This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39362e302f32342d3234203d3e203237373432.roa File: 3136352e39382e39362e302f32342d3234203d3e203237373432.roa (raw, json) Hash identifier: C58q+Gy4dC5sCgO1VTKC51gCFxKth5dXpxXmOKW8tbg= Subject key identifier: 19:23:FB:F2:3C:1B:F1:C5:70:99:F6:09:23:48:7B:38:C5:E8:F3:F3 Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D Certificate serial: 30FD966825B5C67D46509473FABFF62AB023C259 Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39362e302f32342d3234203d3e203237373432.roa Signing time: Fri 28 Nov 2025 17:50:00 +0000 ROA not before: Fri 28 Nov 2025 17:45:00 +0000 ROA not after: Fri 27 Nov 2026 17:50:00 +0000 asID: 27742 IP address blocks: 165.98.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Dec 2025 17:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fd:96:68:25:b5:c6:7d:46:50:94:73:fa:bf:f6:2a:b0:23:c2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D Validity Not Before: Nov 28 17:45:00 2025 GMT Not After : Nov 27 17:50:00 2026 GMT Subject: CN=1923FBF23C1BF1C57099F60923487B38C5E8F3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:b5:5e:14:b6:62:fa:fb:94:54:3d:ed:06: ef:0c:1e:f4:67:1d:ba:38:e4:0f:fc:6b:06:5e:d1: 3e:85:48:fd:83:1a:fa:08:96:23:58:dd:bc:7e:7f: 53:f5:40:e7:17:e5:9c:a8:2c:a6:8a:68:f0:4e:7e: 7c:9e:33:82:2d:de:be:24:34:6d:46:7a:16:10:ee: 44:11:62:e9:bd:99:6e:4c:8f:9d:af:5c:57:a1:ba: dc:12:85:0e:a5:0b:6b:ee:3e:30:45:2e:c4:fd:34: a2:a9:6c:b5:e4:e1:6d:9f:3c:d0:5f:a5:4b:a6:9c: e8:e3:1e:01:93:b0:2e:70:3f:f5:bc:27:da:d6:48: e6:f1:d2:22:7b:ab:55:e2:c8:37:dd:40:9e:92:2a: 5f:5e:31:99:93:be:c6:96:50:fe:96:25:5d:d8:47: 1e:22:42:d7:6d:e9:90:ef:8c:f2:f2:47:24:6e:7c: da:33:0e:4a:b1:c4:0d:f5:03:e7:17:71:8e:35:b4: 8e:ee:06:b7:90:c2:61:95:95:1f:7e:4a:92:91:8c: 2a:60:50:11:ea:70:de:18:c8:b8:b4:86:a5:79:3b: 5f:8f:56:a6:4a:28:38:71:3b:c9:1e:6b:e9:7e:f9: 1b:c6:b3:4b:ca:73:5f:72:16:79:8b:04:39:14:d6: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:23:FB:F2:3C:1B:F1:C5:70:99:F6:09:23:48:7B:38:C5:E8:F3:F3 X509v3 Authority Key Identifier: keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39362e302f32342d3234203d3e203237373432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.98.96.0/24 Signature Algorithm: sha256WithRSAEncryption c7:f1:ff:60:c4:da:02:91:76:75:90:42:22:11:6b:b5:38:4a: 11:1f:40:0a:94:b0:f8:b4:d4:e5:5b:8a:31:ce:2d:3a:d5:41: f9:c2:5f:94:72:d6:af:ce:75:e8:e9:28:ed:b8:ed:5f:8b:67: 40:50:8c:cc:31:1f:a6:ce:af:89:ba:47:7d:fc:ec:58:71:20: 8d:62:bd:02:a6:43:dc:79:5f:39:80:5d:0e:24:a8:55:c2:43: 8c:91:19:d9:cc:7b:3d:8a:26:e3:ea:b3:a1:09:dc:95:d4:1e: 9a:1e:ea:4a:60:1f:1b:00:a4:26:89:e5:57:60:d2:3b:33:2c: 94:12:41:a4:c3:74:e1:d6:ad:46:c3:35:ee:70:02:f9:f1:12: ad:3a:ca:fd:1f:66:3c:fa:c6:c3:e2:73:24:ce:6d:c2:e8:f7: 58:19:6e:87:59:f1:7d:82:de:ad:7c:84:bc:7e:ea:b4:0a:34: 60:7b:99:ee:8a:3b:73:be:11:4d:57:dd:4c:c2:43:9d:c2:f4: f5:cc:31:f9:3b:08:79:30:bc:04:ec:ef:23:5f:f3:6f:d8:12: 66:71:19:4a:87:60:90:bb:4a:ac:fb:39:f9:19:67:e4:a6:3e: 47:d4:fd:c5:8d:96:8b:6f:e0:8c:5e:40:df:52:a9:81:8f:f2: 50:4e:e0:be -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUMP2WaCW1xn1GUJRz+r/2KrAjwlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC MzAzQzAzRDAeFw0yNTExMjgxNzQ1MDBaFw0yNjExMjcxNzUwMDBaMDMxMTAvBgNV BAMTKDE5MjNGQkYyM0MxQkYxQzU3MDk5RjYwOTIzNDg3QjM4QzVFOEYzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn17VeFLZi+vuUVD3tBu8MHvRn Hbo45A/8awZe0T6FSP2DGvoIliNY3bx+f1P1QOcX5ZyoLKaKaPBOfnyeM4It3r4k NG1GehYQ7kQRYum9mW5Mj52vXFehutwShQ6lC2vuPjBFLsT9NKKpbLXk4W2fPNBf pUumnOjjHgGTsC5wP/W8J9rWSObx0iJ7q1XiyDfdQJ6SKl9eMZmTvsaWUP6WJV3Y Rx4iQtdt6ZDvjPLyRyRufNozDkqxxA31A+cXcY41tI7uBreQwmGVlR9+SpKRjCpg UBHqcN4YyLi0hqV5O1+PVqZKKDhxO8kea+l++RvGs0vKc19yFnmLBDkU1i3TAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUGSP78jwb8cVwmfYJI0h7OMXo8/MwHwYDVR0j BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5 QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5 MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4 MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzkzNjJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM0MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClYmAwDQYJ KoZIhvcNAQELBQADggEBAMfx/2DE2gKRdnWQQiIRa7U4ShEfQAqUsPi01OVbijHO LTrVQfnCX5Ry1q/OdejpKO247V+LZ0BQjMwxH6bOr4m6R3387FhxII1ivQKmQ9x5 XzmAXQ4kqFXCQ4yRGdnMez2KJuPqs6EJ3JXUHpoe6kpgHxsApCaJ5Vdg0jszLJQS QaTDdOHWrUbDNe5wAvnxEq06yv0fZjz6xsPicyTObcLo91gZbodZ8X2C3q18hLx+ 6rQKNGB7me6KO3O+EU1X3UzCQ53C9PXMMfk7CHkwvATs7yNf82/YEmZxGUqHYJC7 Sqz7OfkZZ+SmPkfU/cWNlotv4IxeQN9SqYGP8lBO4L4= -----END CERTIFICATE-----Generated at Mon Dec 8 10:29:43 2025 by rpki-client