This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235332e302f32342d3234203d3e20323733313634.roa
File: 3230302e32392e3235332e302f32342d3234203d3e20323733313634.roa (raw, json)
Hash identifier: VAqK2R00q8KNIbZTADOtjbDEEAvL7xNimbFh+9gS77U=
Subject key identifier: 94:F1:96:F3:2C:0D:AF:0D:09:B6:AB:E9:D0:08:87:21:40:38:F5:7B
Certificate issuer: /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial: 4FF6726CE7084D517F3CD571EAB7FC1DDFDEB9C6
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235332e302f32342d3234203d3e20323733313634.roa
Signing time: Fri 05 Dec 2025 18:54:05 +0000
ROA not before: Fri 05 Dec 2025 18:49:05 +0000
ROA not after: Fri 04 Dec 2026 18:54:05 +0000
asID: 273164
IP address blocks: 200.29.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 08:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f6:72:6c:e7:08:4d:51:7f:3c:d5:71:ea:b7:fc:1d:df:de:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Validity
Not Before: Dec 5 18:49:05 2025 GMT
Not After : Dec 4 18:54:05 2026 GMT
Subject: CN=94F196F32C0DAF0D09B6ABE9D00887214038F57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:5f:f4:9c:cf:13:4e:30:5a:b0:4b:42:78:
90:e1:81:62:74:f3:a2:35:0c:89:42:9f:e9:c0:c7:
5b:d1:61:69:f4:f1:2d:33:31:8e:9b:9a:6e:57:00:
34:8f:52:e2:9e:f9:6a:f7:03:7a:02:8b:fc:40:ac:
0d:2a:e4:65:db:9b:ef:cc:24:bc:92:d8:8d:6d:27:
b3:23:1b:02:cb:e0:ae:30:ca:68:00:22:63:b8:cd:
95:1a:68:ca:4f:07:0b:e1:ca:6f:bd:63:50:eb:5c:
dc:e5:2c:a0:60:0b:a3:02:89:22:52:bc:e8:dd:00:
86:25:eb:65:42:46:b4:71:80:8b:00:cb:b7:63:62:
a2:5f:d5:3c:1b:93:9b:a9:91:b4:f9:11:23:f4:b9:
00:9a:39:3d:d0:e6:26:0e:42:45:7e:da:41:26:ee:
a0:36:dd:83:2a:19:b6:92:8f:b6:40:76:32:a4:63:
d2:27:36:e6:42:75:c2:70:a8:21:0e:02:68:26:d7:
a6:35:70:62:01:68:c7:44:7a:a4:d7:7c:58:12:0c:
1a:70:50:1b:2e:c4:c1:85:40:65:fb:34:23:6a:4b:
f9:2f:e0:9f:8c:0b:a8:03:02:f0:03:f2:0c:0d:64:
2f:d3:8c:ef:bf:4e:53:3c:15:2b:73:67:79:fc:80:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:96:F3:2C:0D:AF:0D:09:B6:AB:E9:D0:08:87:21:40:38:F5:7B
X509v3 Authority Key Identifier:
keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235332e302f32342d3234203d3e20323733313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.253.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d1:e4:08:bf:bc:11:e4:31:fe:e4:63:4a:eb:93:08:be:9d:
e7:a6:c2:e2:12:ae:5d:d5:02:f5:76:32:f2:36:17:fb:eb:40:
95:d8:ef:16:0c:c4:e8:78:a0:ee:ca:d7:78:d8:df:d3:de:c4:
42:47:31:c8:d8:d9:e9:9c:7a:44:66:71:60:1a:74:6b:2b:8f:
5a:b5:20:6d:96:4d:9b:98:e9:ab:4b:3c:d6:07:e7:33:60:f7:
7f:c6:7b:86:3d:4a:b4:fb:df:97:af:56:50:0a:00:08:15:b4:
2b:d5:0b:7a:15:ed:c9:a8:88:60:a6:8a:52:7d:c6:fc:ad:07:
2e:0b:e1:32:7a:c6:9e:63:a6:59:32:95:26:96:ba:fa:82:50:
11:5b:02:5c:d5:76:a2:97:38:88:b6:10:ca:8a:23:ba:e1:57:
06:42:76:92:28:a9:8a:6b:76:72:a6:45:76:4c:93:21:85:e6:
ec:79:f0:ce:d0:5c:72:2c:52:51:bc:1d:f5:35:44:37:91:a9:
9d:51:19:4c:7b:ce:d4:ec:f0:4a:06:da:50:35:7d:76:b7:51:
63:b1:f1:9c:30:d5:69:f4:23:ae:4b:82:4b:81:73:53:be:b3:
de:d2:02:1d:f2:dd:de:3a:45:53:84:06:fe:e3:cc:4d:05:98:
a4:a3:9d:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUT/ZybOcITVF/PNVx6rf8Hd/eucYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQzNzJBQ0RFRkIxREEyQzM1QkRDOUI3RjRFODFGNEVE
ODU3RUI1ODAeFw0yNTEyMDUxODQ5MDVaFw0yNjEyMDQxODU0MDVaMDMxMTAvBgNV
BAMTKDk0RjE5NkYzMkMwREFGMEQwOUI2QUJFOUQwMDg4NzIxNDAzOEY1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLil/0nM8TTjBasEtCeJDhgWJ0
86I1DIlCn+nAx1vRYWn08S0zMY6bmm5XADSPUuKe+Wr3A3oCi/xArA0q5GXbm+/M
JLyS2I1tJ7MjGwLL4K4wymgAImO4zZUaaMpPBwvhym+9Y1DrXNzlLKBgC6MCiSJS
vOjdAIYl62VCRrRxgIsAy7djYqJf1Twbk5upkbT5ESP0uQCaOT3Q5iYOQkV+2kEm
7qA23YMqGbaSj7ZAdjKkY9InNuZCdcJwqCEOAmgm16Y1cGIBaMdEeqTXfFgSDBpw
UBsuxMGFQGX7NCNqS/kv4J+MC6gDAvAD8gwNZC/TjO+/TlM8FStzZ3n8gKt9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlPGW8ywNrw0Jtqvp0AiHIUA49XswHwYDVR0j
BBgwFoAU7Tcqze+x2iw1vcm39OgfTthX61gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMxRjBGNEE2QzMyNkY1MTIyQ0FDRDRDNjQ3NTVDRTFB
QkQ5MDQ0NUM2NzVCMjY1RjczODE0QUUyQTkzN0E5LzAvRUQzNzJBQ0RFRkIxREEy
QzM1QkRDOUI3RjRFODFGNEVEODU3RUI1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDM3MkFDREVGQjFEQTJDMzVC
REM5QjdGNEU4MUY0RUQ4NTdFQjU4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMUYwRjRBNkMzMjZGNTEyMkNBQ0Q0QzY0NzU1Q0UxQUJEOTA0NDVD
Njc1QjI2NUY3MzgxNEFFMkE5MzdBOS8wLzMyMzAzMDJlMzIzOTJlMzIzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB39
MA0GCSqGSIb3DQEBCwUAA4IBAQAy0eQIv7wR5DH+5GNK65MIvp3npsLiEq5d1QL1
djLyNhf760CV2O8WDMToeKDuytd42N/T3sRCRzHI2NnpnHpEZnFgGnRrK49atSBt
lk2bmOmrSzzWB+czYPd/xnuGPUq0+9+Xr1ZQCgAIFbQr1Qt6Fe3JqIhgpopSfcb8
rQcuC+EyesaeY6ZZMpUmlrr6glARWwJc1XailziIthDKiiO64VcGQnaSKKmKa3Zy
pkV2TJMhhebsefDO0FxyLFJRvB31NUQ3kamdURlMe87U7PBKBtpQNX12t1FjsfGc
MNVp9COuS4JLgXNTvrPe0gId8t3eOkVThAb+48xNBZiko50N
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:05:46 2025 by rpki-client