This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
File: 3230302e34372e3231362e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier: +RXCAGrXuhMa/RKbdjIR3Z68KSFGvJuK3hj2QSpUpZA=
Subject key identifier: D1:17:1D:75:89:D7:FF:B7:FB:69:0B:B7:B0:16:60:8D:6E:93:94:06
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 5AA39AFB7DFDAE2FA5A6738E18962A2153BC48BA
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
Signing time: Tue 06 Jan 2026 18:58:44 +0000
ROA not before: Tue 06 Jan 2026 18:53:44 +0000
ROA not after: Tue 05 Jan 2027 18:58:44 +0000
asID: 14187
IP address blocks: 200.47.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a3:9a:fb:7d:fd:ae:2f:a5:a6:73:8e:18:96:2a:21:53:bc:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Jan 6 18:53:44 2026 GMT
Not After : Jan 5 18:58:44 2027 GMT
Subject: CN=D1171D7589D7FFB7FB690BB7B016608D6E939406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:1b:a0:88:a8:00:f5:f8:f0:47:99:c3:07:
1b:d1:1b:5f:7c:e0:eb:77:19:8d:8d:dc:68:0d:e5:
92:c8:ed:ca:de:37:1a:97:79:6b:0b:4b:d3:0f:23:
a3:37:76:8b:f3:1b:6e:24:2a:55:4f:cc:00:ec:6c:
d4:01:c9:4f:03:f9:53:85:56:f3:4b:48:6f:d7:c4:
0c:60:08:33:3e:65:6f:d1:a6:02:15:47:dd:56:98:
46:cb:7a:5a:07:16:64:f5:97:e3:34:34:1a:54:85:
55:32:b3:7a:ed:f9:5f:a9:83:d0:89:4a:7a:e1:13:
92:0f:28:50:db:d4:f2:af:fa:ec:f5:8a:d2:6a:93:
2f:aa:c6:1d:49:76:8b:ed:b0:fe:47:99:43:71:0d:
3e:ec:79:b2:84:10:71:98:5b:29:ad:9a:7a:d4:62:
ab:27:ee:c6:db:f1:ed:d8:42:38:98:f7:98:b2:27:
b6:ab:99:35:5f:e4:85:ca:c1:44:45:68:45:d4:62:
b9:14:bc:a8:00:2b:7b:e4:a6:37:52:7b:68:49:10:
59:2d:da:36:39:3e:9d:52:7f:84:0c:b6:80:0b:67:
34:94:86:c9:91:cb:56:1f:7d:53:1a:31:eb:fa:59:
b2:e9:6c:4f:94:b6:20:09:19:d8:3f:8c:da:bb:d2:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:1D:75:89:D7:FF:B7:FB:69:0B:B7:B0:16:60:8D:6E:93:94:06
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.47.216.0/22
Signature Algorithm: sha256WithRSAEncryption
22:4b:31:50:fb:ff:72:d4:3a:6c:f5:8f:33:75:72:92:eb:bc:
ce:c0:45:fc:6e:56:53:44:65:6c:c9:f0:55:23:cf:2c:c2:a4:
e3:e1:51:60:43:b9:2c:35:27:6d:db:b3:bc:d6:65:26:18:ce:
64:12:d2:dc:af:ff:a5:c9:44:77:ff:2f:2e:64:6e:a6:36:3d:
47:5c:1e:0b:c9:91:d5:12:4e:06:5c:b7:4f:04:c9:a4:12:eb:
10:47:3e:4f:3e:50:ae:57:5c:f6:95:f3:d5:3b:9b:66:b1:11:
26:58:03:bf:02:e1:78:ff:09:d1:71:c9:98:d1:8f:f2:50:a6:
e1:5e:1a:10:d9:ce:50:7d:2d:a9:d0:ab:cd:62:88:b4:c4:e2:
e3:92:d9:71:0a:1b:bd:d4:6c:90:85:6d:22:53:48:19:f4:e4:
9a:16:ba:49:61:86:e3:ec:77:37:72:56:46:68:df:b3:f0:f7:
6b:dc:01:e5:fa:bb:54:4b:42:f7:8b:8a:e3:75:0f:a0:13:cb:
f8:f1:5f:c6:6e:19:6e:72:e6:d9:96:ac:64:fc:94:e9:c1:0b:
45:eb:ae:bc:2c:ac:3e:38:eb:c1:74:32:4c:a0:c9:34:50:6c:
87:1d:2e:49:cf:eb:dd:4c:98:0b:5f:e0:83:c7:27:fd:03:f3:
5d:7e:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:24 2026 by rpki-client