This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234322e302f32342d3234203d3e20323633313734.roa
File: 3230302e32392e3234322e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier: xydfLPaZ8zg5sJTU7p7Ooi2/htyaYM9Bys5X5RcOk3s=
Subject key identifier: 54:9A:47:76:DF:50:D6:E6:FB:C3:CF:75:47:75:88:9B:44:60:06:97
Certificate issuer: /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial: 2D9B9F1869C7F8071B292D4AA9C66BE2274D37E1
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234322e302f32342d3234203d3e20323633313734.roa
Signing time: Tue 06 Jan 2026 19:42:25 +0000
ROA not before: Tue 06 Jan 2026 19:37:25 +0000
ROA not after: Tue 05 Jan 2027 19:42:25 +0000
asID: 263174
IP address blocks: 200.29.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9b:9f:18:69:c7:f8:07:1b:29:2d:4a:a9:c6:6b:e2:27:4d:37:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Validity
Not Before: Jan 6 19:37:25 2026 GMT
Not After : Jan 5 19:42:25 2027 GMT
Subject: CN=549A4776DF50D6E6FBC3CF754775889B44600697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:77:b5:93:fd:3f:cc:d3:8f:2d:09:00:09:
29:a6:68:dc:c4:d2:da:bb:06:4a:89:14:04:7f:0a:
5f:10:3b:86:54:d4:67:8b:7d:0e:97:e5:41:9a:d7:
c5:a0:d3:35:be:5d:0e:ae:41:fc:b1:fe:a3:d0:9d:
52:1b:bf:d8:bb:92:f5:cd:73:43:5e:96:fd:c8:89:
b4:7a:13:24:b1:0f:fe:c5:a8:1c:56:11:46:c0:28:
f3:e7:91:0d:3e:44:e1:d3:e2:ee:d9:d3:ad:f9:27:
1d:14:27:ec:11:5e:d6:71:c8:53:28:5f:3c:ec:11:
b9:73:b5:95:73:b7:09:1b:f0:4e:54:6f:86:07:85:
a9:ce:89:0c:73:4c:f9:00:40:f4:6a:3c:66:62:93:
5a:83:07:ac:c0:7e:d2:14:8e:17:37:75:5f:a3:f1:
a2:73:cf:cf:b4:d7:88:58:2c:78:84:5e:63:d1:c2:
b7:ba:98:a9:7b:0a:c2:b2:b6:d3:b7:31:ff:09:61:
83:2a:e3:06:f4:1d:4d:00:0d:97:0e:42:22:4e:cc:
a8:88:81:6c:45:72:81:dd:70:ee:21:99:ee:f4:5b:
26:f2:8d:6a:57:a6:0b:d9:d1:4b:d6:29:64:c7:d3:
fd:5e:3f:0d:59:3e:d4:f9:9e:51:98:df:cc:81:3b:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:47:76:DF:50:D6:E6:FB:C3:CF:75:47:75:88:9B:44:60:06:97
X509v3 Authority Key Identifier:
keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234322e302f32342d3234203d3e20323633313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.242.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e0:fd:da:85:e1:b8:84:62:eb:dc:3a:63:ac:f8:32:59:29:
bf:ac:a4:0a:2a:ff:9a:f7:03:2a:0e:a8:7e:b1:40:a3:11:8c:
55:b9:9a:0e:c1:4d:7c:3a:cd:b5:e4:40:53:ca:84:e3:00:40:
e7:62:aa:78:de:6c:10:50:f5:79:06:fc:8e:de:99:72:ea:b1:
5a:07:80:fa:d0:b0:66:f2:e3:b5:c9:8a:b8:ad:c6:d5:1d:41:
d4:07:f2:83:5f:4c:41:c8:84:d6:c1:dc:ae:b7:d6:2f:aa:de:
e9:41:60:a6:be:bd:64:c8:ab:18:d3:8f:c9:2d:73:d1:a3:a0:
a7:7f:b5:19:10:2a:7b:98:5b:ca:31:84:3b:e9:bf:61:06:37:
a6:f2:82:79:97:57:47:87:e3:b5:d8:1e:fa:a8:46:87:8e:ae:
fb:6d:44:32:9e:11:b6:c7:e9:f5:aa:06:c1:aa:a4:a0:85:74:
53:db:78:28:5a:92:ff:59:16:67:77:67:20:2f:c1:12:15:f2:
54:45:08:1d:1c:7b:b3:ff:f5:39:27:93:d0:e1:d5:f0:d6:74:
a3:3b:80:55:57:ac:1b:aa:a4:b5:1d:0f:b7:ec:cb:3d:d6:70:
65:ec:13:4e:d1:8c:c3:ba:99:a5:b2:58:1a:eb:48:40:5a:b7:
02:0a:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:51 2026 by rpki-client