This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
File: 3230302e302e38382e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier: 4BUAYYijskTSkNcM03Rpuc30YWMtvERJcF5AiPFxszc=
Subject key identifier: C0:29:A0:14:C3:A4:A8:01:8A:84:9F:5B:30:86:FB:21:F1:4D:90:55
Certificate issuer: /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial: 3FF010E8DBD56DAD63FAC18DFB59F18D8F7FC0EF
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
Signing time: Tue 06 Jan 2026 19:15:32 +0000
ROA not before: Tue 06 Jan 2026 19:10:32 +0000
ROA not after: Tue 05 Jan 2027 19:15:32 +0000
asID: 52224
IP address blocks: 200.0.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f0:10:e8:db:d5:6d:ad:63:fa:c1:8d:fb:59:f1:8d:8f:7f:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Validity
Not Before: Jan 6 19:10:32 2026 GMT
Not After : Jan 5 19:15:32 2027 GMT
Subject: CN=C029A014C3A4A8018A849F5B3086FB21F14D9055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:af:e5:49:2f:ac:27:64:86:04:11:cb:9b:
8b:6a:dc:8a:97:31:de:92:4e:70:74:85:8e:dd:11:
0e:3b:1c:a9:58:e4:5c:b3:b0:17:86:ba:94:be:93:
5b:9a:0c:de:02:e4:26:45:4a:97:64:6a:57:dc:b3:
e2:ca:86:8e:ff:1a:1f:00:de:73:8d:9d:dd:69:dd:
2c:48:69:12:79:d5:17:15:ae:43:02:21:c2:f4:9f:
3a:c8:9e:61:d2:54:f6:af:8d:c5:0b:39:1f:4d:3d:
a5:8b:5b:e8:9e:7d:71:87:61:cf:0f:27:d8:6e:e2:
cd:ef:aa:69:c6:b3:c8:6f:38:bc:ac:a5:2e:fb:24:
51:76:45:e9:69:d6:17:0e:59:ac:72:49:e3:0e:f3:
36:4e:79:20:c8:e1:40:f8:d0:4e:65:76:97:ce:e6:
4c:26:3c:b8:e3:4d:83:5a:c2:18:4e:27:75:1e:46:
f7:a7:4b:6a:16:76:3c:e2:94:13:a1:02:76:6a:20:
0e:2d:88:99:2b:e9:81:a2:ee:8a:97:7a:4e:1c:43:
be:54:30:60:d6:33:85:f6:43:5a:fe:b4:62:d6:3d:
17:4c:02:7a:e0:ce:32:db:55:41:b5:8d:33:a1:16:
bc:cd:20:8c:c0:73:61:e7:b7:f2:a1:a9:cb:d1:79:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:A0:14:C3:A4:A8:01:8A:84:9F:5B:30:86:FB:21:F1:4D:90:55
X509v3 Authority Key Identifier:
keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.88.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:42:a1:31:c0:4c:48:81:54:67:27:fe:5f:32:04:92:ea:a7:
35:3a:ac:d8:cc:0b:38:37:90:d2:1e:be:4b:07:de:88:0d:93:
a1:90:f0:f3:71:28:c9:87:1f:f5:53:10:4d:1a:94:c1:9d:87:
0f:08:c8:28:04:4d:c6:c8:c9:56:07:fb:bb:42:2f:01:b5:93:
c7:8a:77:47:98:00:42:e4:da:c2:4c:f0:a6:d2:d9:9d:01:3d:
7f:11:76:5c:41:d3:49:4e:76:a1:e7:55:c3:cc:fe:e4:04:9d:
ef:a4:70:7f:c6:fa:e5:ba:b5:52:f3:7b:e8:86:2f:54:2e:49:
80:8a:38:5f:53:f3:51:7b:14:b0:75:62:c0:48:14:6b:7d:ff:
7a:a6:a7:30:ab:dd:91:b9:d7:cf:07:53:b7:16:0a:5b:32:1f:
bc:25:7b:46:74:11:f8:b7:bf:47:db:34:80:d2:72:c8:4e:8f:
4d:59:10:fe:48:d9:09:4e:88:4b:16:83:8d:16:f8:ea:84:bf:
51:33:ed:e1:2c:09:7e:37:0d:11:a9:e4:ae:df:31:82:35:24:
e5:a6:cc:f4:ad:c0:d2:f5:5d:ac:07:33:a5:55:ff:ee:e4:d7:
b3:a0:58:ab:f8:2d:f8:bc:ff:cc:00:41:ba:e8:58:c3:45:75:
63:33:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:20 2026 by rpki-client