This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa
File: 3230302e332e3136382e302f32312d3234203d3e203131383135.roa (raw, json)
Hash identifier: nML0JgEvWScQzXXQWe9zRXjHJd22AvvJbCTSGoHDvqY=
Subject key identifier: 65:A1:FE:D4:CA:0E:58:7F:E0:F6:5F:1F:02:34:58:E6:8F:09:39:64
Certificate issuer: /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial: 37B6DA35670A3344E230574C0C8C95CA9CB1C7C4
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa
Signing time: Tue 06 Jan 2026 19:28:42 +0000
ROA not before: Tue 06 Jan 2026 19:23:42 +0000
ROA not after: Tue 05 Jan 2027 19:28:42 +0000
asID: 11815
IP address blocks: 200.3.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b6:da:35:67:0a:33:44:e2:30:57:4c:0c:8c:95:ca:9c:b1:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Validity
Not Before: Jan 6 19:23:42 2026 GMT
Not After : Jan 5 19:28:42 2027 GMT
Subject: CN=65A1FED4CA0E587FE0F65F1F023458E68F093964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:d1:0a:4d:cb:1a:ad:7b:b2:f5:c2:59:67:
7b:78:5e:d4:7f:b9:2d:5d:da:dc:48:53:da:c2:9f:
9e:ad:16:30:a3:d9:49:14:cf:d4:2a:40:57:89:39:
ad:6a:41:f6:53:6f:96:10:e7:e7:e5:99:82:05:d7:
c1:d7:b9:3b:87:c8:27:6d:46:99:22:4c:d0:a5:62:
e1:57:66:12:c9:19:ff:b2:63:e9:96:04:98:68:51:
64:ff:c6:80:97:cb:25:6c:6e:c9:c1:3a:6f:bb:1f:
f1:3e:fc:86:79:90:18:14:42:58:f8:ce:48:e8:63:
9b:2a:c7:94:bd:78:9e:33:66:0d:3b:da:3f:54:08:
2c:7e:b1:33:34:e1:c5:3d:5f:ac:16:99:e8:91:d8:
26:4e:04:e5:91:07:c5:3e:b3:5a:57:f9:ae:9b:86:
a9:b5:0a:72:c7:6f:09:0d:b3:97:d0:44:3f:81:24:
ac:d9:48:53:08:e5:0c:20:fa:fe:5c:85:41:ad:6f:
15:b5:b3:43:ae:dc:8a:72:ea:93:f0:7d:52:47:8e:
97:03:dc:c8:6a:74:ee:9d:63:c9:7e:20:55:70:36:
dc:43:07:70:da:66:56:58:d9:bb:42:18:4f:ee:a3:
f0:d9:09:61:e6:7e:63:82:75:32:a9:f8:70:72:d8:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:FE:D4:CA:0E:58:7F:E0:F6:5F:1F:02:34:58:E6:8F:09:39:64
X509v3 Authority Key Identifier:
keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.168.0/21
Signature Algorithm: sha256WithRSAEncryption
59:1f:b4:0a:68:e3:d2:24:4f:b3:67:1a:91:d7:e0:d5:1d:68:
b5:4d:d2:fc:98:53:66:1b:7e:19:3b:59:ee:43:a2:55:34:df:
1e:2c:8d:46:15:4b:fe:4d:12:97:be:de:4e:4d:72:3f:0d:e1:
68:11:79:71:39:11:32:b8:26:3a:bc:77:25:44:45:06:ca:d5:
f1:05:b1:a8:ad:15:13:49:c6:0f:1a:f3:9d:2e:5f:2c:18:20:
b9:15:1c:01:c6:f6:ed:14:4f:6f:e4:8a:be:f3:e9:44:9d:ab:
ac:1d:63:20:04:26:a5:a6:1a:6a:74:e0:3a:a9:1a:6f:95:13:
b4:18:58:f0:71:2b:97:12:ac:5f:8c:ad:c8:2a:0f:40:27:65:
dc:83:88:aa:9a:ea:bc:69:60:82:56:8e:1c:4e:67:df:39:b2:
ff:8f:20:bd:18:95:92:14:32:e4:54:1f:f2:10:95:eb:da:c6:
aa:bd:7f:1e:c4:15:8d:ae:81:34:47:30:4c:61:30:99:63:e6:
0c:59:8e:49:c8:ba:ef:5e:59:7b:c2:38:42:e2:ca:ec:0f:e1:
03:86:e7:46:bb:b6:5c:05:f2:22:91:e1:89:9e:76:f4:c8:df:
49:c4:10:ea:64:57:a1:f3:ac:92:8b:fa:7d:fd:59:ae:ed:59:
b1:04:ac:bf
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUN7baNWcKM0TiMFdMDIyVypyxx8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGNTE0MTk5MEEwMjUyQzM3RDYzMTEyRkI2RUNBNURC
QzU2ODZCNjAeFw0yNjAxMDYxOTIzNDJaFw0yNzAxMDUxOTI4NDJaMDMxMTAvBgNV
BAMTKDY1QTFGRUQ0Q0EwRTU4N0ZFMEY2NUYxRjAyMzQ1OEU2OEYwOTM5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DtEKTcsarXuy9cJZZ3t4XtR/
uS1d2txIU9rCn56tFjCj2UkUz9QqQFeJOa1qQfZTb5YQ5+flmYIF18HXuTuHyCdt
RpkiTNClYuFXZhLJGf+yY+mWBJhoUWT/xoCXyyVsbsnBOm+7H/E+/IZ5kBgUQlj4
zkjoY5sqx5S9eJ4zZg072j9UCCx+sTM04cU9X6wWmeiR2CZOBOWRB8U+s1pX+a6b
hqm1CnLHbwkNs5fQRD+BJKzZSFMI5Qwg+v5chUGtbxW1s0Ou3Ipy6pPwfVJHjpcD
3MhqdO6dY8l+IFVwNtxDB3DaZlZY2btCGE/uo/DZCWHmfmOCdTKp+HBy2IidAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZaH+1MoOWH/g9l8fAjRY5o8JOWQwHwYDVR0j
BBgwFoAU0vUUGZCgJSw31jES+27KXbxWhrYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkZGRENBMzBDMTVDRDU5OTcwQTdFN0FGQUVDM0E5MUFG
NDMwMUFDOTAwOEIwRkZDM0I4Rjk3NzVGNTZGMkZELzAvRDJGNTE0MTk5MEEwMjUy
QzM3RDYzMTEyRkI2RUNBNURCQzU2ODZCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkY1MTQxOTkwQTAyNTJDMzdE
NjMxMTJGQjZFQ0E1REJDNTY4NkI2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJGRkRDQTMwQzE1Q0Q1OTk3MEE3RTdBRkFFQzNBOTFBRjQzMDFBQzkw
MDhCMEZGQzNCOEY5Nzc1RjU2RjJGRC8wLzMyMzAzMDJlMzMyZTMxMzYzODJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzEzODMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIA6gwDQYJ
KoZIhvcNAQELBQADggEBAFkftApo49IkT7NnGpHX4NUdaLVN0vyYU2Ybfhk7We5D
olU03x4sjUYVS/5NEpe+3k5Ncj8N4WgReXE5ETK4Jjq8dyVERQbK1fEFsaitFRNJ
xg8a850uXywYILkVHAHG9u0UT2/kir7z6USdq6wdYyAEJqWmGmp04DqpGm+VE7QY
WPBxK5cSrF+MrcgqD0AnZdyDiKqa6rxpYIJWjhxOZ985sv+PIL0YlZIUMuRUH/IQ
levaxqq9fx7EFY2ugTRHMExhMJlj5gxZjknIuu9eWXvCOELiyuwP4QOG50a7tlwF
8iKR4YmedvTI30nEEOpkV6HzrJKL+n39Wa7tWbEErL8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:28:58 2026 by rpki-client