This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
File: 3230302e39312e33322e302f32312d3234203d3e203238303438.roa (raw, json)
Hash identifier: 51zmltLaVjKbRWjws5SUAo7o5CnYExPboI++J4otUJw=
Subject key identifier: 29:A2:6B:13:F5:D0:32:8C:B9:28:55:4F:BE:FF:0B:58:8E:56:5E:E1
Certificate issuer: /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial: 670F18198A46F4C69A765D0E8810FD54D91868C1
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
Signing time: Tue 06 Jan 2026 20:49:52 +0000
ROA not before: Tue 06 Jan 2026 20:44:52 +0000
ROA not after: Tue 05 Jan 2027 20:49:52 +0000
asID: 28048
IP address blocks: 200.91.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 16:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0f:18:19:8a:46:f4:c6:9a:76:5d:0e:88:10:fd:54:d9:18:68:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
Validity
Not Before: Jan 6 20:44:52 2026 GMT
Not After : Jan 5 20:49:52 2027 GMT
Subject: CN=29A26B13F5D0328CB928554FBEFF0B588E565EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:a1:83:77:1c:1f:d1:73:34:6d:38:64:c5:
82:f4:59:7e:4b:ef:ed:9f:0b:9d:4f:cc:6b:38:6e:
ad:ea:e9:cb:f7:bc:37:dc:5b:dc:ad:8e:b0:35:7c:
0a:94:01:6c:11:cf:23:1d:51:b3:91:7f:37:df:5c:
73:ab:64:5a:9c:05:98:7b:22:da:66:ca:da:6a:c7:
bb:93:5e:c1:6d:79:b7:f5:7f:bd:7b:0f:7e:9f:bf:
3a:55:1e:e0:f6:23:e1:be:64:9d:e4:95:9f:29:ea:
40:0b:28:9c:0a:f0:8a:4e:8d:bb:7e:84:2d:9a:35:
da:fd:72:ee:70:b9:6e:f3:8d:ca:6c:42:e3:1a:a6:
7b:84:30:0c:f6:d7:14:5b:cc:88:30:ad:e8:7e:dc:
b1:c8:79:cc:0c:6a:93:99:9c:fa:61:65:fa:f0:6b:
c0:97:c8:94:32:45:d2:d7:0d:4f:29:ac:ce:b5:dd:
24:7b:87:8e:c3:cb:32:4e:60:13:0b:6d:fd:70:6c:
d7:bb:b6:8d:41:16:1e:73:d9:b8:d4:52:68:8b:e9:
b6:3c:79:5d:04:f0:22:99:42:3f:64:2d:6b:f5:50:
a5:6d:ee:1e:f2:27:d2:50:6f:3b:a6:d9:ef:26:20:
7b:f2:f7:5a:3b:d7:e5:f4:7b:87:75:2c:89:82:1a:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:6B:13:F5:D0:32:8C:B9:28:55:4F:BE:FF:0B:58:8E:56:5E:E1
X509v3 Authority Key Identifier:
keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.32.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:24:c9:e9:d6:50:de:c1:82:30:df:24:ed:c9:98:0c:df:93:
64:56:6e:c9:f3:8b:06:06:c6:07:9a:bf:70:d6:fa:26:21:02:
74:a4:3c:32:22:d2:2a:6e:dd:49:81:92:6b:2a:ee:18:24:87:
e6:ff:f3:eb:26:8c:96:c6:9d:7c:c0:7f:8f:a7:d8:c6:02:7f:
79:ac:16:d9:13:09:99:7b:7e:82:8e:48:04:e5:31:13:1a:1d:
6e:66:10:1a:6e:a1:19:22:85:ad:05:3d:f7:68:72:88:84:13:
73:94:40:cc:9f:30:5c:33:6b:30:a5:22:15:77:6b:13:21:8c:
fc:45:8a:59:dc:8f:a4:ab:83:f8:90:57:06:3f:95:92:ee:73:
96:46:8d:49:c4:69:dc:fa:dc:91:02:ee:55:ca:eb:08:da:66:
da:c5:f4:e6:d9:bc:c7:0d:1f:a9:f8:b4:39:1a:7a:dc:72:3f:
ec:02:1b:b6:60:76:23:7f:34:32:04:78:42:d9:71:79:46:67:
13:1d:58:c2:25:7d:83:55:2f:39:07:62:fb:60:4a:ab:0c:f4:
fa:93:88:1d:1c:4e:e5:dd:6f:af:e3:75:87:af:56:f0:10:40:
fa:08:f9:08:7e:bb:d2:59:ab:ee:ad:0c:a6:99:62:33:82:35:
b8:bf:d8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:54 2026 by rpki-client