This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa
File: 3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa (raw, json)
Hash identifier: 29lf4YlHieisLeKcM/2CIeG3qFMSXfoki3kMpDmBRC0=
Subject key identifier: 26:70:CC:A9:C8:06:E1:32:DE:64:8F:8D:E8:18:94:68:8C:0D:65:09
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 40CEE2E86B02A6A9967D718BD59869D0584AB5F1
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa
Signing time: Sat 29 Nov 2025 02:40:00 +0000
ROA not before: Sat 29 Nov 2025 02:35:00 +0000
ROA not after: Sat 28 Nov 2026 02:40:00 +0000
asID: 13381
IP address blocks: 200.112.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 12:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ce:e2:e8:6b:02:a6:a9:96:7d:71:8b:d5:98:69:d0:58:4a:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Nov 29 02:35:00 2025 GMT
Not After : Nov 28 02:40:00 2026 GMT
Subject: CN=2670CCA9C806E132DE648F8DE81894688C0D6509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:1e:c2:dd:85:f7:64:c3:53:6c:ec:24:e7:
25:ee:cf:ec:a5:7a:19:97:be:7f:2a:b7:ca:19:d3:
b8:11:a4:47:61:7b:fb:d0:53:ee:ab:fc:e5:f5:74:
45:62:8a:e2:92:be:9b:2c:e3:bd:26:be:a4:e1:20:
1e:54:80:08:84:65:42:a9:72:55:c4:5d:74:6d:7b:
c6:a3:86:f6:e0:43:1d:51:b3:ec:4c:83:97:d7:42:
78:ba:a5:4a:07:f7:88:3b:60:c5:d0:ec:7c:d8:fb:
dd:97:7c:f8:5e:0c:f5:38:0e:27:94:b3:9f:ba:d9:
2d:3f:dc:93:0e:ec:fa:4c:97:36:13:77:cd:86:7c:
58:a7:3c:2f:b2:f2:a7:a9:3f:0c:aa:e8:a2:77:1b:
99:9c:d6:2c:4d:de:aa:2b:c3:18:c9:0a:b3:63:0f:
1a:f1:57:c2:fd:25:ce:b0:aa:28:22:11:df:7d:49:
aa:90:79:b7:bc:94:dd:71:92:a8:0f:ec:87:d3:8e:
f3:26:39:be:8c:f8:76:ce:5f:8c:c7:fa:4d:bf:1e:
31:76:17:10:15:ba:bf:30:d9:15:f8:9b:59:77:8f:
58:c4:dd:d7:08:2d:2e:7d:15:fa:3f:07:f6:18:4e:
e8:a2:6e:ae:ce:29:a6:8f:47:ec:74:f6:73:9f:ef:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:CC:A9:C8:06:E1:32:DE:64:8F:8D:E8:18:94:68:8C:0D:65:09
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.228.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9b:9a:fe:4c:37:44:f2:0a:2c:59:fd:54:d8:36:5a:83:88:
71:6e:e5:2a:8e:72:98:97:1e:e4:40:8c:ae:82:91:ec:ad:17:
4c:a9:25:ac:b2:cd:df:ec:d5:64:4e:8e:21:de:f5:64:b1:3b:
89:77:9f:19:af:45:bb:0e:75:f3:57:56:77:dc:80:0e:50:15:
d9:f6:f5:8f:c9:f3:dd:45:de:63:98:cb:d6:42:95:9b:64:99:
e7:ee:d5:ac:57:f9:06:4f:23:d9:44:ee:6a:3e:6f:8a:b5:4c:
9c:f9:21:17:f4:a4:4f:9e:7f:40:fb:b2:7e:93:e1:b2:fe:9b:
e5:c8:38:30:68:4d:d3:c0:82:e1:05:91:14:5e:f3:78:61:74:
70:90:9e:5c:0a:0e:98:bc:90:47:62:13:e0:45:aa:d4:fd:a0:
2c:02:e9:f9:a9:83:d2:51:ac:e6:92:05:44:2f:34:50:ed:e1:
43:d9:0d:76:82:d4:e1:16:3d:d8:aa:b7:b7:c6:91:81:36:15:
08:30:1a:d5:99:00:74:ab:a1:4b:29:64:3a:ab:a9:61:dc:0c:
1c:2e:3c:06:7e:38:ff:29:33:b4:76:ce:4d:a4:5f:da:d6:77:
f7:3e:11:dc:da:e1:c0:69:98:5e:82:e4:6a:90:0e:41:21:c3:
58:e9:df:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQM7i6GsCpqmWfXGL1Zhp0FhKtfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTExMjkwMjM1MDBaFw0yNjExMjgwMjQwMDBaMDMxMTAvBgNV
BAMTKDI2NzBDQ0E5QzgwNkUxMzJERTY0OEY4REU4MTg5NDY4OEMwRDY1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYh7C3YX3ZMNTbOwk5yXuz+yl
ehmXvn8qt8oZ07gRpEdhe/vQU+6r/OX1dEViiuKSvpss470mvqThIB5UgAiEZUKp
clXEXXRte8ajhvbgQx1Rs+xMg5fXQni6pUoH94g7YMXQ7HzY+92XfPheDPU4DieU
s5+62S0/3JMO7PpMlzYTd82GfFinPC+y8qepPwyq6KJ3G5mc1ixN3qorwxjJCrNj
DxrxV8L9Jc6wqigiEd99SaqQebe8lN1xkqgP7IfTjvMmOb6M+HbOX4zH+k2/HjF2
FxAVur8w2RX4m1l3j1jE3dcILS59Ffo/B/YYTuiibq7OKaaPR+x09nOf7zt/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJnDMqcgG4TLeZI+N6BiUaIwNZQkwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMyMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyHDk
MA0GCSqGSIb3DQEBCwUAA4IBAQB3m5r+TDdE8gosWf1U2DZag4hxbuUqjnKYlx7k
QIyugpHsrRdMqSWsss3f7NVkTo4h3vVksTuJd58Zr0W7DnXzV1Z33IAOUBXZ9vWP
yfPdRd5jmMvWQpWbZJnn7tWsV/kGTyPZRO5qPm+KtUyc+SEX9KRPnn9A+7J+k+Gy
/pvlyDgwaE3TwILhBZEUXvN4YXRwkJ5cCg6YvJBHYhPgRarU/aAsAun5qYPSUazm
kgVELzRQ7eFD2Q12gtThFj3Yqre3xpGBNhUIMBrVmQB0q6FLKWQ6q6lh3AwcLjwG
fjj/KTO0ds5NpF/a1nf3PhHc2uHAaZheguRqkA5BIcNY6d/3
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:39 2025 by rpki-client