This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa File: 3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa (raw, json) Hash identifier: rwEegi5FNJeE9uQ4cLUo3FE0CCTQ1tpJc/S5Rgh7t1s= Subject key identifier: 1A:AB:2F:38:A4:79:D9:63:93:D4:B3:1F:C8:9A:71:33:AB:24:0B:A3 Certificate issuer: /CN=D2709F777988D8BB9C29DBBB53968812568C616E Certificate serial: 38CDB50E732F2C36E8B85A5419BA4144DA7E7DE3 Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa Signing time: Tue 06 Jan 2026 19:27:43 +0000 ROA not before: Tue 06 Jan 2026 19:22:43 +0000 ROA not after: Tue 05 Jan 2027 19:27:43 +0000 asID: 27947 IP address blocks: 200.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:b5:0e:73:2f:2c:36:e8:b8:5a:54:19:ba:41:44:da:7e:7d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E Validity Not Before: Jan 6 19:22:43 2026 GMT Not After : Jan 5 19:27:43 2027 GMT Subject: CN=1AAB2F38A479D96393D4B31FC89A7133AB240BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:e0:07:0c:97:cb:0f:fd:98:25:89:73:6d: 54:f3:4a:10:bd:0b:e5:15:03:00:ee:90:37:5a:23: f4:58:3f:2e:8f:0f:72:a1:c4:5f:f4:30:1a:de:2e: f0:b6:42:7d:1d:38:3f:9c:34:3e:7f:c3:bf:da:e3: 11:af:be:af:bc:64:5a:ab:89:f8:25:5a:f3:f4:c3: 79:32:fc:64:ee:a1:e1:b3:72:48:06:44:59:9d:c8: 2b:7c:c0:41:f4:cb:ed:e2:24:51:0d:0c:51:11:b1: 3a:09:4e:df:db:a4:00:65:5f:e1:0d:9f:fd:98:81: e6:bf:de:bd:28:7a:8e:c4:02:0d:bd:93:a8:a0:05: 1e:d9:2d:fd:89:25:dd:47:72:2b:8d:22:ef:d6:6f: e0:db:3b:15:1a:d6:e8:a6:e8:a6:59:d3:99:03:c9: 92:e8:c2:a1:83:98:d7:72:1d:f1:08:fa:3e:d8:7c: 7f:90:01:1d:9f:21:dd:53:b5:a6:a3:e3:ec:e4:3b: 55:7b:cb:0e:17:fa:41:85:c4:58:a6:fd:c6:23:7d: da:96:e0:a6:0c:bc:f6:1a:6b:82:47:ca:51:fd:82: 9b:c9:ae:e6:86:20:2b:b5:0e:56:1d:96:66:60:e1: 5e:5a:d1:2b:66:cb:df:5b:13:e2:da:f1:d6:eb:e1: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:2F:38:A4:79:D9:63:93:D4:B3:1F:C8:9A:71:33:AB:24:0B:A3 X509v3 Authority Key Identifier: keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.125.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5f:a9:73:74:ec:c2:94:0d:6f:70:b0:da:fb:dc:dd:04:96: 29:df:ec:d4:08:a2:96:21:ca:1f:ec:65:44:56:91:e0:29:0b: 16:30:bf:73:a0:7a:62:22:db:fc:af:2d:f4:f3:ca:81:b7:ee: 97:68:c8:b2:89:44:34:fe:75:29:1a:0a:7d:3a:a0:7d:59:76: f7:35:11:7e:41:33:78:75:99:fd:2a:17:c6:ab:d3:9c:98:d1: d9:6b:f4:85:a2:0d:9f:5b:a6:24:45:94:e0:f9:63:83:b0:52: ab:30:55:c6:2f:75:36:10:8e:ee:b7:3d:3b:86:75:a3:1c:34: cf:3c:9a:9e:28:a9:ed:69:bf:80:d8:e6:05:29:84:57:ed:d7: a6:61:4f:df:97:69:c4:f9:f8:8e:a1:cd:a2:d7:cc:ff:3d:b9: 5c:4a:3c:09:3a:09:7a:4d:bf:e2:9d:54:57:03:ab:4a:66:29: fa:2d:a0:a8:51:dc:8b:71:50:a6:c9:2c:88:75:ad:32:45:6a: 48:8a:db:35:85:b7:7d:26:db:e4:1e:f4:ce:13:9c:f4:57:99: d3:c9:5d:e5:01:18:71:60:53:e8:ef:81:24:0c:c9:84:04:bc: f3:2f:ee:1f:8a:b9:0f:25:29:9f:5c:89:9e:9b:55:d3:6f:7d: c5:3d:55:e2 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUOM21DnMvLDbouFpUGbpBRNp+feMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDlGNzc3OTg4RDhCQjlDMjlEQkJCNTM5Njg4MTI1 NjhDNjE2RTAeFw0yNjAxMDYxOTIyNDNaFw0yNzAxMDUxOTI3NDNaMDMxMTAvBgNV BAMTKDFBQUIyRjM4QTQ3OUQ5NjM5M0Q0QjMxRkM4OUE3MTMzQUIyNDBCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq+AHDJfLD/2YJYlzbVTzShC9 C+UVAwDukDdaI/RYPy6PD3KhxF/0MBreLvC2Qn0dOD+cND5/w7/a4xGvvq+8ZFqr ifglWvP0w3ky/GTuoeGzckgGRFmdyCt8wEH0y+3iJFENDFERsToJTt/bpABlX+EN n/2Ygea/3r0oeo7EAg29k6igBR7ZLf2JJd1HciuNIu/Wb+DbOxUa1uim6KZZ05kD yZLowqGDmNdyHfEI+j7YfH+QAR2fId1Ttaaj4+zkO1V7yw4X+kGFxFim/cYjfdqW 4KYMvPYaa4JHylH9gpvJruaGICu1DlYdlmZg4V5a0Stmy99bE+La8dbr4UgRAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUGqsvOKR52WOT1LMfyJpxM6skC6MwHwYDVR0j BBgwFoAU0nCfd3mI2LucKdu7U5aIElaMYW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQ0JEQTNDQkUzRjk0QjE5RURGMDA5OTUzQzBGNDU1RDcw NTNCMDYwODgzRkY3NEFCM0ZGQ0ExMjgxOEYwOTMyLzAvRDI3MDlGNzc3OTg4RDhC QjlDMjlEQkJCNTM5Njg4MTI1NjhDNjE2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjcwOUY3Nzc5ODhEOEJCOUMy OURCQkI1Mzk2ODgxMjU2OEM2MTZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUNCREEzQ0JFM0Y5NEIxOUVERjAwOTk1M0MwRjQ1NUQ3MDUzQjA2MDg4 M0ZGNzRBQjNGRkNBMTI4MThGMDkzMi8wLzMyMzAzMDJlMzEzMjM1MmUzMTMyMzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyH2A MA0GCSqGSIb3DQEBCwUAA4IBAQAcX6lzdOzClA1vcLDa+9zdBJYp3+zUCKKWIcof 7GVEVpHgKQsWML9zoHpiItv8ry3088qBt+6XaMiyiUQ0/nUpGgp9OqB9WXb3NRF+ QTN4dZn9KhfGq9OcmNHZa/SFog2fW6YkRZTg+WODsFKrMFXGL3U2EI7utz07hnWj HDTPPJqeKKntab+A2OYFKYRX7demYU/fl2nE+fiOoc2i18z/PblcSjwJOgl6Tb/i nVRXA6tKZin6LaCoUdyLcVCmySyIda0yRWpIits1hbd9JtvkHvTOE5z0V5nTyV3l ARhxYFPo74EkDMmEBLzzL+4firkPJSmfXImem1XTb33FPVXi -----END CERTIFICATE-----Generated at Sun Jan 25 13:13:32 2026 by rpki-client