This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139313830.roa
File: 3230302e33312e39362e302f31392d3234203d3e203139313830.roa (raw, json)
Hash identifier: 1dijCgXdUdDg4bqnC1lq+rphkrm4QJfyVsArY+BE3js=
Subject key identifier: 7B:54:3D:09:CC:13:2F:41:A8:4F:83:51:72:26:9E:45:94:F0:31:14
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 3C470ADEF10349DD9746E34578B43ECA29FCBB27
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139313830.roa
Signing time: Tue 06 Jan 2026 19:36:09 +0000
ROA not before: Tue 06 Jan 2026 19:31:09 +0000
ROA not after: Tue 05 Jan 2027 19:36:09 +0000
asID: 19180
IP address blocks: 200.31.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:0a:de:f1:03:49:dd:97:46:e3:45:78:b4:3e:ca:29:fc:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Jan 6 19:31:09 2026 GMT
Not After : Jan 5 19:36:09 2027 GMT
Subject: CN=7B543D09CC132F41A84F835172269E4594F03114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:ff:a8:c1:44:3e:aa:68:8a:c7:48:25:28:
1e:81:ac:a0:a6:18:df:62:3d:01:e5:05:9a:e3:c6:
21:b8:72:f0:22:52:a8:ce:98:97:41:d2:77:b0:c9:
09:24:e4:63:c1:c2:2e:a8:84:73:36:f0:59:f5:ac:
11:68:e4:b3:f2:10:01:18:2b:c8:97:f2:31:b4:16:
dc:53:7f:40:cf:ee:fe:d2:82:93:a6:ba:49:05:12:
7a:95:03:02:be:ff:7d:9e:fc:33:56:e4:61:39:7f:
d2:dc:8b:0f:28:ac:b8:0d:40:0a:93:d4:c0:82:f4:
8b:fb:97:ed:50:61:86:12:63:32:d7:92:9a:72:21:
c4:05:08:2d:3f:5b:98:a7:4a:ba:0a:b5:f8:f0:0a:
a2:6b:7e:86:18:65:2d:ef:f5:a0:13:ee:4b:5e:17:
1b:b4:f3:ad:11:46:0c:1c:74:dc:95:0d:5b:3d:f7:
ba:24:27:f5:cb:2f:99:fc:69:8e:bb:9d:f2:86:a4:
12:e7:10:df:6a:6e:fb:9f:f8:3b:2a:dc:e1:6d:74:
b5:c3:0f:d1:bb:c0:0d:ec:94:24:3a:70:76:6f:da:
78:aa:92:2b:a3:db:df:9f:a0:d7:14:e9:11:2c:1c:
22:a6:50:3d:10:37:1d:37:2b:79:81:ed:7d:c0:e1:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:3D:09:CC:13:2F:41:A8:4F:83:51:72:26:9E:45:94:F0:31:14
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:46:34:8f:22:90:af:17:66:10:61:52:a8:f9:c9:d0:42:29:
1d:59:4f:39:52:b9:92:38:e1:38:51:60:30:c3:a1:3a:79:f8:
08:c5:6e:35:ea:28:6d:1a:5f:c5:29:47:c6:09:07:4b:02:72:
e4:50:4d:99:c6:87:ad:59:55:8a:8b:28:3b:9a:d8:b8:8f:b0:
c6:37:b3:56:95:b1:1e:c6:89:be:65:0b:2c:fc:ee:19:81:f3:
ed:fa:b4:39:90:ce:55:13:91:ed:2a:41:c9:ad:66:a2:9b:a3:
df:92:af:ee:91:1b:c9:3c:f6:b5:4f:7b:fd:7a:f3:24:ab:7b:
8c:bc:ec:1f:0e:a4:cd:7c:e3:d5:34:f6:bf:52:f8:d2:d2:c3:
fe:c2:b9:91:3e:5c:1c:6a:29:5a:f2:6a:0e:98:3e:1a:c4:ee:
63:48:64:5a:d0:21:39:1a:e3:c7:8b:22:9c:5a:f7:fe:63:ba:
38:c3:45:4e:75:81:61:8d:04:48:dc:dd:c4:63:0a:a9:99:bd:
41:f5:22:e1:51:3c:d6:ea:24:e2:db:63:fa:c8:a0:58:d5:b7:
4d:e5:3a:05:b9:b7:21:01:d2:01:10:2e:2d:f7:ba:b1:bd:74:
0e:d3:b4:ab:da:be:bb:0a:b0:1a:4c:ad:b8:88:c1:59:70:0e:
7a:29:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:39 2026 by rpki-client