This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
File: 3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa (raw, json)
Hash identifier: nlNnG8puODvqOefuUiIrRaEwFiDwtumNfx1FxrH+ylk=
Subject key identifier: 17:05:73:55:66:3A:A3:12:0F:CE:2F:54:62:75:B2:AA:2D:C1:95:CB
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 0A01D076BDC9E955B75692EFF93BD3C0E47DEEAF
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
Signing time: Tue 06 Jan 2026 20:58:15 +0000
ROA not before: Tue 06 Jan 2026 20:53:15 +0000
ROA not after: Tue 05 Jan 2027 20:58:15 +0000
asID: 13381
IP address blocks: 200.112.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 05:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:d0:76:bd:c9:e9:55:b7:56:92:ef:f9:3b:d3:c0:e4:7d:ee:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Jan 6 20:53:15 2026 GMT
Not After : Jan 5 20:58:15 2027 GMT
Subject: CN=17057355663AA3120FCE2F546275B2AA2DC195CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:5e:84:93:53:74:3b:47:93:e8:7a:9a:0d:
2a:99:66:b5:bc:b6:7d:5e:1a:03:b4:b7:67:4e:fe:
33:4b:1e:10:b2:e1:cd:52:32:e0:0f:d9:42:86:21:
f6:f5:ec:61:4f:19:06:8c:31:86:83:a4:de:a0:da:
f5:df:9d:bb:ba:de:35:f0:63:17:3f:35:9d:71:d3:
76:6e:60:53:53:13:f6:ba:21:ee:6d:65:f2:31:9d:
3f:85:87:38:ed:8c:53:c6:bb:4f:40:3d:9d:41:eb:
81:44:58:4a:ba:7f:72:60:e9:79:be:8e:44:e4:e6:
e5:4e:59:5e:14:63:72:85:77:4e:a8:1c:bf:8f:8b:
aa:06:15:8c:e3:a2:7f:d5:08:1e:cf:8e:37:38:43:
64:d4:90:c6:b2:c7:78:f9:95:4e:70:5e:59:e7:20:
6f:ed:72:b1:f8:c7:52:54:00:5a:af:99:52:6f:4e:
c0:c7:c9:81:7a:66:30:76:d9:69:21:bc:d6:6e:2f:
93:77:4d:a9:28:c9:6b:d6:3c:c9:d1:70:0c:5e:0b:
e0:a6:ee:0c:61:1b:3e:ac:35:e9:21:0d:d6:c1:10:
7c:11:2e:cb:47:d0:76:3f:58:f6:ad:3a:f1:c9:4b:
fb:1c:eb:1c:1c:f9:69:85:85:53:65:5e:de:b3:2d:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:73:55:66:3A:A3:12:0F:CE:2F:54:62:75:B2:AA:2D:C1:95:CB
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.242.0/23
Signature Algorithm: sha256WithRSAEncryption
14:25:28:22:1e:05:e4:23:fa:36:86:26:95:cd:81:31:e8:2f:
22:45:e6:47:5b:08:84:e2:5e:d0:30:bc:79:b3:2c:3f:4a:84:
24:c3:21:0f:9f:19:a5:47:0e:9f:29:77:16:4c:ef:e5:38:28:
24:95:91:df:20:8b:18:eb:29:34:52:15:84:cb:31:bc:9c:83:
9f:e2:9d:a7:d1:1b:64:21:44:c4:e5:0d:4d:01:32:ad:1d:95:
03:d6:c6:a5:6e:63:ae:62:41:56:9e:77:1e:c8:13:45:da:e3:
59:af:00:30:4d:4a:1e:e3:c4:5a:d7:bd:ef:d9:81:b5:b0:31:
46:62:37:9c:4f:b8:1a:d2:69:97:79:01:c6:ee:51:4b:6a:e2:
8c:b0:46:44:d8:22:9e:26:0d:f3:f1:97:1f:d4:5e:38:0b:75:
80:da:e3:cc:ee:23:8d:1d:9d:d9:ca:e4:24:a0:da:a4:eb:c4:
10:38:a8:a9:40:d9:8e:7d:fc:72:94:5b:5a:ff:22:32:04:45:
00:de:f9:63:33:8b:72:ce:6a:36:72:30:74:a3:5a:25:88:e0:
dd:63:32:93:22:84:0d:a4:48:26:38:cc:1d:ec:22:0f:64:79:
40:77:d9:cb:dc:6b:8c:94:fe:57:bf:97:f7:07:05:9c:92:f4:
d9:d1:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:20 2026 by rpki-client