This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa
File: 3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa (raw, json)
Hash identifier: 3aSTtYpEap1poGRlKGAa0Gvkn7ABaZ9HD7uC0a7Xmmw=
Subject key identifier: BC:30:87:4F:1E:79:5E:A5:B2:DD:58:24:44:A4:F9:B9:AA:A7:03:B9
Certificate issuer: /CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Certificate serial: 4DFBC78B5A80711B13694E44EE08DF33907BDBDB
Authority key identifier: 9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa
Signing time: Mon 17 Nov 2025 13:45:00 +0000
ROA not before: Mon 17 Nov 2025 13:40:00 +0000
ROA not after: Mon 16 Nov 2026 13:45:00 +0000
asID: 270001
IP address blocks: 200.142.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fb:c7:8b:5a:80:71:1b:13:69:4e:44:ee:08:df:33:90:7b:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Validity
Not Before: Nov 17 13:40:00 2025 GMT
Not After : Nov 16 13:45:00 2026 GMT
Subject: CN=BC30874F1E795EA5B2DD582444A4F9B9AAA703B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:7d:1f:03:4c:01:3c:b1:f6:1c:b0:5b:4c:
2a:98:dc:08:21:58:02:ca:4e:73:c5:1d:9b:bd:c1:
f9:e7:f7:58:da:05:cf:5c:a3:55:1f:19:38:f7:9c:
e5:a8:b7:74:6d:79:37:38:13:64:51:b3:c1:3a:2f:
c4:e1:db:ed:95:6a:32:53:43:0e:03:ed:91:9f:bc:
13:cc:30:26:6d:02:5f:25:c7:b1:24:a5:b3:2d:0e:
68:cf:73:b5:ce:cd:08:3e:c5:a0:53:0f:ee:98:1a:
ea:87:5c:df:59:f9:2f:6e:c6:bf:df:99:cd:df:ba:
89:5a:41:a7:86:9f:11:58:71:f6:0c:d2:a8:a1:3e:
b9:3b:b4:15:fb:e2:b6:38:03:31:c4:cc:01:a1:f4:
50:78:0c:ee:c7:e3:fa:59:61:76:6a:bf:e4:a3:30:
cb:a3:9d:11:44:24:5d:16:30:ef:be:ca:19:7c:33:
4b:7a:55:9e:10:82:fe:52:c9:dc:0c:cc:13:e9:7e:
2c:a8:92:4d:c4:de:04:74:ae:14:92:87:de:c7:68:
d7:c1:de:71:7b:d5:7d:ad:42:8c:92:b7:91:ec:cc:
c2:30:28:96:53:1b:99:30:bf:55:fe:1c:b6:9b:bc:
47:0d:82:96:c8:44:93:23:db:20:19:10:8c:ff:42:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:87:4F:1E:79:5E:A5:B2:DD:58:24:44:A4:F9:B9:AA:A7:03:B9
X509v3 Authority Key Identifier:
keyid:9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.142.236.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:bb:fa:17:ff:16:66:4b:df:d3:09:d0:e0:41:18:54:89:c8:
44:40:d9:04:4a:3e:fa:7f:09:0a:75:58:99:df:ed:f6:71:36:
43:37:e5:f0:06:b3:25:7d:37:75:4c:1b:aa:c4:e2:e7:75:32:
15:45:b6:2d:04:64:ce:41:53:8b:59:64:dd:6f:67:0b:91:0c:
0a:e4:37:4d:55:71:6c:54:84:43:a0:8d:e3:87:ce:82:0b:77:
82:28:36:c3:3b:95:ff:f3:92:3d:88:cc:ba:4e:58:3b:fc:c3:
04:06:f8:5e:aa:cc:5a:e9:96:57:8a:d6:97:0a:f3:df:43:e6:
39:69:13:eb:05:0e:8b:10:76:62:27:17:14:45:31:7e:8a:bf:
07:4b:a0:d1:32:20:6b:4f:6a:b7:14:f1:c1:45:dc:0e:33:a0:
c3:ef:b7:4e:4c:2f:2b:b0:cf:7a:c3:80:dd:e6:2c:f4:3d:f2:
e4:50:fc:75:a4:d9:55:b8:6a:f8:06:7d:8c:4b:af:da:d3:6a:
81:d2:ab:54:3a:45:b3:8c:d0:0f:ff:a0:20:a8:b5:a2:40:d0:
f9:1d:ac:45:92:67:2b:7c:b2:c2:5b:ed:53:f0:1c:c6:6b:14:
2b:70:12:db:53:e7:d0:7a:e5:ea:a0:b0:bb:97:2a:86:2a:c0:
b2:e9:b0:67
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTfvHi1qAcRsTaU5E7gjfM5B729swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1NDBEQ0MxRjE4NTFEOUIxMkEzMzNGMUFEMDYzQzNG
QkIzMzczNzAeFw0yNTExMTcxMzQwMDBaFw0yNjExMTYxMzQ1MDBaMDMxMTAvBgNV
BAMTKEJDMzA4NzRGMUU3OTVFQTVCMkRENTgyNDQ0QTRGOUI5QUFBNzAzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSn0fA0wBPLH2HLBbTCqY3Agh
WALKTnPFHZu9wfnn91jaBc9co1UfGTj3nOWot3RteTc4E2RRs8E6L8Th2+2VajJT
Qw4D7ZGfvBPMMCZtAl8lx7EkpbMtDmjPc7XOzQg+xaBTD+6YGuqHXN9Z+S9uxr/f
mc3fuolaQaeGnxFYcfYM0qihPrk7tBX74rY4AzHEzAGh9FB4DO7H4/pZYXZqv+Sj
MMujnRFEJF0WMO++yhl8M0t6VZ4Qgv5SydwMzBPpfiyokk3E3gR0rhSSh97HaNfB
3nF71X2tQoySt5HszMIwKJZTG5kwv1X+HLabvEcNgpbIRJMj2yAZEIz/QiJtAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUvDCHTx55XqWy3VgkRKT5uaqnA7kwHwYDVR0j
BBgwFoAUm1QNzB8YUdmxKjM/GtBjw/uzNzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUIzQTIzOTM5QkMwRkY0MTJGODAwNTQyMzE0NTcyRjNB
Mzk3RDRCMjlENzIzNDgwRTcwMDMwRDMwMzdBOTk4LzAvOUI1NDBEQ0MxRjE4NTFE
OUIxMkEzMzNGMUFEMDYzQzNGQkIzMzczNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjU0MERDQzFGMTg1MUQ5QjEy
QTMzM0YxQUQwNjNDM0ZCQjMzNzM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlCM0EyMzkzOUJDMEZGNDEyRjgwMDU0MjMxNDU3MkYzQTM5N0Q0QjI5
RDcyMzQ4MEU3MDAzMEQzMDM3QTk5OC8wLzMyMzAzMDJlMzEzNDMyMmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzAzMDMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
juwwDQYJKoZIhvcNAQELBQADggEBAL27+hf/FmZL39MJ0OBBGFSJyERA2QRKPvp/
CQp1WJnf7fZxNkM35fAGsyV9N3VMG6rE4ud1MhVFti0EZM5BU4tZZN1vZwuRDArk
N01VcWxUhEOgjeOHzoILd4IoNsM7lf/zkj2IzLpOWDv8wwQG+F6qzFrplleK1pcK
899D5jlpE+sFDosQdmInFxRFMX6KvwdLoNEyIGtParcU8cFF3A4zoMPvt05MLyuw
z3rDgN3mLPQ98uRQ/HWk2VW4avgGfYxLr9rTaoHSq1Q6RbOM0A//oCCotaJA0Pkd
rEWSZyt8ssJb7VPwHMZrFCtwEttT59B65eqgsLuXKoYqwLLpsGc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:53:20 2025 by rpki-client