This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203634313031.roa File: 3230302e33332e3132352e302f32342d3234203d3e203634313031.roa (raw, json) Hash identifier: 1lW7h2HV/gbxP7uYLREHP+ulU0x02AmvXMkDemHB7l0= Subject key identifier: 45:C8:E4:68:CF:C6:3F:64:73:12:3D:45:DD:2A:B0:FA:27:D8:D7:96 Certificate issuer: /CN=4352D0B4346D5D44265C096102BC7A3DA168ED26 Certificate serial: 5D360708D425CC44DB63EDC794A22CCF27FE4856 Authority key identifier: 43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203634313031.roa Signing time: Tue 06 Jan 2026 19:35:56 +0000 ROA not before: Tue 06 Jan 2026 19:30:56 +0000 ROA not after: Tue 05 Jan 2027 19:35:56 +0000 asID: 64101 IP address blocks: 200.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 08:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:36:07:08:d4:25:cc:44:db:63:ed:c7:94:a2:2c:cf:27:fe:48:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4352D0B4346D5D44265C096102BC7A3DA168ED26 Validity Not Before: Jan 6 19:30:56 2026 GMT Not After : Jan 5 19:35:56 2027 GMT Subject: CN=45C8E468CFC63F6473123D45DD2AB0FA27D8D796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:e7:31:a0:c1:f2:70:de:b3:20:01:ed:af: 38:c8:d4:44:3b:4c:b3:39:46:51:7b:fb:72:cd:74: a6:28:0a:3d:69:21:8c:c4:0f:b1:49:fa:58:12:0f: 8c:9f:56:96:39:6a:5e:c3:0e:d7:8a:cc:84:83:7b: a7:3e:92:29:c0:d2:20:b1:93:32:f5:75:70:d9:2b: 66:8c:9b:4e:e8:7b:6d:07:36:ee:04:21:b9:b1:87: b4:ab:24:e6:25:c3:96:6e:3d:86:8b:ca:51:fb:07: 9c:58:98:33:92:a9:86:05:a5:f3:37:a3:51:61:e2: e8:7e:b5:7c:1d:4e:58:4c:02:e5:76:2f:0c:f9:b4: 4c:48:c1:a0:0f:64:b8:ef:51:fb:31:c0:96:3b:2d: 3b:74:0c:be:b7:42:e0:4f:a8:6f:3e:fa:46:e9:b6: 55:ef:4a:50:75:4e:7e:41:fc:26:78:15:5a:4d:9a: 64:b1:35:35:03:f7:19:3e:72:df:3a:03:89:b0:87: b4:d5:b2:bd:23:0d:81:92:ea:75:93:14:22:fb:9c: c2:63:12:66:fc:a0:45:92:8b:89:03:da:15:ba:d5: 04:ef:cb:c4:2a:29:ac:51:e1:de:ad:1c:26:67:5f: 94:b5:18:76:39:76:7c:bf:47:d6:37:18:57:da:c0: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C8:E4:68:CF:C6:3F:64:73:12:3D:45:DD:2A:B0:FA:27:D8:D7:96 X509v3 Authority Key Identifier: keyid:43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203634313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.125.0/24 Signature Algorithm: sha256WithRSAEncryption c3:c3:d3:49:7f:43:53:c0:ad:90:1d:3a:30:29:35:1e:90:8d: d2:c8:de:45:3b:cd:b9:29:03:36:da:03:f6:3f:8c:f0:57:24: d0:ec:34:51:f3:f3:42:7e:59:48:86:69:5d:d5:51:4c:0e:7c: 94:b3:d0:57:2d:9e:e2:fc:ce:83:e5:50:34:91:d8:15:9c:35: 90:58:26:70:02:da:96:64:49:3f:cc:56:ef:9b:a3:da:18:e9: 9f:1e:e1:43:1a:f2:36:ab:00:9e:2e:51:4e:b8:a4:bf:23:5c: e8:dc:31:51:ca:b6:05:6b:62:64:b4:d1:cf:53:42:df:6b:ed: 5d:ec:f5:e4:69:33:ae:17:4c:a8:a7:11:27:1e:32:43:13:55: a9:db:2a:d2:3e:1a:3d:ac:ea:67:cc:00:d5:2a:90:81:3b:e4: a1:6d:ef:fa:f2:a5:a8:31:bf:2c:f9:01:61:c4:dd:3b:a7:63: 6c:25:a1:63:0e:65:eb:f2:f8:0b:8f:d1:fb:d0:9e:c7:e5:b8: 12:e9:2c:42:c7:30:eb:dc:a6:4f:28:c4:15:0e:46:29:1f:47: 69:b4:43:f7:5b:fe:f9:04:0f:6e:3c:a6:be:e7:75:0f:72:43: d8:dd:cb:9d:b2:72:09:c3:1b:90:3d:06:2b:e9:5b:12:26:ae: bd:e2:53:71 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUXTYHCNQlzETbY+3HlKIszyf+SFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM1MkQwQjQzNDZENUQ0NDI2NUMwOTYxMDJCQzdBM0RB MTY4RUQyNjAeFw0yNjAxMDYxOTMwNTZaFw0yNzAxMDUxOTM1NTZaMDMxMTAvBgNV BAMTKDQ1QzhFNDY4Q0ZDNjNGNjQ3MzEyM0Q0NUREMkFCMEZBMjdEOEQ3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPucxoMHycN6zIAHtrzjI1EQ7 TLM5RlF7+3LNdKYoCj1pIYzED7FJ+lgSD4yfVpY5al7DDteKzISDe6c+kinA0iCx kzL1dXDZK2aMm07oe20HNu4EIbmxh7SrJOYlw5ZuPYaLylH7B5xYmDOSqYYFpfM3 o1Fh4uh+tXwdTlhMAuV2Lwz5tExIwaAPZLjvUfsxwJY7LTt0DL63QuBPqG8++kbp tlXvSlB1Tn5B/CZ4FVpNmmSxNTUD9xk+ct86A4mwh7TVsr0jDYGS6nWTFCL7nMJj Emb8oEWSi4kD2hW61QTvy8QqKaxR4d6tHCZnX5S1GHY5dny/R9Y3GFfawHXTAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQURcjkaM/GP2RzEj1F3Sqw+ifY15YwHwYDVR0j BBgwFoAUQ1LQtDRtXUQmXAlhArx6PaFo7SYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NEE3QjFBNjk1RTMwN0Y4NTg4QzlGMkE1RTAwM0Q1NjE0 ODE5NEJGQUQ1QzUwREFDNDJCMUQ5ODE5NkRDQzZBLzAvNDM1MkQwQjQzNDZENUQ0 NDI2NUMwOTYxMDJCQzdBM0RBMTY4RUQyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzUyRDBCNDM0NkQ1RDQ0MjY1 QzA5NjEwMkJDN0EzREExNjhFRDI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTRBN0IxQTY5NUUzMDdGODU4OEM5RjJBNUUwMDNENTYxNDgxOTRCRkFE NUM1MERBQzQyQjFEOTgxOTZEQ0M2QS8wLzMyMzAzMDJlMzMzMzJlMzEzMjM1MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzAzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMghfTAN BgkqhkiG9w0BAQsFAAOCAQEAw8PTSX9DU8CtkB06MCk1HpCN0sjeRTvNuSkDNtoD 9j+M8Fck0Ow0UfPzQn5ZSIZpXdVRTA58lLPQVy2e4vzOg+VQNJHYFZw1kFgmcALa lmRJP8xW75uj2hjpnx7hQxryNqsAni5RTrikvyNc6NwxUcq2BWtiZLTRz1NC32vt Xez15GkzrhdMqKcRJx4yQxNVqdsq0j4aPazqZ8wA1SqQgTvkoW3v+vKlqDG/LPkB YcTdO6djbCWhYw5l6/L4C4/R+9Cex+W4EuksQscw69ymTyjEFQ5GKR9HabRD91v+ +QQPbjymvud1D3JD2N3LnbJyCcMbkD0GK+lbEiauveJTcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:28:15 2026 by rpki-client