This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa
File: 3230302e372e3135322e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier: cNsZlvBDybFkXQs/DagpquzHsmRYT9GDMN1fs28vvKY=
Subject key identifier: D5:6A:C3:60:80:A7:7E:17:FB:A6:67:8D:DD:3F:F1:A8:E8:2F:E4:30
Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial: 3F5A8E254365B849759AB72BA68AB301E7C8E15D
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa
Signing time: Tue 06 Jan 2026 19:30:09 +0000
ROA not before: Tue 06 Jan 2026 19:25:09 +0000
ROA not after: Tue 05 Jan 2027 19:30:09 +0000
asID: 52399
IP address blocks: 200.7.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 20:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5a:8e:25:43:65:b8:49:75:9a:b7:2b:a6:8a:b3:01:e7:c8:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Validity
Not Before: Jan 6 19:25:09 2026 GMT
Not After : Jan 5 19:30:09 2027 GMT
Subject: CN=D56AC36080A77E17FBA6678DDD3FF1A8E82FE430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:9b:36:4b:f7:13:4f:40:b7:d4:14:21:80:
36:4c:4f:04:56:a8:e4:23:84:4f:e6:74:f5:0f:ac:
06:98:c8:70:6d:47:90:e5:ab:1a:21:83:15:0f:91:
e0:f3:42:4e:b5:98:52:36:7d:9f:93:eb:a0:e8:0a:
f2:9e:db:bd:a6:66:ea:62:4d:d8:34:54:ec:1f:ea:
6c:13:a0:02:ca:15:47:ea:cf:cb:44:28:ec:3e:14:
10:3c:48:37:aa:af:f8:7c:ae:2d:7b:a2:22:c1:a5:
6a:42:67:92:fc:db:6d:3b:32:c0:0f:fc:ae:66:81:
ed:de:2c:db:8c:25:f9:72:61:08:c9:62:53:e7:f9:
35:55:ca:1c:0b:3f:33:d3:15:83:0f:6b:1c:86:fd:
4e:14:1c:6c:f1:c5:47:01:9d:e6:c9:25:3a:7e:52:
0a:7d:97:f7:aa:86:e2:ee:17:e3:c1:22:bb:c0:3e:
d7:52:e2:da:f8:c3:b3:68:c6:87:ff:fe:66:9c:eb:
2a:da:5c:e9:8e:65:7f:1b:78:64:4c:45:18:d2:3b:
21:6f:79:31:92:ae:14:a9:70:03:35:6c:c3:7a:bf:
c8:8a:79:5f:61:40:2d:23:e5:a6:37:54:13:24:d3:
1f:82:98:2b:8a:e0:95:e0:3b:77:02:fc:67:e7:b1:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:C3:60:80:A7:7E:17:FB:A6:67:8D:DD:3F:F1:A8:E8:2F:E4:30
X509v3 Authority Key Identifier:
keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.152.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c3:47:7a:08:cf:5e:cb:14:e4:8f:6e:d1:1c:14:63:a6:de:
a4:ba:7d:e2:ad:d4:a7:d8:ac:7c:18:30:89:d0:35:f5:c2:67:
68:80:09:3b:ca:bd:ec:30:83:f7:2d:3b:f9:f3:51:f7:db:7b:
3d:7d:24:df:80:05:9b:bd:b7:fe:d8:d9:3c:3d:0b:00:07:bb:
d7:38:c7:ec:b1:2d:86:a9:66:59:0c:b5:d1:2e:cc:26:a9:bc:
45:5a:c6:9f:fc:74:a6:a4:c2:1c:4c:91:29:34:de:5a:71:1b:
14:ed:f0:de:87:e9:e3:c5:50:9e:54:3e:fa:05:ab:0a:e2:53:
ea:3c:4b:42:c2:74:d1:ee:92:c1:2f:cc:b2:27:b2:c5:9d:f4:
c0:0b:f3:0b:57:02:ad:dc:9e:15:96:fe:97:c2:79:0e:0e:2c:
20:72:85:de:7d:f4:a5:7b:6b:fe:b9:42:02:03:d3:4a:98:0f:
5f:89:3a:76:77:ff:0a:3a:b9:c5:2b:fd:f3:42:50:a1:63:74:
df:fa:df:99:cb:f2:a2:84:c5:3b:f3:a6:1d:5f:13:f6:ca:9d:
97:88:d8:53:f1:42:38:4c:c5:f4:27:19:36:1b:2c:f2:a1:56:
6c:76:3e:cc:89:51:1b:79:cd:a5:25:07:6d:3c:26:f0:f9:05:
bc:5e:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:58 2026 by rpki-client