This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233382e302f32332d3233203d3e20323730303031.roa
File: 3230302e3134322e3233382e302f32332d3233203d3e20323730303031.roa (raw, json)
Hash identifier: c+nkh09iHCQnv+r5sQKXO0SHehWrgfahs6jpsm8jTrw=
Subject key identifier: 30:E1:13:E8:63:58:94:8D:F5:52:68:76:6A:D0:F6:22:88:39:F3:9E
Certificate issuer: /CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Certificate serial: 0DD1D6E29504956F0EFA6326F7AC271C730702F6
Authority key identifier: 9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233382e302f32332d3233203d3e20323730303031.roa
Signing time: Mon 17 Nov 2025 13:45:01 +0000
ROA not before: Mon 17 Nov 2025 13:40:01 +0000
ROA not after: Mon 16 Nov 2026 13:45:01 +0000
asID: 270001
IP address blocks: 200.142.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d1:d6:e2:95:04:95:6f:0e:fa:63:26:f7:ac:27:1c:73:07:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Validity
Not Before: Nov 17 13:40:01 2025 GMT
Not After : Nov 16 13:45:01 2026 GMT
Subject: CN=30E113E86358948DF55268766AD0F6228839F39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:62:3d:fa:f3:56:d0:3d:f6:9c:48:cc:bd:
21:81:01:d0:48:2c:1d:ac:d9:3a:66:9f:fb:8a:35:
33:b5:be:55:ce:bc:2c:ef:cf:de:4c:ae:41:10:a0:
04:d5:dc:75:8f:3c:af:9f:56:22:bc:7d:99:cd:c4:
de:3a:e6:31:1f:82:cd:81:78:f5:6a:97:da:b1:bc:
60:26:41:0e:30:f4:b3:5c:ec:5f:76:c0:ed:3a:c6:
a4:94:4f:74:c8:1f:7f:36:54:25:f0:ce:2e:47:36:
21:aa:a6:8b:23:74:03:f8:c2:ad:c2:21:a8:6b:ad:
c1:03:cb:74:3d:c7:66:7e:f2:1c:3a:3a:c1:b6:37:
bd:a8:cc:c1:91:31:8c:84:ab:24:6e:e2:32:aa:69:
db:dd:89:9e:2b:1b:19:f8:21:3d:02:64:c3:40:43:
e9:b2:1b:79:ce:3c:4a:da:5e:5b:55:2a:1e:a0:c5:
18:19:00:63:14:41:13:15:94:89:3f:47:62:63:81:
cc:3d:2d:a8:08:51:17:8f:9b:f0:b0:54:e8:14:c6:
04:ac:3d:ec:61:32:13:75:32:14:a3:da:93:2b:05:
7a:a5:73:14:c4:45:91:9b:39:16:30:c5:95:b9:69:
a3:5a:b2:dd:fd:9e:13:52:8d:1e:4b:1c:6b:5d:d7:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:13:E8:63:58:94:8D:F5:52:68:76:6A:D0:F6:22:88:39:F3:9E
X509v3 Authority Key Identifier:
keyid:9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233382e302f32332d3233203d3e20323730303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.142.238.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:48:33:2b:a2:d6:5e:9d:05:91:d0:5a:b4:48:6a:fc:16:1f:
a3:08:aa:e4:5c:db:a5:2f:05:0c:13:6c:bc:f9:f1:0f:dc:e2:
78:24:58:d8:07:ba:d5:b7:14:e3:e7:5e:e5:37:2b:7a:53:0c:
46:27:b1:3e:33:63:f3:72:00:27:14:54:1d:1e:47:d5:81:9c:
ec:37:00:7f:4e:35:9d:0f:4b:d6:32:d1:05:a8:2b:31:0a:c2:
a8:06:52:cd:1e:68:cc:67:bb:28:10:f2:69:21:35:d8:0e:23:
8d:eb:d3:d7:e4:f5:6b:98:69:8b:85:f1:f5:02:46:92:23:9c:
4d:da:d5:4a:95:f3:e5:34:b7:85:cc:a0:36:0e:6d:8b:14:a9:
c8:ab:c6:98:45:69:62:b1:e8:cd:1a:28:b5:be:65:d0:4a:eb:
1e:ba:54:6f:62:99:ee:27:c2:d5:0b:59:91:95:a9:4a:5a:d3:
e9:b3:79:35:d7:e0:a1:2f:a1:bf:1d:ff:41:f0:a2:6a:2d:41:
bc:38:96:44:4c:be:7b:c2:02:0e:dc:c9:66:9d:32:9d:b5:ee:
55:20:f9:25:a4:94:81:82:6c:5e:8b:b3:4c:1f:63:2d:2e:62:
ba:bb:55:4d:b0:a2:1d:47:10:0f:ef:32:6d:2c:b8:ae:ac:34:
22:7c:67:e4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDdHW4pUElW8O+mMm96wnHHMHAvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1NDBEQ0MxRjE4NTFEOUIxMkEzMzNGMUFEMDYzQzNG
QkIzMzczNzAeFw0yNTExMTcxMzQwMDFaFw0yNjExMTYxMzQ1MDFaMDMxMTAvBgNV
BAMTKDMwRTExM0U4NjM1ODk0OERGNTUyNjg3NjZBRDBGNjIyODgzOUYzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRymI9+vNW0D32nEjMvSGBAdBI
LB2s2Tpmn/uKNTO1vlXOvCzvz95MrkEQoATV3HWPPK+fViK8fZnNxN465jEfgs2B
ePVql9qxvGAmQQ4w9LNc7F92wO06xqSUT3TIH382VCXwzi5HNiGqposjdAP4wq3C
IahrrcEDy3Q9x2Z+8hw6OsG2N72ozMGRMYyEqyRu4jKqadvdiZ4rGxn4IT0CZMNA
Q+myG3nOPEraXltVKh6gxRgZAGMUQRMVlIk/R2Jjgcw9LagIURePm/CwVOgUxgSs
PexhMhN1MhSj2pMrBXqlcxTERZGbORYwxZW5aaNast39nhNSjR5LHGtd1znVAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMOET6GNYlI31Umh2atD2Iog5854wHwYDVR0j
BBgwFoAUm1QNzB8YUdmxKjM/GtBjw/uzNzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUIzQTIzOTM5QkMwRkY0MTJGODAwNTQyMzE0NTcyRjNB
Mzk3RDRCMjlENzIzNDgwRTcwMDMwRDMwMzdBOTk4LzAvOUI1NDBEQ0MxRjE4NTFE
OUIxMkEzMzNGMUFEMDYzQzNGQkIzMzczNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjU0MERDQzFGMTg1MUQ5QjEy
QTMzM0YxQUQwNjNDM0ZCQjMzNzM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlCM0EyMzkzOUJDMEZGNDEyRjgwMDU0MjMxNDU3MkYzQTM5N0Q0QjI5
RDcyMzQ4MEU3MDAzMEQzMDM3QTk5OC8wLzMyMzAzMDJlMzEzNDMyMmUzMjMzMzgy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAzMDMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHI
ju4wDQYJKoZIhvcNAQELBQADggEBAORIMyui1l6dBZHQWrRIavwWH6MIquRc26Uv
BQwTbLz58Q/c4ngkWNgHutW3FOPnXuU3K3pTDEYnsT4zY/NyACcUVB0eR9WBnOw3
AH9ONZ0PS9Yy0QWoKzEKwqgGUs0eaMxnuygQ8mkhNdgOI43r09fk9WuYaYuF8fUC
RpIjnE3a1UqV8+U0t4XMoDYObYsUqcirxphFaWKx6M0aKLW+ZdBK6x66VG9ime4n
wtULWZGVqUpa0+mzeTXX4KEvob8d/0HwomotQbw4lkRMvnvCAg7cyWadMp217lUg
+SWklIGCbF6Ls0wfYy0uYrq7VU2woh1HEA/vMm0suK6sNCJ8Z+Q=
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:53:20 2025 by rpki-client