This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
File: 3230302e38392e32332e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: fjmGedM4DdCjzONnV/4dHnVBq0D0oNUx8yRUanCSQTM=
Subject key identifier: 48:7C:8A:CC:17:A6:BB:93:20:C7:44:F0:41:A4:BE:4A:E2:50:6E:2A
Certificate issuer: /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial: 6A353528D4490AF7FC32089E4388034032F2E0AD
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
Signing time: Tue 06 Jan 2026 19:24:26 +0000
ROA not before: Tue 06 Jan 2026 19:19:26 +0000
ROA not after: Tue 05 Jan 2027 19:24:26 +0000
asID: 12684
IP address blocks: 200.89.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 17:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:35:35:28:d4:49:0a:f7:fc:32:08:9e:43:88:03:40:32:f2:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Validity
Not Before: Jan 6 19:19:26 2026 GMT
Not After : Jan 5 19:24:26 2027 GMT
Subject: CN=487C8ACC17A6BB9320C744F041A4BE4AE2506E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:ff:bd:3a:9f:dc:0a:ff:3f:ec:a8:be:8d:
9a:db:98:6a:65:f8:6c:2e:c8:ea:aa:54:3b:7a:25:
df:04:5e:b6:72:e2:7c:3d:33:9f:35:d0:87:3d:bb:
a2:90:76:7f:0a:f2:d7:3f:1b:13:eb:33:a3:15:e6:
c2:ec:8c:59:21:48:11:33:0b:b1:5f:f8:09:2c:ea:
5f:89:74:8b:af:86:88:d4:08:db:51:6d:cd:43:fb:
fc:7d:12:88:3c:cd:11:f9:4c:74:3b:8d:b7:16:0a:
0b:fa:97:70:fa:fd:10:da:7c:da:40:96:09:c8:c5:
8b:5e:75:ad:5d:d7:16:55:e9:ea:94:a8:99:a3:cf:
80:03:7b:2b:44:d1:ad:0e:1b:e9:82:80:e4:a3:04:
e3:38:5a:48:69:28:5c:c2:2e:2c:4d:b1:63:37:30:
d5:1f:52:8f:21:8c:c1:5e:10:c0:4a:e4:29:1d:12:
11:4b:69:e7:e2:f1:62:42:57:c9:9b:5a:3d:30:ea:
bc:e2:a3:cf:1b:fc:58:3d:86:15:73:de:bb:50:44:
de:5a:a3:0c:a5:02:5a:81:d9:b0:d4:e5:3f:88:95:
f7:71:4f:56:02:3d:3a:79:4f:36:10:4a:8e:ca:5b:
5b:06:9a:6f:39:7e:71:f6:7e:0c:73:09:b0:ce:60:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:8A:CC:17:A6:BB:93:20:C7:44:F0:41:A4:BE:4A:E2:50:6E:2A
X509v3 Authority Key Identifier:
keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
99:55:79:48:c8:4f:16:85:fd:16:2b:4b:83:e1:19:93:d3:30:
0b:c2:e5:a5:cd:95:d2:6c:ed:64:b9:ae:46:eb:a6:95:53:73:
93:48:98:06:2c:64:45:19:44:04:95:9f:8d:94:6e:86:0a:78:
c9:d7:4c:c0:fb:b0:09:8e:a7:e7:67:14:2b:84:46:52:3a:c8:
24:d1:ee:33:3c:c4:6d:09:19:90:22:d6:48:33:bd:8e:a3:70:
ee:92:5f:07:8f:ee:11:5c:4a:5f:82:d1:cc:f9:9b:80:4c:3b:
16:87:1a:73:9b:a9:e2:6a:b8:b7:c1:15:2b:5a:a4:a7:9f:bc:
d2:93:ce:84:27:2f:09:9f:c9:69:38:48:98:b6:f0:4f:b3:10:
2b:df:21:33:c3:3a:60:cb:ae:f9:30:06:2e:d7:3d:ba:38:51:
29:cf:29:9b:0e:87:f0:a4:4f:b8:1f:17:b8:98:0b:d4:4f:ad:
46:a1:d5:f1:68:42:8c:62:8f:c7:31:0d:27:48:44:aa:dd:44:
47:77:1e:29:40:1e:08:d4:e1:33:ce:d9:c5:7a:c4:48:9e:7b:
1c:30:f7:44:ea:8e:ee:57:c2:dd:fa:e2:3a:1e:13:77:fc:12:
47:92:e6:b7:de:e6:ca:b6:1c:16:a9:20:55:98:f4:36:49:cd:
5a:7f:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:04 2026 by rpki-client