This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
File: 3230302e3130372e38342e302f32322d3232203d3e203237363934.roa (raw, json)
Hash identifier: PGvd3r2zBQ1G4Q89XDldHKodVPN/TivrRR7CX0wTou0=
Subject key identifier: C3:09:B0:92:8F:49:EA:B9:67:CE:08:22:DC:77:55:5A:D2:CD:8C:3B
Certificate issuer: /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial: 292BE7ABECA9120F451538D9D46DDD1D9FC652EA
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
Signing time: Tue 06 Jan 2026 19:20:10 +0000
ROA not before: Tue 06 Jan 2026 19:15:10 +0000
ROA not after: Tue 05 Jan 2027 19:20:10 +0000
asID: 27694
IP address blocks: 200.107.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 13:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2b:e7:ab:ec:a9:12:0f:45:15:38:d9:d4:6d:dd:1d:9f:c6:52:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Validity
Not Before: Jan 6 19:15:10 2026 GMT
Not After : Jan 5 19:20:10 2027 GMT
Subject: CN=C309B0928F49EAB967CE0822DC77555AD2CD8C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:29:a5:59:2c:ef:3e:4b:15:19:2e:a9:99:
35:d3:81:79:f7:18:6e:1a:24:02:52:b2:b9:40:88:
83:3f:40:ce:6f:16:b3:2f:aa:44:11:4e:e1:59:86:
63:63:d1:87:8d:f3:87:3c:c7:01:b8:e8:38:5b:bc:
3e:e9:a7:8c:9c:86:b1:f9:84:f2:db:2f:a5:a6:bc:
be:00:f0:ba:ff:04:4e:e4:62:a4:09:a3:b5:62:af:
53:62:61:60:24:3f:97:8a:d1:85:62:77:21:6d:d3:
bc:fd:97:39:6f:86:19:50:5e:58:e7:c6:61:5d:8f:
fa:d2:e9:39:51:19:3a:0d:de:01:93:14:8e:ca:dc:
18:52:d3:7e:47:98:16:8f:df:31:39:4d:21:8f:64:
08:2c:88:05:ce:1e:0d:c9:a5:f9:76:94:55:8e:a5:
06:71:8e:42:5e:fb:4f:21:5e:50:ff:7f:7e:f2:e2:
95:35:38:e2:85:17:57:8f:09:18:93:b5:57:7b:58:
3d:ad:fa:57:1c:7b:ad:61:40:ff:b4:21:c1:62:2d:
2a:7a:8b:0e:8e:47:85:27:32:de:a0:93:0e:b7:bb:
06:42:d3:00:88:f4:cf:68:4d:70:e9:b8:40:7f:c6:
dd:51:8b:12:bd:0e:b7:64:1d:ad:81:78:25:8d:29:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:B0:92:8F:49:EA:B9:67:CE:08:22:DC:77:55:5A:D2:CD:8C:3B
X509v3 Authority Key Identifier:
keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.84.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9f:7b:0e:f2:20:9e:93:ba:2e:ce:f6:5b:66:95:32:e9:4e:
ac:70:07:13:0d:d2:74:03:d3:d5:80:d2:7e:3c:05:83:95:42:
bf:20:a1:50:29:ce:4c:bb:fb:61:fc:55:11:b1:ab:dc:95:e8:
e4:da:23:fd:9b:68:02:c7:97:ab:c1:f6:91:5a:57:85:5e:78:
a5:cb:98:36:b2:43:d0:2c:d0:3b:1d:12:88:a0:9b:2d:b5:ab:
22:6b:4f:3c:30:af:6b:39:3f:bb:0a:59:9a:f8:c6:fa:ae:61:
93:fb:f4:9c:d8:46:b4:f5:4f:7d:44:c8:86:53:6c:69:0e:32:
08:3d:a8:e6:1c:b9:ec:28:9d:10:99:f0:00:ff:20:d3:58:9b:
3d:cb:ae:f7:d3:43:a8:e8:80:55:75:8c:eb:a5:f1:c9:44:0f:
df:6a:2a:66:7c:66:86:b6:4e:97:c5:4a:e1:8c:ed:42:90:05:
bd:5c:ed:b5:04:58:31:b4:b2:68:2f:5f:0b:4d:3e:bc:13:9b:
99:eb:0b:8e:f3:8f:9b:70:d4:6b:ae:c3:02:da:ea:01:10:a8:
41:fe:6f:af:17:af:f4:39:cf:14:a7:6d:9e:26:e3:3d:6a:90:
9f:c4:b3:cd:d7:9a:04:5a:03:84:92:d4:d0:d5:57:aa:59:88:
96:68:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:47 2026 by rpki-client