This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa File: 3230302e32382e302e302f31362d3234203d3e203136363239.roa (raw, json) Hash identifier: VyPgmCXRoPVk38Q7kctnXWe+AvbC41T060upyJl+6KE= Subject key identifier: 03:1A:C0:EB:58:D4:4B:55:0E:2A:98:31:B1:EE:34:B0:05:F1:88:BA Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 6E12C440862CCD569B36371F2225104E4BFFC852 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa Signing time: Tue 06 Jan 2026 19:24:54 +0000 ROA not before: Tue 06 Jan 2026 19:19:54 +0000 ROA not after: Tue 05 Jan 2027 19:24:54 +0000 asID: 16629 IP address blocks: 200.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 14:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:c4:40:86:2c:cd:56:9b:36:37:1f:22:25:10:4e:4b:ff:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Jan 6 19:19:54 2026 GMT Not After : Jan 5 19:24:54 2027 GMT Subject: CN=031AC0EB58D44B550E2A9831B1EE34B005F188BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:ff:78:8a:11:7e:de:b6:ff:0e:14:f7:d0: 53:a9:f5:35:e2:e8:c1:a0:7e:7a:2c:6e:21:72:75: 6e:16:ef:52:e5:d9:81:51:ef:a2:4a:47:79:21:7a: 60:34:db:7f:35:a1:78:da:2b:f5:94:8f:2f:8a:b6: 1a:74:51:ef:28:db:9f:48:ad:7e:d3:6c:5f:71:22: 1b:0c:35:8f:a3:d6:63:12:55:31:52:b0:48:b4:3b: ee:51:f3:f2:cd:39:f1:20:3c:dd:bf:dc:87:3e:f5: ca:7b:b3:ff:29:5b:95:12:a6:27:b4:e9:d7:dc:94: 26:30:3d:43:f2:68:87:1d:99:f7:4a:47:26:76:2d: 7c:ff:11:9e:8b:d5:2f:7a:4d:e7:d6:86:c1:cb:8f: 93:ba:36:91:53:db:9c:39:fc:73:79:99:56:64:1b: 12:bd:ca:09:6b:48:29:b5:29:ac:82:d2:f1:2c:3a: 3b:55:cd:fb:02:4f:27:5b:38:04:6f:d7:d4:94:1a: 1d:45:09:f9:f8:14:e2:e2:27:1e:69:c1:f4:3d:c8: 15:d4:b9:83:51:22:a1:8a:37:39:ba:d6:7a:e3:73: 52:5a:73:1a:b1:60:6b:f7:0d:cc:15:9a:cf:22:1a: e5:5b:ab:7f:77:a4:d2:65:f9:7f:6b:05:1f:04:0a: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1A:C0:EB:58:D4:4B:55:0E:2A:98:31:B1:EE:34:B0:05:F1:88:BA X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:05:e0:49:6c:9e:91:61:95:2d:6d:c0:b6:9e:b2:58:f3:23: 35:59:36:3f:07:06:69:70:60:41:a7:a9:35:4a:61:b0:2d:98: 99:fb:1c:bb:ed:62:ff:2b:bb:17:87:15:3a:ec:ed:2c:7b:4a: 4e:61:56:80:4b:cb:09:41:03:8a:81:ac:06:94:fd:eb:8c:5b: c7:0b:92:74:be:36:96:50:ec:28:c5:4d:bb:48:4c:0d:77:9e: 0d:34:5e:97:62:1b:15:68:55:5a:59:b0:3c:75:33:a5:7e:f5: 4c:c5:b0:4d:05:57:c1:ee:1d:b6:94:3b:93:51:ae:0e:d0:65: f2:0e:a9:1e:7f:2b:75:07:35:55:8d:92:22:05:c1:3d:7f:3b: 7e:04:ec:4f:38:7f:99:dd:ce:30:85:b7:be:d4:0e:a2:14:ed: 15:29:2c:ac:bc:7d:8d:b3:84:c0:ed:e5:dc:81:16:cf:2e:53: b6:6f:d0:f0:3c:60:9c:7c:c0:76:79:bc:cf:9b:e1:cc:49:b1: 77:fa:4f:cf:c1:37:25:7d:4f:0f:40:0d:33:62:a9:e5:51:51: b9:69:ee:1b:25:c0:eb:48:0b:96:f9:9e:f8:8c:75:71:1c:62: e0:76:be:f6:5e:c4:13:f5:d8:20:7e:bd:3e:d6:05:28:7f:94: d7:0c:8b:dd -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUbhLEQIYszVabNjcfIiUQTkv/yFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNjAxMDYxOTE5NTRaFw0yNzAxMDUxOTI0NTRaMDMxMTAvBgNV BAMTKDAzMUFDMEVCNThENDRCNTUwRTJBOTgzMUIxRUUzNEIwMDVGMTg4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKf94ihF+3rb/DhT30FOp9TXi 6MGgfnosbiFydW4W71Ll2YFR76JKR3khemA02381oXjaK/WUjy+Kthp0Ue8o259I rX7TbF9xIhsMNY+j1mMSVTFSsEi0O+5R8/LNOfEgPN2/3Ic+9cp7s/8pW5USpie0 6dfclCYwPUPyaIcdmfdKRyZ2LXz/EZ6L1S96TefWhsHLj5O6NpFT25w5/HN5mVZk GxK9yglrSCm1KayC0vEsOjtVzfsCTydbOARv19SUGh1FCfn4FOLiJx5pwfQ9yBXU uYNRIqGKNzm61nrjc1JacxqxYGv3DcwVms8iGuVbq393pNJl+X9rBR8ECoDBAgMB AAGjggLDMIICvzAdBgNVHQ4EFgQUAxrA61jUS1UOKpgxse40sAXxiLowHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzAyZTMwMmYz MTM2MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyBwwDQYJKoZI hvcNAQELBQADggEBABIF4ElsnpFhlS1twLaesljzIzVZNj8HBmlwYEGnqTVKYbAt mJn7HLvtYv8ruxeHFTrs7Sx7Sk5hVoBLywlBA4qBrAaU/euMW8cLknS+NpZQ7CjF TbtITA13ng00XpdiGxVoVVpZsDx1M6V+9UzFsE0FV8HuHbaUO5NRrg7QZfIOqR5/ K3UHNVWNkiIFwT1/O34E7E84f5ndzjCFt77UDqIU7RUpLKy8fY2zhMDt5dyBFs8u U7Zv0PA8YJx8wHZ5vM+b4cxJsXf6T8/BNyV9Tw9ADTNiqeVRUblp7hslwOtIC5b5 nviMdXEcYuB2vvZexBP12CB+vT7WBSh/lNcMi90= -----END CERTIFICATE-----Generated at Sun Jan 25 19:09:51 2026 by rpki-client