This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
File: 3230302e32392e32382e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: kC7rS7fvaMBuxjQ97JhFoyoxhbG8GQwIL680E4Ygqvc=
Subject key identifier: A7:FE:A8:EA:33:74:00:A9:57:A8:AE:4F:78:45:2E:AC:04:8A:17:B7
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 5B78A51D66DFF9C3B4989CD5DD62D38F73520F4E
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
Signing time: Tue 06 Jan 2026 20:54:36 +0000
ROA not before: Tue 06 Jan 2026 20:49:36 +0000
ROA not after: Tue 05 Jan 2027 20:54:36 +0000
asID: 4995
IP address blocks: 200.29.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:78:a5:1d:66:df:f9:c3:b4:98:9c:d5:dd:62:d3:8f:73:52:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Jan 6 20:49:36 2026 GMT
Not After : Jan 5 20:54:36 2027 GMT
Subject: CN=A7FEA8EA337400A957A8AE4F78452EAC048A17B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:71:64:92:a5:86:ed:dc:ae:ea:61:97:fe:
90:32:be:51:fa:d9:b6:f5:97:c2:fe:59:ca:a5:6e:
56:d4:77:c5:2e:5b:52:9a:4f:11:23:f1:d4:23:92:
92:02:c5:94:68:3f:6a:fa:ec:3e:5c:0d:83:f1:a9:
50:58:6a:74:92:2d:4f:fa:b1:51:d7:bd:f0:17:8c:
42:09:17:2a:5e:93:95:25:0e:e4:3c:e7:9b:4e:b2:
86:fa:ab:db:24:06:0a:22:7e:92:45:7a:74:d1:a9:
15:e0:e8:83:4d:0a:fb:8d:f1:70:14:ef:f0:05:af:
f9:b9:fd:1a:66:ad:29:9b:8a:5c:35:f3:29:01:ac:
b2:ec:60:e5:9f:39:e4:bb:77:8a:ae:9c:78:73:c6:
cd:e0:11:dd:85:ff:68:99:81:07:9c:c4:49:50:2a:
a9:95:0f:55:75:15:8d:71:7e:4f:4c:6c:1b:54:d3:
25:27:00:8e:34:3b:f0:42:bd:83:eb:c1:15:83:9b:
76:b9:9f:77:c2:a5:18:e2:61:47:18:0a:5c:87:ae:
d7:d9:18:36:8b:0b:bf:e0:1f:30:a5:03:b1:29:67:
dc:b8:de:31:e4:de:27:59:e0:2b:0e:c5:81:cf:c5:
ae:2d:53:65:3c:f7:1f:15:4c:61:87:05:0b:fb:a9:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:A8:EA:33:74:00:A9:57:A8:AE:4F:78:45:2E:AC:04:8A:17:B7
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
19:15:76:a0:41:f2:55:cc:44:fe:90:1e:be:7a:36:ee:16:18:
a0:04:43:3b:f0:97:cd:69:9d:90:e4:d5:1a:ae:98:08:af:41:
28:d6:7f:79:47:48:55:2b:66:7d:10:98:4f:2a:48:a3:2f:ea:
15:41:36:43:88:75:5d:6b:1c:96:72:83:7b:7f:4f:63:98:db:
3d:86:65:67:50:16:1d:4f:c9:21:3e:a5:2d:b0:a4:d9:81:77:
d2:f1:57:bb:bd:33:45:6d:24:ef:46:75:03:e2:1b:28:25:27:
3a:09:10:e6:8a:11:7e:de:38:51:7a:42:b6:3d:67:a7:16:80:
84:f8:2a:31:a9:b6:d8:94:60:95:7a:73:3f:d5:3d:5f:05:f1:
0e:6a:c2:9f:63:d0:e7:31:7f:67:17:b7:2f:e4:91:85:75:8a:
76:a4:c2:ab:9b:71:49:39:a7:af:93:47:2e:fa:01:61:31:cd:
03:e9:bc:bc:ab:b9:ca:23:33:62:26:9b:0c:77:fe:aa:90:8c:
bc:be:8c:24:67:78:1b:33:7a:8a:15:35:5f:9e:60:ae:ff:de:
18:ad:89:95:fe:94:76:64:3b:76:35:27:03:17:2e:d3:e7:0c:
24:8e:c6:f9:45:b3:31:d9:c8:f0:00:50:00:b3:5f:eb:0c:25:
f1:2c:87:97
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUW3ilHWbf+cO0mJzV3WLTj3NSD04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNjAxMDYyMDQ5MzZaFw0yNzAxMDUyMDU0MzZaMDMxMTAvBgNV
BAMTKEE3RkVBOEVBMzM3NDAwQTk1N0E4QUU0Rjc4NDUyRUFDMDQ4QTE3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzXFkkqWG7dyu6mGX/pAyvlH6
2bb1l8L+WcqlblbUd8UuW1KaTxEj8dQjkpICxZRoP2r67D5cDYPxqVBYanSSLU/6
sVHXvfAXjEIJFypek5UlDuQ855tOsob6q9skBgoifpJFenTRqRXg6INNCvuN8XAU
7/AFr/m5/RpmrSmbilw18ykBrLLsYOWfOeS7d4qunHhzxs3gEd2F/2iZgQecxElQ
KqmVD1V1FY1xfk9MbBtU0yUnAI40O/BCvYPrwRWDm3a5n3fCpRjiYUcYClyHrtfZ
GDaLC7/gHzClA7EpZ9y43jHk3idZ4CsOxYHPxa4tU2U89x8VTGGHBQv7qUfXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUp/6o6jN0AKlXqK5PeEUurASKF7cwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIzOTJlMzIzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0cMA0GCSqG
SIb3DQEBCwUAA4IBAQAZFXagQfJVzET+kB6+ejbuFhigBEM78JfNaZ2Q5NUarpgI
r0Eo1n95R0hVK2Z9EJhPKkijL+oVQTZDiHVdaxyWcoN7f09jmNs9hmVnUBYdT8kh
PqUtsKTZgXfS8Ve7vTNFbSTvRnUD4hsoJSc6CRDmihF+3jhRekK2PWenFoCE+Cox
qbbYlGCVenM/1T1fBfEOasKfY9DnMX9nF7cv5JGFdYp2pMKrm3FJOaevk0cu+gFh
Mc0D6by8q7nKIzNiJpsMd/6qkIy8vowkZ3gbM3qKFTVfnmCu/94YrYmV/pR2ZDt2
NScDFy7T5wwkjsb5RbMx2cjwAFAAs1/rDCXxLIeX
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:35 2026 by rpki-client