This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133332e302f32342d3234203d3e203237373432.roa File: 3136352e39382e3133332e302f32342d3234203d3e203237373432.roa (raw, json) Hash identifier: EJIlUikw08/H1wU52BZwNhjxnTiiUrgQR4D/KmSm7ls= Subject key identifier: 65:A9:03:5C:D2:1B:0B:9D:33:0A:E0:63:1C:94:6B:AC:22:6C:49:D6 Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D Certificate serial: 011DEB30A55102197E2D7FB6657657CAF312DC04 Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133332e302f32342d3234203d3e203237373432.roa Signing time: Fri 28 Nov 2025 17:35:00 +0000 ROA not before: Fri 28 Nov 2025 17:30:00 +0000 ROA not after: Fri 27 Nov 2026 17:35:00 +0000 asID: 27742 IP address blocks: 165.98.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Dec 2025 17:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1d:eb:30:a5:51:02:19:7e:2d:7f:b6:65:76:57:ca:f3:12:dc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D Validity Not Before: Nov 28 17:30:00 2025 GMT Not After : Nov 27 17:35:00 2026 GMT Subject: CN=65A9035CD21B0B9D330AE0631C946BAC226C49D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:4e:db:0c:2a:5b:41:fd:3a:ea:83:12:d6: a4:49:ac:38:0c:ee:b5:cc:a6:97:ee:ea:55:3f:2d: 43:df:81:d9:59:de:39:99:16:20:2c:19:5d:f1:17: 6f:4c:e1:bc:d9:35:72:5b:87:1d:10:b5:ce:a7:e1: 9e:83:2f:90:c1:8e:83:62:6a:b1:4d:74:5e:d4:e3: 58:f0:87:dc:a3:c1:66:80:92:e4:b5:f5:46:9a:7c: a9:6b:57:34:0f:ba:70:11:0c:eb:69:e8:1f:1c:fb: c3:70:65:e3:94:00:df:46:34:53:a9:b8:f4:48:91: f9:0d:28:ed:03:cb:65:c8:55:28:18:7c:43:a1:d9: fc:d9:d3:ee:aa:41:20:b1:48:77:30:83:ae:32:eb: 36:af:ac:2d:cd:57:9b:4d:82:6e:e9:c2:1b:60:99: 16:96:0a:35:27:20:26:b5:76:ea:d9:c7:b1:c3:4f: 12:1d:a8:16:96:57:23:02:0f:d6:4a:cd:4e:c8:36: c1:26:39:70:38:87:9f:41:ca:5a:37:2b:36:cd:cd: 56:40:c2:ab:e5:dc:1f:4f:93:70:b8:8e:89:8a:16: 35:71:5c:ed:fb:41:ed:06:5c:86:2f:16:8f:05:5f: c7:8a:42:3e:6a:08:b1:2f:70:b1:99:33:2f:40:1e: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:03:5C:D2:1B:0B:9D:33:0A:E0:63:1C:94:6B:AC:22:6C:49:D6 X509v3 Authority Key Identifier: keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133332e302f32342d3234203d3e203237373432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.98.133.0/24 Signature Algorithm: sha256WithRSAEncryption db:99:74:e1:84:d8:f2:ed:95:0c:89:40:51:56:05:02:fe:74: 64:dc:83:05:d8:0e:25:0a:45:15:a4:3a:da:28:bd:7b:67:01: 57:e8:bd:58:6c:b0:0a:83:fb:ff:78:46:9d:05:e4:f7:ee:50: 3d:c6:72:cc:27:c6:c2:6b:88:c0:ef:b5:d2:0c:15:37:21:27: 9c:b8:73:d5:69:1f:0a:38:0c:bf:61:73:ba:66:e7:76:9e:6c: 1d:73:e3:65:35:b6:2e:6b:c7:3a:01:e5:ac:ff:7d:ca:ac:6e: cc:f7:37:1e:39:03:4e:d9:76:5e:59:08:e1:03:c8:cb:24:ce: ef:33:02:6d:21:b7:87:7c:79:f4:4b:8a:60:60:65:33:5f:8e: e9:49:98:94:2b:cd:1b:3a:28:93:de:49:b1:84:38:80:f3:86: fe:cb:18:01:51:1c:b5:d9:86:14:a6:9a:48:72:1b:cc:ed:fb: 72:a2:b9:04:8b:df:53:c9:70:fc:69:04:c1:bd:68:ce:59:3c: 78:41:57:b8:92:02:03:c9:59:41:7a:63:34:0a:28:06:28:bc: ea:0e:fd:b6:9a:60:cf:15:63:a4:c9:7d:ba:91:14:1d:c1:44: df:09:48:cb:66:52:6f:ea:15:20:47:fe:92:3f:d1:b0:a9:69: c4:a4:6b:6d -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUAR3rMKVRAhl+LX+2ZXZXyvMS3AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC MzAzQzAzRDAeFw0yNTExMjgxNzMwMDBaFw0yNjExMjcxNzM1MDBaMDMxMTAvBgNV BAMTKDY1QTkwMzVDRDIxQjBCOUQzMzBBRTA2MzFDOTQ2QkFDMjI2QzQ5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtt07bDCpbQf066oMS1qRJrDgM 7rXMppfu6lU/LUPfgdlZ3jmZFiAsGV3xF29M4bzZNXJbhx0Qtc6n4Z6DL5DBjoNi arFNdF7U41jwh9yjwWaAkuS19UaafKlrVzQPunARDOtp6B8c+8NwZeOUAN9GNFOp uPRIkfkNKO0Dy2XIVSgYfEOh2fzZ0+6qQSCxSHcwg64y6zavrC3NV5tNgm7pwhtg mRaWCjUnICa1durZx7HDTxIdqBaWVyMCD9ZKzU7INsEmOXA4h59Bylo3KzbNzVZA wqvl3B9Pk3C4jomKFjVxXO37Qe0GXIYvFo8FX8eKQj5qCLEvcLGZMy9AHhEZAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUZakDXNIbC50zCuBjHJRrrCJsSdYwHwYDVR0j BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5 QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5 MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4 MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzMzMzMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKVihTAN BgkqhkiG9w0BAQsFAAOCAQEA25l04YTY8u2VDIlAUVYFAv50ZNyDBdgOJQpFFaQ6 2ii9e2cBV+i9WGywCoP7/3hGnQXk9+5QPcZyzCfGwmuIwO+10gwVNyEnnLhz1Wkf CjgMv2Fzumbndp5sHXPjZTW2LmvHOgHlrP99yqxuzPc3HjkDTtl2XlkI4QPIyyTO 7zMCbSG3h3x59EuKYGBlM1+O6UmYlCvNGzook95JsYQ4gPOG/ssYAVEctdmGFKaa SHIbzO37cqK5BIvfU8lw/GkEwb1ozlk8eEFXuJICA8lZQXpjNAooBii86g79tppg zxVjpMl9upEUHcFE3wlIy2ZSb+oVIEf+kj/RsKlpxKRrbQ== -----END CERTIFICATE-----Generated at Mon Dec 8 10:24:10 2025 by rpki-client