This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
File: 3230302e312e372e302f32342d3234203d3e203237393830.roa (raw, json)
Hash identifier: JxgL7RmoFq89ifQcU6763+y8wicreZdFk/dcHrbnf+s=
Subject key identifier: 22:4D:E1:45:4A:62:86:49:44:D1:F2:1C:B9:D4:CC:96:EF:AF:4E:F2
Certificate issuer: /CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
Certificate serial: 05FB7D803A746917B873768CFE73E51A43FE3C2A
Authority key identifier: 9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
Signing time: Tue 06 Jan 2026 19:02:36 +0000
ROA not before: Tue 06 Jan 2026 18:57:36 +0000
ROA not after: Tue 05 Jan 2027 19:02:36 +0000
asID: 27980
IP address blocks: 200.1.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl
rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:fb:7d:80:3a:74:69:17:b8:73:76:8c:fe:73:e5:1a:43:fe:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
Validity
Not Before: Jan 6 18:57:36 2026 GMT
Not After : Jan 5 19:02:36 2027 GMT
Subject: CN=224DE1454A62864944D1F21CB9D4CC96EFAF4EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:ed:2c:6c:d7:b9:57:fb:5b:5a:1e:8c:0b:
ba:23:fb:62:b7:1f:c2:b2:18:50:5b:dc:43:15:e9:
47:93:e6:11:b8:ce:d0:a3:8e:09:b4:f9:af:07:16:
85:4f:50:b3:4a:15:80:67:9f:04:73:8d:51:3a:37:
22:1e:ff:d9:00:39:ce:c5:87:ff:13:53:76:21:e9:
c6:c3:31:77:97:60:b9:b7:57:b5:3f:3b:2c:ad:10:
0d:42:78:ee:c4:c9:7a:03:9e:11:85:27:d6:c8:bb:
4f:b3:95:5c:88:97:e6:3c:a8:bf:3b:67:d1:c7:3a:
a4:04:9a:fd:bf:4b:d0:3c:da:91:1f:08:f6:90:38:
fb:17:b8:0c:33:2a:c5:86:0a:03:d5:b4:be:6c:be:
b8:0f:20:14:4d:bf:de:85:19:38:23:75:be:fd:ab:
44:79:a7:4c:fb:a5:d9:14:93:88:ef:45:e0:a2:0f:
5d:59:7c:de:cc:47:91:53:df:a9:b0:d1:ff:95:56:
d0:74:ca:6b:c3:db:35:c9:36:3c:87:54:74:33:b5:
ab:b4:10:6e:5b:e9:ce:27:87:01:aa:f8:bc:7d:d1:
62:65:dc:35:05:e0:ff:8b:44:61:fe:55:39:15:8f:
71:6b:d5:01:56:08:f3:23:62:41:2b:f8:29:47:ca:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:E1:45:4A:62:86:49:44:D1:F2:1C:B9:D4:CC:96:EF:AF:4E:F2
X509v3 Authority Key Identifier:
keyid:9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.7.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e7:34:fc:18:cd:51:c0:93:5d:46:23:ce:38:c4:15:d2:66:
0d:09:17:6f:c2:54:52:55:0c:70:aa:25:0c:61:c5:f8:90:de:
a5:56:7a:dd:51:d9:77:77:89:ae:81:9a:6e:8f:0c:8d:4b:1d:
d9:b8:02:3a:c4:9b:2a:c5:19:83:45:64:b9:8b:b5:b3:53:84:
31:e2:d9:03:86:5d:0e:79:27:df:f0:65:e8:20:0a:da:8f:fc:
29:13:72:ae:d9:0d:12:5f:11:78:50:73:b3:3e:52:06:15:57:
82:92:88:f2:45:2d:fc:08:48:78:5d:d7:94:e1:84:2e:81:92:
a7:16:90:93:a8:9d:52:23:0a:43:06:5e:d9:ea:28:59:65:d1:
64:ab:38:d4:64:a2:28:23:83:de:3b:90:e1:95:e6:c3:9f:dd:
23:fd:9d:f8:9d:11:43:cc:a2:d3:db:99:73:cd:cf:15:2d:15:
9b:80:c9:d3:81:48:51:67:94:a2:b7:58:51:0b:a1:46:1e:ba:
5a:eb:95:f8:06:a8:3d:23:ec:35:fb:f7:a5:0d:2d:e5:85:81:
13:16:a7:03:43:7f:ab:84:f8:ba:2a:fa:c5:6b:a5:67:e5:2c:
2f:05:09:6c:f4:eb:70:ee:b9:05:75:0a:28:ed:ca:be:60:6e:
38:0a:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:26 2026 by rpki-client