This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa
File: 3230302e372e3135362e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier: NSu3uh0He9RMTTsgw/u3yS1P6z9BZKvfl0+wMSG/vvc=
Subject key identifier: 85:B2:F3:10:80:9A:43:74:1B:DA:B3:B1:C5:8E:26:AB:FD:11:C1:79
Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial: 431A2C42F0F0FD3EA87F90D9DA3E677EB5FF1576
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa
Signing time: Tue 06 Jan 2026 19:30:07 +0000
ROA not before: Tue 06 Jan 2026 19:25:07 +0000
ROA not after: Tue 05 Jan 2027 19:30:07 +0000
asID: 52399
IP address blocks: 200.7.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 20:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1a:2c:42:f0:f0:fd:3e:a8:7f:90:d9:da:3e:67:7e:b5:ff:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Validity
Not Before: Jan 6 19:25:07 2026 GMT
Not After : Jan 5 19:30:07 2027 GMT
Subject: CN=85B2F310809A43741BDAB3B1C58E26ABFD11C179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:4c:52:cc:91:b5:54:9b:30:eb:f2:38:0b:
f9:f3:d9:62:19:83:40:70:1b:c7:c6:60:aa:9d:71:
83:23:7c:83:f6:48:a7:ac:56:00:66:bd:3f:df:6b:
71:87:e5:37:84:f0:f5:89:8c:b9:c8:19:fa:94:27:
7b:ed:da:4e:3d:22:fd:0e:57:c4:9a:30:d1:dd:8d:
05:bc:90:e3:e3:94:f4:52:39:3c:dd:85:34:29:d3:
d3:5e:b9:88:a9:bd:1c:15:33:72:45:f2:cf:27:35:
22:12:fb:92:48:03:b1:1a:18:65:af:d9:33:55:72:
ee:65:a1:34:09:48:11:4c:6a:38:48:1e:da:1b:44:
fa:af:a2:85:d1:c2:6f:31:05:bc:ab:eb:0d:5c:77:
59:e3:be:dd:1f:0d:c5:02:26:21:cc:40:2e:e2:fa:
80:46:dd:f7:79:7d:6e:2d:e3:6e:7b:09:6a:a0:12:
90:f9:d5:3e:48:77:eb:cc:5b:f0:a9:24:bd:90:00:
bb:f4:55:c5:79:b4:11:84:7b:dd:06:c9:08:61:3a:
2a:6c:72:20:c3:17:df:b3:75:2f:a9:e0:4c:c7:aa:
2c:56:7e:33:b6:10:1f:3c:1b:49:6d:ed:12:bd:f1:
b1:c0:8a:4f:aa:e5:d3:57:27:f2:85:2d:ce:bd:c5:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:F3:10:80:9A:43:74:1B:DA:B3:B1:C5:8E:26:AB:FD:11:C1:79
X509v3 Authority Key Identifier:
keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:13:dc:02:6b:3f:a4:40:f6:62:a8:bc:3f:ce:3d:6d:79:9f:
0b:9e:6a:59:67:a2:7d:10:1a:ae:c6:87:5f:44:06:bd:a9:4c:
bf:3c:46:96:b8:a1:0f:f2:1e:33:8c:ce:08:11:95:f1:58:72:
a3:9d:72:73:4b:7a:19:52:b5:6f:b2:df:3e:63:6c:e1:63:08:
a7:5f:2a:bc:8e:2f:73:b4:ff:74:2c:b1:41:3f:2c:bb:80:39:
58:01:dd:e5:59:be:c4:a1:13:37:f8:6b:50:e3:88:69:db:63:
33:ff:e9:63:46:91:7b:8f:a5:df:53:00:52:22:0a:07:78:94:
19:06:33:9d:fe:8a:fe:1f:c4:9e:b7:42:16:e9:ee:9d:a0:7b:
22:46:e4:14:f5:92:de:75:00:0e:01:5f:28:93:90:22:38:40:
1a:47:f4:10:1e:30:1d:76:39:d6:2f:ff:62:7a:96:11:8b:c6:
b5:83:67:d9:5e:92:28:6c:1f:21:0e:b5:c8:98:3e:32:6c:f2:
d8:84:bf:bc:d7:75:41:df:22:53:7c:8d:0c:1f:be:41:4b:3d:
45:04:f9:0d:c8:02:61:aa:55:4b:14:62:21:e5:0e:d0:09:24:
a0:c6:c0:8a:56:5b:66:5a:38:60:75:70:ef:f4:b9:7b:89:07:
76:a8:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:28:22 2026 by rpki-client