This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733313838.roa
File: 3230302e3135302e3234382e302f32322d3232203d3e20323733313838.roa (raw, json)
Hash identifier: IcNTigJjxN+APGtKWVYmi26HS8avp523XSRWkiL4HMc=
Subject key identifier: 31:16:BF:D9:EB:73:F5:F3:AF:4E:D9:9E:CB:0E:1F:CC:21:E5:E4:A3
Certificate issuer: /CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739
Certificate serial: 08DEBE6190C6EE8BBE3B6EF07F0557698965C4BD
Authority key identifier: 8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733313838.roa
Signing time: Fri 02 Jan 2026 16:15:00 +0000
ROA not before: Fri 02 Jan 2026 16:10:00 +0000
ROA not after: Fri 01 Jan 2027 16:15:00 +0000
asID: 273188
IP address blocks: 200.150.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl
rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:de:be:61:90:c6:ee:8b:be:3b:6e:f0:7f:05:57:69:89:65:c4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739
Validity
Not Before: Jan 2 16:10:00 2026 GMT
Not After : Jan 1 16:15:00 2027 GMT
Subject: CN=3116BFD9EB73F5F3AF4ED99ECB0E1FCC21E5E4A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:05:61:66:87:f0:84:b1:e6:db:bb:4b:e7:
60:83:7b:46:0b:f6:52:0d:7c:c8:37:8b:99:87:46:
3b:f4:8d:3c:3f:88:9b:6c:90:71:b7:ad:16:3d:65:
e9:a3:af:11:0d:15:cf:db:75:b0:86:af:a9:3e:52:
31:5e:7d:2d:7a:fd:01:fe:ed:7c:bb:d7:d3:10:ec:
16:ed:12:7f:b2:95:b0:fb:a2:c1:f4:ca:51:81:5b:
91:2a:fc:21:38:60:01:86:3f:fc:54:15:6e:fc:f7:
82:76:14:12:bf:22:0d:7a:d0:b2:ea:c0:4b:16:7d:
d6:16:d2:57:44:da:41:71:df:f5:fb:f6:ce:57:71:
97:1d:01:30:b1:7d:27:21:67:71:2c:bd:4c:84:e2:
3d:85:48:3b:99:7f:ed:26:e1:54:53:64:d5:87:a2:
d7:dd:aa:8e:f9:6e:17:62:fb:c7:2e:07:f2:96:36:
6d:61:58:b7:c5:57:31:1e:5d:23:be:aa:73:fe:f6:
8f:18:3c:38:5b:04:30:a0:82:49:8f:1c:1b:e7:5e:
b4:ed:12:bc:e3:19:21:21:27:10:b1:ed:d8:78:27:
00:7f:97:4d:99:f5:e6:ab:65:9d:44:5a:03:28:2d:
82:46:f4:f7:8d:b3:52:52:7e:d9:87:9b:10:1c:3d:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:BF:D9:EB:73:F5:F3:AF:4E:D9:9E:CB:0E:1F:CC:21:E5:E4:A3
X509v3 Authority Key Identifier:
keyid:8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.248.0/22
Signature Algorithm: sha256WithRSAEncryption
86:56:83:ec:d6:0d:85:8b:ee:bc:fd:be:a6:06:8a:be:bf:7c:
02:1f:c7:59:44:e9:d8:95:ab:fe:76:00:4c:0c:c2:c8:37:21:
7a:f7:c5:6e:f9:46:2e:16:77:1d:ef:cb:cf:fa:20:35:7c:3b:
0f:2a:71:bf:25:a6:79:85:28:f1:de:bc:b2:97:f8:43:b0:f0:
88:0c:66:ad:06:0a:ae:f8:db:72:41:5d:64:f3:d0:66:6f:74:
8d:19:48:74:01:6f:db:da:7f:f7:1a:e1:9e:b9:6f:7f:58:0c:
6d:fd:31:37:c9:8d:42:75:01:01:a6:a7:5c:e9:c9:18:b8:83:
61:28:45:cc:b0:59:94:31:b0:37:35:b8:4a:48:1a:0e:76:ef:
f2:7e:5d:76:31:9b:48:b8:1f:21:b2:a6:54:56:1e:f1:be:1d:
81:bb:f3:45:56:65:e2:14:cd:92:22:5e:4d:2b:72:20:30:07:
2b:01:73:1a:28:15:a2:5c:6c:3b:2a:61:98:e8:21:7d:d9:75:
e7:09:13:ac:bd:2c:33:a3:be:fe:48:bf:cc:8e:be:50:c1:19:
4b:d9:c4:b9:a6:84:5e:29:50:3a:b6:67:b6:87:74:e7:0c:d5:
e8:88:be:d6:fe:03:19:51:9a:dc:59:54:0b:9b:9f:f2:23:d9:
9b:3c:33:63
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCN6+YZDG7ou+O27wfwVXaYllxL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5Q0Y4NkM5ODE2MEJDNUNBMEYxQTcyREI0NTgyNjE3
MkM0QTczOTAeFw0yNjAxMDIxNjEwMDBaFw0yNzAxMDExNjE1MDBaMDMxMTAvBgNV
BAMTKDMxMTZCRkQ5RUI3M0Y1RjNBRjRFRDk5RUNCMEUxRkNDMjFFNUU0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdawVhZofwhLHm27tL52CDe0YL
9lINfMg3i5mHRjv0jTw/iJtskHG3rRY9ZemjrxENFc/bdbCGr6k+UjFefS16/QH+
7Xy719MQ7BbtEn+ylbD7osH0ylGBW5Eq/CE4YAGGP/xUFW7894J2FBK/Ig160LLq
wEsWfdYW0ldE2kFx3/X79s5XcZcdATCxfSchZ3EsvUyE4j2FSDuZf+0m4VRTZNWH
otfdqo75bhdi+8cuB/KWNm1hWLfFVzEeXSO+qnP+9o8YPDhbBDCggkmPHBvnXrTt
ErzjGSEhJxCx7dh4JwB/l02Z9earZZ1EWgMoLYJG9PeNs1JSftmHmxAcPbETAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMRa/2etz9fOvTtmeyw4fzCHl5KMwHwYDVR0j
BBgwFoAUipz4bJgWC8XKDxpy20WCYXLEpzkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTVGQjQzRTVFMEYzQ0EzQTA4QjU2MDlEOTZFREVCOTUx
NERFNERBRUFCRkNBNjlFQzI1N0FGMUM0N0REMUUzLzAvOEE5Q0Y4NkM5ODE2MEJD
NUNBMEYxQTcyREI0NTgyNjE3MkM0QTczOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTlDRjg2Qzk4MTYwQkM1Q0Ew
RjFBNzJEQjQ1ODI2MTcyQzRBNzM5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEE1RkI0M0U1RTBGM0NBM0EwOEI1NjA5RDk2RURFQjk1MTRERTREQUVB
QkZDQTY5RUMyNTdBRjFDNDdERDFFMy8wLzMyMzAzMDJlMzEzNTMwMmUzMjM0Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzMzMTM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
lvgwDQYJKoZIhvcNAQELBQADggEBAIZWg+zWDYWL7rz9vqYGir6/fAIfx1lE6diV
q/52AEwMwsg3IXr3xW75Ri4Wdx3vy8/6IDV8Ow8qcb8lpnmFKPHevLKX+EOw8IgM
Zq0GCq7423JBXWTz0GZvdI0ZSHQBb9vaf/ca4Z65b39YDG39MTfJjUJ1AQGmp1zp
yRi4g2EoRcywWZQxsDc1uEpIGg527/J+XXYxm0i4HyGyplRWHvG+HYG780VWZeIU
zZIiXk0rciAwBysBcxooFaJcbDsqYZjoIX3ZdecJE6y9LDOjvv5Iv8yOvlDBGUvZ
xLmmhF4pUDq2Z7aHdOcM1eiIvtb+AxlRmtxZVAubn/Ij2Zs8M2M=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:10 2026 by rpki-client