This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa
File: 3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa (raw, json)
Hash identifier: R3eq95Q3ELDo+v7MYDGe96D5rz8m+GJ9UEWKR9OKat0=
Subject key identifier: A3:1A:6E:68:15:BE:EC:49:95:35:0E:FF:11:35:AB:39:87:3A:91:D0
Certificate issuer: /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial: 60F46AA70F36224ABB18074989B9976F00200EC7
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa
Signing time: Tue 06 Jan 2026 19:21:26 +0000
ROA not before: Tue 06 Jan 2026 19:16:26 +0000
ROA not after: Tue 05 Jan 2027 19:21:26 +0000
asID: 264780
IP address blocks: 200.126.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f4:6a:a7:0f:36:22:4a:bb:18:07:49:89:b9:97:6f:00:20:0e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Validity
Not Before: Jan 6 19:16:26 2026 GMT
Not After : Jan 5 19:21:26 2027 GMT
Subject: CN=A31A6E6815BEEC4995350EFF1135AB39873A91D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:3f:de:fc:38:49:e4:7f:ad:20:e6:c0:0d:
27:d9:ff:2a:6d:1c:69:8e:60:6c:5a:42:41:6f:01:
b7:0c:50:6c:f6:cb:32:ab:4e:38:a0:01:81:3c:29:
3c:cd:13:f1:f2:de:eb:2c:b0:69:a2:2d:72:26:ba:
92:01:f7:b7:54:cb:0e:9b:c0:eb:80:1f:ac:ad:72:
cb:6f:d3:6c:13:5d:f9:b5:8a:c4:c6:e6:a1:b1:10:
19:d6:e1:46:b1:52:99:f8:7d:04:c8:85:46:7b:bf:
fa:21:c7:3c:0a:c7:f3:4a:ab:62:ae:07:3b:12:07:
d0:40:5a:4b:49:3a:04:1c:a3:29:64:02:1d:84:87:
e9:ea:b8:f6:38:82:de:e8:01:cc:e5:6f:91:c4:30:
42:39:4d:3f:3c:22:ef:b8:b4:e9:3c:3d:c1:1e:80:
cc:66:ad:89:55:b1:34:c1:3b:58:62:ba:57:2c:71:
82:56:51:18:b1:5f:b1:4f:18:98:5e:12:9c:46:72:
55:69:0f:c3:eb:a7:cb:85:b2:c5:73:4b:48:f6:63:
b5:6c:85:53:1d:2a:46:38:02:2b:b1:d4:76:b0:4b:
84:39:62:4c:81:af:b4:3e:c1:68:93:71:87:d6:93:
8e:12:c8:6b:26:5f:2a:ed:cb:c8:a0:62:49:a3:ae:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:6E:68:15:BE:EC:49:95:35:0E:FF:11:35:AB:39:87:3A:91:D0
X509v3 Authority Key Identifier:
keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.126.32.0/20
Signature Algorithm: sha256WithRSAEncryption
82:77:6f:ae:c4:f4:f6:5f:07:dd:98:28:67:d3:24:1f:78:84:
56:2f:53:97:5d:14:35:14:35:c3:f6:36:ad:79:49:7a:6b:10:
b6:09:13:dc:b4:f0:e8:d1:53:d6:0a:95:60:83:18:cb:78:9c:
49:cf:fc:0f:0f:1c:01:fa:13:d7:09:3f:03:89:24:28:8b:1c:
ab:30:54:13:44:5f:b2:1f:8c:dc:17:50:5b:68:ea:3a:56:74:
d5:e2:4d:07:e4:5b:7c:e8:7f:1c:4e:48:5c:12:24:e7:d2:22:
f8:d2:83:cb:2a:64:96:9f:40:e1:fc:21:92:8e:f5:ee:2a:6d:
39:b6:84:3b:10:b6:e6:b2:0b:8a:e1:65:a7:b4:1e:1f:00:b2:
67:8e:d7:fd:c9:a1:44:cd:e4:87:5f:95:3f:6b:cc:3e:b3:c9:
5b:78:ec:a1:8a:63:77:4d:6f:54:1f:10:41:04:35:1d:2d:d0:
0e:99:21:f5:fc:b1:6f:00:21:db:1f:c4:b5:39:29:5d:04:87:
99:75:1b:b1:49:ce:cd:f7:30:c7:23:e2:f3:90:db:4e:64:52:
de:43:81:d8:d9:45:71:5c:f3:a7:89:55:29:f0:af:a5:ec:f8:
40:ee:75:a1:48:b0:19:3a:29:63:13:0d:4a:b0:d6:cc:ce:3b:
f1:e9:a5:52
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYPRqpw82Ikq7GAdJibmXbwAgDscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBCOUM0N0M1RTYwNjQ1NEZDMzE0QUQ3RDhDRDc4NkZC
ODA0OUZGMTAeFw0yNjAxMDYxOTE2MjZaFw0yNzAxMDUxOTIxMjZaMDMxMTAvBgNV
BAMTKEEzMUE2RTY4MTVCRUVDNDk5NTM1MEVGRjExMzVBQjM5ODczQTkxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZD/e/DhJ5H+tIObADSfZ/ypt
HGmOYGxaQkFvAbcMUGz2yzKrTjigAYE8KTzNE/Hy3usssGmiLXImupIB97dUyw6b
wOuAH6ytcstv02wTXfm1isTG5qGxEBnW4UaxUpn4fQTIhUZ7v/ohxzwKx/NKq2Ku
BzsSB9BAWktJOgQcoylkAh2Eh+nquPY4gt7oAczlb5HEMEI5TT88Iu+4tOk8PcEe
gMxmrYlVsTTBO1hiulcscYJWURixX7FPGJheEpxGclVpD8Prp8uFssVzS0j2Y7Vs
hVMdKkY4Aiux1HawS4Q5YkyBr7Q+wWiTcYfWk44SyGsmXyrty8igYkmjrpGtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoxpuaBW+7EmVNQ7/ETWrOYc6kdAwHwYDVR0j
BBgwFoAUILnEfF5gZFT8MUrX2M14b7gEn/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NkFBNzBEQ0JFRDg5MzA1QzU2Mjg2QjJENDc5Mzk5QUM1
MTMzRDA5NTk3QUNFRUY4ODM3RTRFNkVENzhCREI1LzAvMjBCOUM0N0M1RTYwNjQ1
NEZDMzE0QUQ3RDhDRDc4NkZCODA0OUZGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEI5QzQ3QzVFNjA2NDU0RkMz
MTRBRDdEOENENzg2RkI4MDQ5RkYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDZBQTcwRENCRUQ4OTMwNUM1NjI4NkIyRDQ3OTM5OUFDNTEzM0QwOTU5
N0FDRUVGODgzN0U0RTZFRDc4QkRCNS8wLzMyMzAzMDJlMzEzMjM2MmUzMzMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyH4g
MA0GCSqGSIb3DQEBCwUAA4IBAQCCd2+uxPT2XwfdmChn0yQfeIRWL1OXXRQ1FDXD
9jateUl6axC2CRPctPDo0VPWCpVggxjLeJxJz/wPDxwB+hPXCT8DiSQoixyrMFQT
RF+yH4zcF1BbaOo6VnTV4k0H5Ft86H8cTkhcEiTn0iL40oPLKmSWn0Dh/CGSjvXu
Km05toQ7ELbmsguK4WWntB4fALJnjtf9yaFEzeSHX5U/a8w+s8lbeOyhimN3TW9U
HxBBBDUdLdAOmSH1/LFvACHbH8S1OSldBIeZdRuxSc7N9zDHI+LzkNtOZFLeQ4HY
2UVxXPOniVUp8K+l7PhA7nWhSLAZOiljEw1KsNbMzjvx6aVS
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:24:47 2026 by rpki-client