpufjnJ f0eRo2WTf47hsfgGKPjn9dgrSdsbHXUuWaW8EvQVpzgkLS/6pFMjm8G1hVIZdBfk xnovPNvVBsbAdt5yA6cz9x/7TXR0MsiqSTbYL9SXiX1+AnGMnKIeGEUG1TEPZUIx bAHIUWvx88X+RhpjPKx1IHjP3UIaOVWAkDKJ+Zd+FMRjBs1QKSM= -----END CERTIFICATE-----Generated at Mon Dec 8 06:48:50 2025 by rpki-client