This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e203131383330.roa
File: 3230302e39312e3132382e302f31382d3234203d3e203131383330.roa (raw, json)
Hash identifier: ma88CxYLwiGTMeZH6rpOzEyn7sZyNpj46T9Ye4Fk2Xk=
Subject key identifier: AE:7E:48:4E:CA:63:C3:4A:3B:FB:38:A2:0D:4C:85:82:24:14:46:4C
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 7A4497FA979B87DC8F73FC143A4540D7EB2EEBEA
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e203131383330.roa
Signing time: Tue 06 Jan 2026 19:30:42 +0000
ROA not before: Tue 06 Jan 2026 19:25:42 +0000
ROA not after: Tue 05 Jan 2027 19:30:42 +0000
asID: 11830
IP address blocks: 200.91.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:44:97:fa:97:9b:87:dc:8f:73:fc:14:3a:45:40:d7:eb:2e:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:42 2026 GMT
Not After : Jan 5 19:30:42 2027 GMT
Subject: CN=AE7E484ECA63C34A3BFB38A20D4C85822414464C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:ca:a0:19:04:c2:54:f2:a3:a4:b4:49:a7:
c0:79:8e:e7:8b:2e:60:18:40:35:54:fb:d8:79:80:
4e:f0:51:c0:3d:30:6b:d6:50:67:38:e7:80:19:2b:
a2:58:69:87:4e:93:56:f0:d8:6e:97:61:8e:3b:4b:
f2:37:e0:84:55:71:eb:b8:83:1b:32:9c:0a:6f:df:
1c:1b:c8:5b:2d:93:84:50:48:cf:c9:18:ef:e7:53:
e0:85:0c:11:e8:35:d2:9f:6d:9d:88:0d:40:58:c3:
78:30:77:3c:07:38:28:3e:be:d4:a6:3e:7a:3b:09:
87:17:5e:fc:6a:16:0d:2f:ce:4a:67:f8:a3:9f:da:
04:8a:94:96:50:0a:57:45:d0:c7:26:cc:cb:83:d4:
7d:12:d0:f6:45:04:42:a2:0e:fc:26:c8:cd:c6:24:
d5:05:19:0e:fe:b4:61:b9:dc:f7:ad:66:be:db:8b:
05:75:79:1c:ad:cb:e7:ab:a3:48:f9:fe:1d:a6:0e:
a1:02:f5:d3:34:05:9b:71:db:e6:84:fd:c9:db:07:
c6:0c:a3:39:7f:cf:5d:f8:2e:26:f2:3c:87:40:3a:
4e:73:08:16:0d:46:8e:f1:0b:dc:c0:14:84:cd:8a:
33:0b:58:3e:ca:7b:45:7d:29:5f:e6:cb:80:34:a6:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:48:4E:CA:63:C3:4A:3B:FB:38:A2:0D:4C:85:82:24:14:46:4C
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e203131383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:d5:cb:4d:00:73:0f:b8:38:75:de:02:6a:16:a7:bb:80:e4:
54:0f:17:1b:d2:26:b6:5b:73:3a:af:0a:d7:8e:ad:0c:bd:39:
54:7a:29:27:07:47:c6:fe:47:e4:cb:fd:99:b5:40:5b:c5:63:
df:92:2a:62:04:e3:d5:81:99:d9:07:89:c5:3a:53:76:1a:ad:
13:e8:33:51:0c:97:f4:45:bb:4e:99:b4:56:56:28:87:83:8a:
04:1f:27:d1:8a:01:a6:02:14:f1:17:80:93:40:f9:81:eb:65:
61:5a:01:da:35:c7:47:07:70:80:da:d4:a1:1d:81:06:71:f6:
97:3d:c4:ff:f7:10:b8:82:3b:68:62:ad:bb:32:06:50:0a:b7:
01:b6:a9:63:54:6b:59:ab:1b:d9:32:a3:34:94:73:a4:a7:ed:
28:2f:58:42:22:35:c4:06:18:30:9f:44:8a:ca:72:9c:72:52:
a6:51:10:ad:bf:9e:a1:23:02:ff:33:04:5a:ab:f6:58:32:99:
9f:63:92:8e:4d:fe:32:2a:2a:20:23:0b:a3:64:01:dc:c7:7f:
29:cd:92:db:e3:bb:08:ca:ad:8b:44:2c:54:6e:33:03:e9:28:
0a:b7:a1:95:12:e9:67:bd:05:6b:95:f4:ba:56:2b:98:5d:6d:
2c:8e:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:24 2026 by rpki-client