This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa
File: 3230302e38352e3233382e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: gRSEB+8iB3LPTZvkHy6PX+u+7IDukx7LarJxwcysjWA=
Subject key identifier: 13:6B:D4:16:86:AD:3C:40:B6:4B:34:EE:B4:6F:D2:27:F3:00:4C:A0
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 1F1F5D99997835CD7DF0110237CB11B922EA39FB
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa
Signing time: Tue 06 Jan 2026 18:58:45 +0000
ROA not before: Tue 06 Jan 2026 18:53:45 +0000
ROA not after: Tue 05 Jan 2027 18:58:45 +0000
asID: 12684
IP address blocks: 200.85.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1f:5d:99:99:78:35:cd:7d:f0:11:02:37:cb:11:b9:22:ea:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Jan 6 18:53:45 2026 GMT
Not After : Jan 5 18:58:45 2027 GMT
Subject: CN=136BD41686AD3C40B64B34EEB46FD227F3004CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:46:ac:62:86:a7:7c:b8:73:d0:d8:ff:bc:
7f:8b:4f:93:74:47:b8:54:ac:cb:48:4e:1e:3f:dd:
71:fb:2d:c0:f9:71:26:01:c5:d8:74:56:22:c4:11:
dc:76:0a:13:e7:89:99:74:c6:a0:4e:f4:cb:c8:8e:
01:41:ab:cb:1e:37:2e:be:18:1f:3b:4d:3c:51:9c:
ec:27:10:91:fa:28:7a:57:43:4d:09:63:d4:67:82:
d7:d9:2a:67:97:61:1d:45:b9:9c:1e:d1:c6:b2:b5:
44:46:51:76:6c:84:ea:db:f5:16:9b:71:75:72:3c:
2b:48:5d:56:86:c9:b7:59:45:ba:58:4a:d3:55:58:
8c:a2:83:8d:3e:eb:91:d7:fe:f1:4b:f2:02:c7:f5:
ed:05:83:53:8a:b9:c6:68:d2:98:00:96:04:67:2a:
f1:50:70:d8:43:f7:6c:34:e9:26:e4:f0:bf:e5:57:
f9:3a:f7:6b:61:ac:5d:52:25:7a:ae:7c:5d:06:91:
db:ad:35:3b:62:a1:d6:d1:5d:9b:8e:c6:11:3b:f1:
53:62:79:69:01:66:6b:53:c5:cb:e8:2d:af:30:d3:
8d:16:b2:c3:d6:73:a5:4c:d3:cc:50:40:1c:5b:3e:
58:61:63:c4:36:aa:25:51:ae:02:7a:b6:b5:cd:44:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:D4:16:86:AD:3C:40:B6:4B:34:EE:B4:6F:D2:27:F3:00:4C:A0
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8f:3e:86:88:03:bc:02:e7:bd:f2:8e:78:9b:bf:f1:b1:10:
34:e8:48:09:6e:8c:64:18:44:86:ae:87:97:f5:f6:c5:f3:45:
c0:80:67:77:ea:0f:63:d1:a8:b6:dc:a2:e7:1f:bb:ee:b1:a7:
d6:d7:45:ab:e6:71:ef:aa:ca:6f:85:6d:97:d4:ea:81:bd:11:
e3:92:07:86:fa:4f:34:6c:32:07:43:da:04:d3:6b:da:8c:c0:
92:14:d5:e2:58:dd:48:7f:01:bf:89:35:f7:98:94:0d:5b:11:
8c:14:23:c5:fc:ef:d9:b1:9d:71:32:5a:63:30:a4:14:35:97:
99:52:70:06:87:46:92:c6:67:37:c9:b8:54:e6:26:1b:38:12:
72:f4:93:09:e2:e1:31:f4:44:04:a9:0c:20:93:9b:83:83:4b:
4a:65:36:61:57:8a:9d:d6:8a:bd:27:9f:a1:37:d0:a0:f8:42:
fb:88:1a:d1:e4:33:c1:1f:37:21:d5:26:02:b8:87:7c:0d:e8:
da:a6:32:93:51:68:24:27:6d:a3:e2:96:dc:ff:d7:ba:ae:37:
b5:06:0f:b2:89:d6:68:8b:63:4d:2d:2f:36:dd:f5:82:89:e4:
58:aa:62:e0:2f:9e:90:fb:8e:42:55:79:2a:46:27:d3:96:e4:
2f:8d:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:30:18 2026 by rpki-client