This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3137332e302f32342d3234203d3e2036343239.roa
File: 3230302e32392e3137332e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier: KIasZn23+Ivi9olkRnFmmtw9ISTt9txTk8Tcefb2/RQ=
Subject key identifier: 15:33:80:5B:52:DC:4F:B2:0B:FA:04:56:35:66:DF:16:A2:DC:A1:57
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 18A9F659BB449E88AED53593B6FA15742B23A52D
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3137332e302f32342d3234203d3e2036343239.roa
Signing time: Tue 06 Jan 2026 20:54:17 +0000
ROA not before: Tue 06 Jan 2026 20:49:17 +0000
ROA not after: Tue 05 Jan 2027 20:54:17 +0000
asID: 6429
IP address blocks: 200.29.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a9:f6:59:bb:44:9e:88:ae:d5:35:93:b6:fa:15:74:2b:23:a5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Jan 6 20:49:17 2026 GMT
Not After : Jan 5 20:54:17 2027 GMT
Subject: CN=1533805B52DC4FB20BFA04563566DF16A2DCA157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:74:d1:3d:57:82:f4:88:f6:11:53:3a:64:
aa:b1:ad:d3:b4:1f:19:d8:a1:f2:61:c4:94:3b:b3:
d2:c7:52:d1:17:17:a6:86:e1:bf:a8:c6:c8:ae:eb:
c5:10:f5:15:ab:11:20:7a:a3:ba:29:e6:93:81:86:
1e:f6:10:2b:81:27:6a:25:89:64:5d:30:5b:94:56:
6c:9a:c7:7a:a8:6c:42:cd:86:e0:cf:a7:8e:ad:a0:
c1:af:00:7f:6e:94:4b:2d:58:8c:4a:40:f2:84:fb:
30:31:a4:a2:38:64:80:02:a7:c3:f5:1e:c6:e0:95:
65:b0:08:94:d1:a3:62:50:cf:2d:f3:28:b3:8e:6a:
63:e2:38:af:45:ea:c5:bc:73:e1:cc:b9:a1:9c:01:
ac:34:87:45:0f:a6:fa:88:ed:8b:f1:65:9c:05:8b:
e1:92:f1:05:2e:cc:ba:6a:4a:5c:09:a7:f6:d3:84:
f0:4e:b1:4b:37:45:5f:38:fc:c0:96:8f:19:75:4e:
88:37:ee:d0:3c:c0:b3:bc:d6:25:1f:58:6b:80:45:
b4:91:49:12:ac:8a:3a:c3:74:99:83:15:4d:97:79:
e7:b5:95:fe:8c:c8:bc:6f:6d:ba:e8:44:5d:b6:26:
56:21:dc:90:5f:f1:81:ea:87:1d:cb:ed:16:96:28:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:80:5B:52:DC:4F:B2:0B:FA:04:56:35:66:DF:16:A2:DC:A1:57
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3137332e302f32342d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ea:3a:ca:38:f3:82:52:4c:9b:b7:51:90:8d:af:4b:b4:01:
f1:d5:7b:6f:97:6f:9a:9a:80:44:6a:7a:3c:67:c7:00:10:dc:
38:18:96:2d:cb:11:fc:9e:63:47:14:d6:28:ae:a3:c5:67:44:
76:df:6d:d4:64:53:de:21:10:e9:48:e1:4a:0b:fd:e1:51:0f:
0e:56:82:67:9f:90:ca:e9:26:e8:1b:54:49:31:5b:ac:c7:40:
6c:45:ad:f4:f6:a6:07:c7:63:6b:c0:58:7e:7e:f9:45:6e:22:
da:2a:a9:b9:88:ed:ce:4e:67:92:0a:ba:82:78:c6:20:02:91:
c0:6b:30:a7:3d:83:98:4e:6a:0c:5c:46:79:10:8f:56:f9:54:
b4:8f:7e:da:9d:75:d5:53:8c:17:73:6e:18:cd:7c:ea:4f:17:
9b:6f:75:97:95:30:f7:a1:64:29:24:88:5e:88:f6:7c:cf:c8:
7d:74:c1:08:34:ae:38:88:2e:da:d8:3e:e0:e2:f5:86:43:87:
b6:6e:78:78:17:23:6f:82:58:3a:12:9c:cb:08:b9:33:37:dd:
b3:f5:6f:b3:32:71:65:72:b4:3f:65:96:b6:6f:84:e2:d6:2b:
49:92:f2:39:e2:d9:df:7c:9d:82:06:a3:ed:77:46:84:47:ab:
08:0f:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:42 2026 by rpki-client