This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3135382e302f32342d3234203d3e20313938393439.roa
File: 3230302e39312e3135382e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier: QVYnrdDAb2wv0ugA7t4e9Q9lzrhHHZnJqlU25q0o1t4=
Subject key identifier: 53:E1:1E:B1:0D:E4:F5:44:2C:F3:A3:28:98:C5:BB:68:B9:1D:8B:36
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 66F589054D6FDFBEE1AB8BF985E5A78969D3DF8A
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3135382e302f32342d3234203d3e20313938393439.roa
Signing time: Tue 06 Jan 2026 19:30:32 +0000
ROA not before: Tue 06 Jan 2026 19:25:32 +0000
ROA not after: Tue 05 Jan 2027 19:30:32 +0000
asID: 198949
IP address blocks: 200.91.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f5:89:05:4d:6f:df:be:e1:ab:8b:f9:85:e5:a7:89:69:d3:df:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:32 2026 GMT
Not After : Jan 5 19:30:32 2027 GMT
Subject: CN=53E11EB10DE4F5442CF3A32898C5BB68B91D8B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:67:49:4f:85:2e:76:76:86:32:cf:61:c1:
e1:66:60:22:49:e4:22:26:d0:8d:65:7c:1f:b4:74:
fa:3c:9e:30:be:b5:0e:a5:4e:81:eb:8c:34:6c:31:
d3:e8:0e:7f:df:92:6c:7b:66:c7:89:b4:ab:55:75:
f2:a5:9d:88:e0:f2:50:e9:d7:d3:23:78:c5:25:aa:
6f:65:35:7c:d6:32:21:56:7a:b5:8b:32:0c:3b:39:
6f:6e:38:ae:1d:f3:2c:2a:3e:ce:b4:90:ba:d9:cb:
7a:a7:37:fe:11:ef:d2:af:19:81:64:1c:7a:f7:e2:
67:c2:57:a9:90:8e:94:62:ac:0a:93:bc:ec:8d:74:
eb:aa:dd:97:a2:d5:e4:42:fa:ad:62:0c:cb:34:c3:
a2:b1:47:f9:2f:db:67:05:03:08:c2:55:42:6f:7c:
b2:62:a5:dc:7a:6a:90:93:3c:38:3b:5c:ef:e6:b3:
e8:84:56:1e:88:3a:53:3c:e2:c5:bb:3f:d3:47:cc:
f0:3e:25:2b:8e:67:10:90:f4:e2:30:66:31:69:a4:
61:46:28:e4:5c:a1:56:e3:27:be:84:9b:58:44:23:
ac:ad:f6:f0:6c:19:70:a9:e2:c9:9c:10:94:8f:7f:
47:87:bf:0b:47:3f:bd:3f:0b:6e:97:14:46:9c:a2:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:1E:B1:0D:E4:F5:44:2C:F3:A3:28:98:C5:BB:68:B9:1D:8B:36
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3135382e302f32342d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c7:03:17:ed:c5:4e:a6:c3:41:ca:1b:b8:23:7f:36:75:c1:
0c:0b:c9:2c:63:84:c2:b8:a2:63:40:32:e7:19:aa:9e:68:bb:
6d:09:e1:5a:77:ff:7a:46:21:0b:3a:d4:f5:88:b4:72:41:b7:
e5:a8:cc:42:db:f4:9b:57:73:c6:1b:dd:8e:66:7f:86:fc:03:
05:44:6c:57:ce:88:35:32:b3:f8:bd:51:41:d1:29:7f:26:4f:
93:cb:36:71:aa:28:95:63:45:8d:e2:4a:ba:62:85:46:e9:77:
b5:ae:d8:87:19:4e:97:1b:2f:f0:cc:34:5c:48:05:c6:b8:7e:
51:61:6b:37:d4:1c:81:b6:5c:d8:e4:43:40:da:dc:35:e3:84:
44:38:30:05:34:55:2c:e8:2f:d5:17:2c:ce:58:5a:09:50:10:
91:f6:6b:9f:69:45:b3:9f:db:86:7d:60:10:03:3d:9d:f4:01:
fc:08:f4:07:3c:d7:9a:09:e4:90:82:97:36:be:b0:1f:c6:63:
5f:64:c4:a0:7c:d1:5e:24:85:fc:e0:ce:ae:6b:0d:98:f9:91:
4b:c4:ff:77:3f:ba:14:00:a1:ac:24:f4:92:cb:de:3c:69:59:
fe:79:06:c6:68:19:25:73:19:d3:42:66:f5:ca:19:d9:3c:29:
ed:d8:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:44 2026 by rpki-client