This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
File: 3230302e372e38372e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier: +Z/96HeHDxmTzY6gMVhggnEt/JPCOcGijylV/MY0glM=
Subject key identifier: F2:4C:DE:4A:72:C5:8F:E7:9F:64:F9:BA:05:B5:FD:D7:92:59:29:18
Certificate issuer: /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial: 394BBF72A118F1C527FC4195122AEB535622C32E
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
Signing time: Tue 06 Jan 2026 19:15:36 +0000
ROA not before: Tue 06 Jan 2026 19:10:36 +0000
ROA not after: Tue 05 Jan 2027 19:15:36 +0000
asID: 28000
IP address blocks: 200.7.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4b:bf:72:a1:18:f1:c5:27:fc:41:95:12:2a:eb:53:56:22:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Validity
Not Before: Jan 6 19:10:36 2026 GMT
Not After : Jan 5 19:15:36 2027 GMT
Subject: CN=F24CDE4A72C58FE79F64F9BA05B5FDD792592918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:66:03:89:20:9c:ca:b3:60:e8:af:69:99:
8d:c5:87:15:45:f0:03:a6:03:06:6b:16:7a:98:43:
cd:14:51:24:59:bf:79:15:1a:e4:9b:3b:fd:08:30:
69:67:a9:35:3d:fe:1b:3d:ea:22:42:0c:f5:c7:36:
77:b3:fd:f8:61:f6:bf:32:ad:f7:c6:59:63:bb:8d:
70:fa:7d:62:97:29:eb:81:fa:3f:11:01:79:b7:80:
9f:34:7f:cb:76:6b:2a:bd:21:01:25:bd:1a:4b:6c:
b4:d6:6d:47:d9:05:0a:36:5d:0d:d2:c2:4f:52:36:
36:d4:bf:2f:cd:3d:38:d2:dc:e9:39:c7:e7:fb:02:
74:07:cd:a2:b7:92:c2:29:ac:23:a3:01:2a:77:4a:
a7:d3:5f:61:d9:d6:43:3f:c7:c1:4c:9b:d6:bc:c4:
3d:00:c2:e5:5e:2c:8d:8f:a6:95:24:ba:30:14:53:
46:2c:fb:96:48:61:9a:17:cf:c6:32:bd:f0:da:9e:
8c:6a:24:c8:dd:f9:83:6f:a1:89:79:99:da:46:1d:
e9:97:90:15:ce:93:ee:a9:6b:20:19:2d:60:24:d1:
66:ec:05:77:23:05:87:23:2a:83:cd:4a:2f:00:26:
eb:2e:4f:9a:1c:16:ef:fe:3d:5a:24:75:47:bb:bb:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:DE:4A:72:C5:8F:E7:9F:64:F9:BA:05:B5:FD:D7:92:59:29:18
X509v3 Authority Key Identifier:
keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cc:77:d6:fa:f2:bb:07:10:b9:2c:f1:1e:7b:29:e4:ff:86:
0e:4a:58:74:93:af:80:b8:67:6f:e6:dc:07:12:0e:82:6e:96:
06:9d:67:83:13:84:07:39:13:dc:26:1f:2b:63:dd:35:78:fa:
61:71:8c:4b:0c:9f:89:29:e0:10:0b:59:16:e1:a6:72:89:0b:
b7:85:a9:48:30:3a:65:89:1f:e9:09:7d:c7:dd:bf:3a:19:25:
20:c3:ac:8b:4c:e3:26:fb:eb:aa:02:45:a2:bf:65:73:f6:16:
45:86:4c:d2:ce:57:45:e5:7b:ec:e1:91:26:f3:e7:ee:2f:bc:
ba:ef:3e:4e:eb:54:18:5c:d3:98:c9:f3:7f:cd:82:5d:5b:01:
2c:78:a0:12:38:08:6a:0b:f6:50:6c:29:4f:5f:2d:b1:a7:d5:
c0:05:9e:ed:4c:7c:7d:a5:5f:22:f5:42:e4:78:fc:bb:70:fb:
0f:2e:5d:c5:4a:ae:3b:0f:c5:56:70:7f:55:03:be:e7:f7:a3:
fd:c7:cb:d3:fe:89:19:5e:9b:ed:48:8d:23:4e:d7:fc:4e:52:
90:f0:bf:53:11:d7:36:96:35:ca:5d:90:20:c5:f4:fd:ab:36:
f0:81:46:b7:ee:9f:67:30:25:d5:09:f9:a0:8b:db:0f:92:fe:
f8:b0:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:11 2026 by rpki-client