This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
File: 3230302e34322e3232342e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier: Kv8VGxrZB/9qVB398hzqRIIfF6OhaMmYI/xoQisV7Qc=
Subject key identifier: CF:DB:3A:F1:AC:5C:09:AE:9D:DA:47:23:CA:FB:A5:B5:29:4E:B1:F4
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 0763ACBC61F7CE89D9C5B194EF41D34C12C37490
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
Signing time: Tue 06 Jan 2026 19:39:50 +0000
ROA not before: Tue 06 Jan 2026 19:34:50 +0000
ROA not after: Tue 05 Jan 2027 19:39:50 +0000
asID: 12066
IP address blocks: 200.42.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:63:ac:bc:61:f7:ce:89:d9:c5:b1:94:ef:41:d3:4c:12:c3:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Jan 6 19:34:50 2026 GMT
Not After : Jan 5 19:39:50 2027 GMT
Subject: CN=CFDB3AF1AC5C09AE9DDA4723CAFBA5B5294EB1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:d2:67:66:95:b8:4e:59:46:d3:54:17:bf:
b5:3e:26:ba:9d:84:0b:94:60:82:da:bf:1c:4f:f5:
ae:88:55:39:bb:03:4d:17:a8:e3:3f:1c:21:12:80:
d7:3c:3e:7f:95:1c:ef:92:54:30:c9:3c:59:e4:80:
41:f0:e5:e3:58:d8:b2:8c:c5:dd:05:e8:e9:0c:5f:
03:26:24:b8:1f:2c:94:30:54:de:0b:62:2e:6a:da:
93:5f:bf:59:b2:67:e9:0d:45:9d:e2:10:c4:a9:5e:
94:6b:3a:ad:49:58:d4:2c:b8:69:bd:b5:09:1f:e7:
86:03:6c:8f:4a:b6:43:1a:5f:31:f4:1d:37:d7:ff:
5b:9d:5e:4f:60:32:59:07:b3:55:bb:18:dc:31:95:
de:60:c2:09:eb:7f:92:bc:eb:fc:6d:ef:93:0a:64:
5c:1a:da:04:09:a7:5c:a2:7a:e5:56:ab:4e:7b:f4:
1e:b3:41:b8:e4:68:73:99:4d:43:05:f8:82:f7:f0:
aa:d6:0f:4f:c4:79:62:ee:f8:7e:5d:40:ab:d3:d4:
f6:00:c1:bf:d7:b2:1a:64:96:7c:fe:87:75:86:cd:
25:37:ef:92:67:b7:e3:00:53:fb:05:ea:90:95:40:
36:2a:6e:7a:34:06:dd:18:1f:72:57:bb:b3:22:b9:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:3A:F1:AC:5C:09:AE:9D:DA:47:23:CA:FB:A5:B5:29:4E:B1:F4
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.224.0/20
Signature Algorithm: sha256WithRSAEncryption
87:3f:de:a9:1f:d7:d0:74:32:d5:c9:f2:e9:51:cc:5c:d9:25:
2f:e8:18:c4:52:e6:39:3f:10:76:aa:23:99:44:1f:25:f2:19:
14:2f:b8:78:70:57:bd:ab:99:a6:c8:62:5d:7b:3f:0b:47:77:
05:53:1d:d2:0f:bc:a3:3c:fe:ea:2a:2f:3c:15:a7:bb:a2:a0:
9e:9a:8a:31:89:ff:54:7b:44:a7:59:e4:0d:2f:ed:72:5d:f8:
17:68:86:8b:d2:4c:2c:6b:89:f8:40:8d:56:f0:34:98:a7:db:
78:6b:55:8b:a3:19:96:4b:ba:b1:59:8f:56:7e:44:5c:51:12:
a9:b8:01:1f:54:e2:14:d6:d9:50:5f:8f:39:01:3c:4c:67:8a:
bf:99:f6:2c:2a:6d:12:e5:23:0b:da:0a:8d:fa:ae:bc:03:aa:
29:04:26:88:6d:68:91:0e:be:64:96:07:5a:3d:2e:76:31:a0:
59:40:d4:fd:9a:8b:6f:f9:32:02:2b:cc:af:29:9c:dd:45:c4:
96:e5:94:f9:e2:de:24:5f:ae:18:5c:5b:ea:d3:8a:ac:e7:19:
a8:66:05:35:8e:b1:52:53:79:4f:1a:40:5b:b3:d5:62:c2:ec:
3e:dd:4e:00:3b:fa:18:fe:de:0e:5b:8b:10:90:c8:7a:8d:7d:
2e:7a:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:26 2026 by rpki-client