This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa
File: 3230302e35322e3132382e302f32302d3234203d3e203136353331.roa (raw, json)
Hash identifier: ZgrmsL6xfnG7g4+z7TMjWOpccNPG/t07ccwc7aRCO40=
Subject key identifier: 1D:42:5A:61:C0:1F:6C:2B:2F:A5:18:73:D3:BB:0F:73:98:3D:5E:B4
Certificate issuer: /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Certificate serial: 3BEB6D0339D0A0C0D1DDE88ADB2A2996D67BD240
Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa
Signing time: Tue 06 Jan 2026 19:24:30 +0000
ROA not before: Tue 06 Jan 2026 19:19:30 +0000
ROA not after: Tue 05 Jan 2027 19:24:30 +0000
asID: 16531
IP address blocks: 200.52.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:eb:6d:03:39:d0:a0:c0:d1:dd:e8:8a:db:2a:29:96:d6:7b:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Validity
Not Before: Jan 6 19:19:30 2026 GMT
Not After : Jan 5 19:24:30 2027 GMT
Subject: CN=1D425A61C01F6C2B2FA51873D3BB0F73983D5EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:72:e2:f6:f3:3b:eb:ea:57:f5:77:4f:b8:
0b:9c:04:d3:1d:24:ef:e2:37:d9:75:97:74:88:92:
a4:d3:ea:6b:a8:1b:e5:04:ae:92:3f:7c:25:52:ab:
00:19:54:e7:5c:aa:35:1b:7b:91:ee:f8:e3:15:b4:
ed:1a:14:03:9d:bb:16:04:80:af:6c:77:f5:6b:41:
08:d0:c9:3d:cd:9f:1e:94:5d:48:9f:d8:55:d6:e3:
1a:22:3f:c7:4c:7d:66:70:8a:58:11:d4:97:68:73:
b9:73:18:ec:ad:50:25:19:06:f4:6f:11:69:61:a1:
83:d7:fd:8e:2e:c5:0c:df:36:9d:b5:6f:ac:89:df:
b9:a1:9c:05:c1:19:25:c3:c8:37:07:74:cf:f8:70:
f5:3c:fc:f3:df:c5:81:16:70:f7:b7:fd:03:4b:18:
f1:74:56:62:55:1a:dc:c3:d5:9a:99:61:64:72:71:
d6:a1:e4:a6:d4:8e:43:49:34:2b:db:31:95:05:02:
9d:f8:03:51:3a:5e:5d:8e:9c:57:eb:77:aa:f2:f4:
51:4d:e7:7d:d9:3d:bb:d2:7e:cc:0e:db:9b:8d:3a:
03:24:27:40:1f:59:a6:a9:50:53:eb:a6:bd:a8:c1:
fa:21:3e:e6:7b:9b:7a:77:4f:98:e7:7e:9a:86:c9:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:5A:61:C0:1F:6C:2B:2F:A5:18:73:D3:BB:0F:73:98:3D:5E:B4
X509v3 Authority Key Identifier:
keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.52.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:c5:a6:d2:e1:ba:77:56:ad:05:b9:ae:b2:15:e3:f7:da:67:
63:ad:08:9e:b0:67:a6:63:88:72:1d:ac:ae:8f:6e:71:a9:b3:
a8:52:37:da:34:f9:09:bd:38:d2:cb:fc:b7:03:d3:b1:dd:b7:
5f:59:6f:34:bd:d8:58:e7:9e:89:3d:40:86:63:a3:9c:e2:73:
19:b3:7c:39:53:f5:15:0b:a3:54:70:1d:8a:57:3d:a9:93:12:
09:59:b2:e9:97:79:d3:3e:93:93:72:dc:fb:43:72:ea:7c:9e:
6b:bb:5f:c5:e0:27:4e:b8:77:a0:82:b0:e5:0b:7c:a6:83:08:
f0:f7:70:0c:a7:cb:51:74:3e:6e:2f:49:64:e3:3f:08:da:8a:
43:37:38:d6:0d:2c:7c:52:14:eb:86:2e:c1:f9:f3:d8:e5:69:
f7:3b:4c:94:50:9e:95:0e:a4:d0:60:51:23:57:4e:2a:b1:fa:
1c:d2:bc:13:9d:4b:08:ab:d3:7a:7b:92:5f:9e:55:36:2f:a7:
14:1c:98:fd:32:c8:ef:1e:c6:a2:97:d5:86:d9:1e:1b:b8:34:
02:88:ac:88:5f:a9:80:c2:b4:56:5a:dc:12:ee:dc:5c:d5:50:
9d:2a:d2:3d:9d:8e:0b:2a:83:2f:76:c5:c0:9c:c8:f3:2b:13:
98:58:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:33 2026 by rpki-client