This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
File: 3230302e39312e35362e302f32312d3234203d3e203532343836.roa (raw, json)
Hash identifier: AFGV2wB+JpZ4RQAFXBHyvpAV6LY97nEGzpSJbDE8WrU=
Subject key identifier: 17:3D:DB:0E:4A:E0:B8:B4:12:04:CC:41:12:93:46:3F:A9:B5:65:05
Certificate issuer: /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial: 640324DD9A2C4F556CDF8B851EE63FDADC1C57C4
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
Signing time: Tue 06 Jan 2026 19:21:28 +0000
ROA not before: Tue 06 Jan 2026 19:16:28 +0000
ROA not after: Tue 05 Jan 2027 19:21:28 +0000
asID: 52486
IP address blocks: 200.91.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:03:24:dd:9a:2c:4f:55:6c:df:8b:85:1e:e6:3f:da:dc:1c:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Validity
Not Before: Jan 6 19:16:28 2026 GMT
Not After : Jan 5 19:21:28 2027 GMT
Subject: CN=173DDB0E4AE0B8B41204CC411293463FA9B56505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:fb:3d:8d:1e:b9:1c:d0:89:c4:fb:c7:44:
a2:09:13:6d:05:22:b5:3b:db:bc:96:b6:d1:d6:69:
15:1e:d3:b4:ac:b9:da:b2:8a:38:44:57:78:ee:70:
79:32:37:a5:23:e7:ae:e2:e0:16:a0:c9:3c:7b:74:
67:4a:f7:f7:72:76:f2:71:cd:cb:15:a8:c7:81:6b:
c3:1d:c5:27:ff:26:73:c8:18:cf:87:14:26:e4:ec:
33:42:53:69:24:65:45:9e:ad:29:13:e1:f8:40:1b:
fa:3d:89:14:77:0a:9a:df:5b:3c:be:6e:1b:6f:a4:
1a:bb:e0:74:45:0c:1b:17:6e:db:e0:53:8c:52:bc:
87:f3:c5:f9:d1:59:73:f8:d6:aa:8b:55:a1:09:31:
a7:5b:53:1c:b8:c2:e1:58:ca:52:65:0c:46:ae:a2:
a4:16:6e:f9:6e:0f:d8:23:99:3b:f8:56:8c:f5:53:
68:9c:19:e5:f5:42:1c:87:2f:9b:65:a2:bb:55:8e:
25:3a:2e:b1:20:40:0e:70:8d:da:d4:db:10:49:da:
2d:76:6e:4d:b7:0a:73:93:fb:e1:3a:5e:0c:ee:13:
61:c9:17:61:77:2d:32:0c:55:8f:d5:ff:e2:c8:20:
7f:98:d4:61:8b:39:c9:f7:69:20:d4:81:68:9e:c3:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:DB:0E:4A:E0:B8:B4:12:04:CC:41:12:93:46:3F:A9:B5:65:05
X509v3 Authority Key Identifier:
keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.56.0/21
Signature Algorithm: sha256WithRSAEncryption
89:84:02:db:9e:3c:d9:c3:cd:9c:2e:a6:5d:f6:48:fe:72:b9:
db:7d:58:c3:82:b4:d0:64:ac:b5:11:37:a3:5b:56:a6:10:05:
51:de:d9:24:f5:49:5c:9e:38:93:5a:a4:2b:1d:a1:27:69:5d:
73:a8:cf:83:c8:11:5c:a2:4b:25:32:e9:5b:16:c9:ac:fc:85:
bb:1e:f2:d9:d1:da:73:bb:2f:89:b5:5e:b0:82:81:08:cd:a7:
0d:16:bf:f7:e0:a1:1b:d0:b5:46:31:42:04:a9:31:01:07:c7:
c4:88:f6:3f:75:08:58:9a:f3:3f:f9:d5:a9:df:5a:08:05:c0:
87:16:ad:95:13:ee:2b:bf:a4:b3:f0:24:34:85:7a:37:d1:29:
60:cd:94:eb:43:14:77:df:d2:bf:12:ce:9f:51:82:06:fe:98:
9d:02:36:b2:c9:9f:24:2f:8b:1d:13:6e:74:ac:0b:f3:d1:cb:
db:90:ce:31:94:1a:99:f5:cd:50:90:f2:cb:c3:8f:d6:23:6f:
40:ed:21:11:ad:5c:ec:3c:98:e8:7b:a7:10:73:06:2b:75:05:
81:ac:9f:46:91:96:37:10:d1:39:50:4b:82:f6:e6:d2:99:74:
8c:9a:36:fc:9c:e7:ee:f0:03:2f:6f:09:20:fc:d4:a6:f9:ea:
8c:61:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:35 2026 by rpki-client