This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa
File: 3230302e33332e38322e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier: sRrIYYafMQLn/whEKTgyr1arbor2U61qND1UvZMFxV0=
Subject key identifier: E3:1F:73:0B:E0:1A:F5:DA:8C:9A:C3:9A:29:03:58:D3:A0:E9:63:6C
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 4B7C5EAE70DD247EB49A44CAC42D260D339C4C8B
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa
Signing time: Tue 06 Jan 2026 19:31:13 +0000
ROA not before: Tue 06 Jan 2026 19:26:13 +0000
ROA not after: Tue 05 Jan 2027 19:31:13 +0000
asID: 22927
IP address blocks: 200.33.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7c:5e:ae:70:dd:24:7e:b4:9a:44:ca:c4:2d:26:0d:33:9c:4c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Jan 6 19:26:13 2026 GMT
Not After : Jan 5 19:31:13 2027 GMT
Subject: CN=E31F730BE01AF5DA8C9AC39A290358D3A0E9636C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:5a:d2:42:f6:4b:9b:9a:a8:89:6f:03:6c:
04:c1:b1:b3:c3:f0:0d:e9:4b:a1:d5:10:ef:1a:c8:
cb:4a:77:ef:0d:e5:e7:03:eb:82:ad:a6:c2:13:cb:
f3:cc:14:9f:7d:92:54:39:45:61:c5:71:01:da:d0:
7f:12:a6:86:0c:78:da:0d:e1:b0:cd:7e:8b:63:86:
48:9f:5c:83:4e:d8:7f:0f:b0:c3:99:31:12:5b:dc:
b7:18:da:b7:0c:75:10:d4:65:e7:6e:4a:55:3e:01:
ce:c7:40:44:4a:57:58:4e:fe:51:97:76:c7:2f:b4:
40:1f:e9:39:6a:c1:06:cd:9e:3b:46:bb:58:ea:ef:
3c:e0:1c:80:c8:10:04:cf:d2:e4:6f:c3:8d:88:21:
0d:d1:68:5c:e4:3b:85:98:9c:c8:d9:32:6a:85:3d:
4e:80:34:b3:39:f6:e1:2c:a4:9b:f8:4e:dd:51:cf:
24:f7:52:eb:63:8e:c4:ac:6e:08:04:b7:b3:40:e4:
38:36:72:ff:36:ca:2a:07:0c:66:10:0d:0e:03:d6:
1e:7b:a5:6b:6d:ac:75:7b:3d:b0:59:26:c8:5a:37:
9e:8d:f3:b2:d9:b9:d2:8a:a6:52:35:48:fe:05:80:
c9:37:38:31:3e:70:91:c0:c0:d5:8f:92:f7:1d:c2:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:73:0B:E0:1A:F5:DA:8C:9A:C3:9A:29:03:58:D3:A0:E9:63:6C
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.82.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9f:ce:6b:be:dd:c1:b3:59:a8:9c:d1:0b:26:09:51:82:75:
56:3f:41:24:d1:65:49:4e:4a:2d:21:65:37:83:f8:d2:33:a9:
1b:79:68:6b:94:86:7f:65:43:71:9c:2c:24:d5:2f:5d:ca:29:
19:8f:b6:83:6d:58:3f:e7:f9:1b:7b:fd:b5:ec:7c:ec:4f:b7:
5f:d4:f2:a6:ea:6f:b1:bd:b3:e5:99:1c:ab:c8:76:46:a9:de:
e5:1b:27:db:48:02:12:a5:85:d2:12:30:8c:21:41:db:c6:eb:
df:b6:bb:43:80:54:d9:cd:e8:59:ec:87:6f:4d:40:01:6e:48:
b6:5b:80:35:93:9f:99:91:ee:5b:5e:ef:55:be:cc:e8:b8:26:
07:26:4a:91:d9:e1:ab:cb:72:d4:5f:3a:0d:47:00:15:64:aa:
34:da:d7:f7:d7:4c:8c:ba:10:ee:7e:53:93:1d:fd:0f:60:d9:
53:ae:64:a2:69:73:9e:7f:10:ca:37:76:a4:e7:29:4f:c9:5a:
58:6a:c8:80:54:81:7e:41:15:73:9a:41:4b:e3:d4:24:d2:3b:
57:c5:51:7f:d5:f0:e3:ab:25:1e:1b:50:67:af:da:be:a4:cb:
ac:d2:d4:80:55:2a:9c:6d:63:b6:de:93:ec:f9:7d:e3:60:27:
e2:31:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:34 2026 by rpki-client