This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
File: 3230302e31302e33322e302f32302d3230203d3e20323634383530.roa (raw, json)
Hash identifier: iDsnVvQMsiwX3xGptqLcKQd+e+FDYGgZ2lqbbLgwtgU=
Subject key identifier: 7E:C3:64:8F:E7:49:8B:10:D6:DC:B4:7A:49:56:83:68:9C:6B:EC:07
Certificate issuer: /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial: 6489091A534574CE81AED647D3F69D6AF5542320
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
Signing time: Tue 06 Jan 2026 19:33:06 +0000
ROA not before: Tue 06 Jan 2026 19:28:06 +0000
ROA not after: Tue 05 Jan 2027 19:33:06 +0000
asID: 264850
IP address blocks: 200.10.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 19:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:89:09:1a:53:45:74:ce:81:ae:d6:47:d3:f6:9d:6a:f5:54:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Validity
Not Before: Jan 6 19:28:06 2026 GMT
Not After : Jan 5 19:33:06 2027 GMT
Subject: CN=7EC3648FE7498B10D6DCB47A495683689C6BEC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:1d:4a:9d:18:3a:20:fd:7f:85:dd:59:48:
69:b5:19:e8:ab:2e:81:c7:8a:b2:be:26:90:56:07:
6e:19:66:a5:78:25:35:a6:3e:ef:3a:77:8e:12:39:
04:2c:7f:38:8c:f3:3c:18:31:ad:3d:24:ce:c2:e0:
e0:33:24:14:d5:49:d1:65:0d:f3:9a:27:8e:75:98:
71:bc:2d:33:19:36:49:89:ce:38:87:8f:ac:a3:f7:
c2:e4:aa:65:0a:0a:79:94:7c:20:7a:1b:ad:07:15:
8c:cc:6d:e0:a1:3c:93:63:8c:0a:54:87:f2:e9:32:
6d:34:1f:ac:c4:c5:44:d1:7e:ac:49:4d:3e:1c:bc:
50:0d:58:4c:03:63:bb:6b:c8:54:e2:c3:ac:ee:89:
ac:87:2c:e3:b6:0f:20:dc:22:29:14:53:45:e6:ad:
aa:22:55:97:69:4b:7d:cc:56:2c:16:07:86:3b:61:
e7:ea:ea:03:6f:a9:8a:45:6c:9c:e6:0a:a8:aa:02:
4c:a3:81:b6:54:98:04:6f:30:83:03:2a:2e:32:3c:
86:c0:8d:58:b7:cb:73:ff:6c:19:f9:1e:97:90:34:
85:37:49:19:45:bc:07:05:32:f6:47:de:b2:bf:19:
7b:a7:af:ce:77:bf:48:f0:b3:c4:66:ce:3f:d1:8e:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:64:8F:E7:49:8B:10:D6:DC:B4:7A:49:56:83:68:9C:6B:EC:07
X509v3 Authority Key Identifier:
keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:50:f3:5e:73:e7:4d:2c:51:e7:b1:e7:eb:ef:68:da:e2:71:
4d:ad:d5:78:35:64:73:9b:17:17:cc:fb:14:ac:87:51:8d:6f:
53:b3:a8:eb:46:0d:c6:9c:12:bd:15:2a:48:b7:42:a2:4e:ca:
78:1d:54:a3:5b:6d:33:38:a0:14:9a:01:c5:b4:b6:9a:a7:04:
d0:19:5b:2a:f1:2f:af:d1:df:ce:98:13:1f:4a:e4:b6:e4:f4:
76:36:b5:4e:e1:d7:5f:86:17:dc:95:fa:13:2b:fd:d0:99:c7:
d2:59:10:51:3c:47:b2:91:f4:09:e5:cb:8d:58:92:d9:81:e1:
8e:b1:22:7f:b7:73:b3:a2:d2:5e:d0:61:fe:54:90:82:79:29:
5a:96:f2:19:76:f2:bc:fc:d5:0b:b6:a0:9f:d6:55:86:25:6b:
4e:fe:74:7a:cf:c8:94:6e:2e:14:44:44:e3:54:1f:f9:c5:9a:
e9:ca:8d:4b:4c:41:27:66:c5:9d:79:c1:ac:ef:0f:e6:ea:8c:
e7:04:cd:2c:f6:25:e3:5f:11:a3:ac:64:05:49:62:0a:70:db:
07:b9:56:5f:74:d4:bc:d2:62:a6:be:f0:82:ab:4d:67:11:aa:
ed:b1:56:33:c4:04:95:0d:33:a7:48:b3:8a:d6:08:06:ab:a7:
25:9c:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:24 2026 by rpki-client