This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e2037343138.roa File: 3230302e32382e302e302f31362d3234203d3e2037343138.roa (raw, json) Hash identifier: 6XclQppme7o9In4F58WWcAHDTdUhB9hUUY7p4Ad7SZM= Subject key identifier: D2:16:B6:14:25:09:8D:AA:F7:3A:24:86:1B:6E:24:4C:B7:8C:7E:3B Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 78DBAE4CC9106923E60846929C0F68F4E4237E68 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e2037343138.roa Signing time: Tue 06 Jan 2026 19:24:48 +0000 ROA not before: Tue 06 Jan 2026 19:19:48 +0000 ROA not after: Tue 05 Jan 2027 19:24:48 +0000 asID: 7418 IP address blocks: 200.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 14:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:db:ae:4c:c9:10:69:23:e6:08:46:92:9c:0f:68:f4:e4:23:7e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Jan 6 19:19:48 2026 GMT Not After : Jan 5 19:24:48 2027 GMT Subject: CN=D216B61425098DAAF73A24861B6E244CB78C7E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:f4:be:eb:f6:0f:3d:09:ff:c2:af:15:f3: 0e:d2:08:47:7a:74:b4:a6:3f:a3:16:e5:0b:f7:48: 7c:55:88:f0:3e:3a:93:81:25:e9:7b:9e:6b:af:25: 35:61:fe:12:a9:c2:5a:5e:4b:c5:23:c6:5e:2a:05: df:f6:c5:29:05:da:c5:bf:85:3b:2a:6b:17:6c:97: 99:a6:73:74:be:2a:77:ca:1a:5e:cd:c9:c5:d9:02: 06:5f:cc:8d:63:de:6b:7e:05:1e:94:63:a3:78:af: bc:8e:ea:96:0f:70:83:c1:3b:f5:8c:6e:c3:fc:e4: 23:3a:4c:ee:97:5d:2a:b5:a6:37:c6:51:4d:a3:8b: ee:8e:e5:31:c1:76:c0:3b:b6:8a:93:d6:cb:7a:7f: 8d:79:76:d8:22:7f:9e:57:3a:66:39:ce:9a:ed:a4: d2:0b:60:f9:ba:09:59:4a:24:92:62:9a:fd:16:79: 69:33:9e:fa:13:19:c4:81:2d:3a:18:2d:3e:4e:92: 78:dd:7c:2a:a0:9f:fe:4d:11:25:77:a7:0b:b7:8b: 3a:7e:28:bf:7d:fa:32:ff:07:9b:50:da:90:3a:54: 78:7b:cb:27:f5:80:5e:bc:a1:1f:7c:54:9d:06:d1: bf:86:4f:c8:c8:3f:c1:b3:ce:32:dc:19:c3:40:dd: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:B6:14:25:09:8D:AA:F7:3A:24:86:1B:6E:24:4C:B7:8C:7E:3B X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e2037343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:12:4a:15:c7:ba:a8:42:13:a7:6f:4f:73:6a:43:68:9b:55: a1:1f:90:79:8b:ab:ed:c6:66:1d:2a:3b:64:6f:89:51:70:cd: ab:50:d1:9f:a2:fb:ea:31:20:cb:5f:4d:f7:fe:6a:1b:76:fd: 1e:dc:e5:cc:4c:30:60:f3:10:df:ec:d0:54:fa:f1:22:d9:ab: 99:dd:69:3a:48:11:46:e6:7d:15:ad:99:73:1e:99:28:08:22: 24:3d:ac:32:f0:89:fc:52:83:e5:ba:27:ea:64:d8:d4:24:3c: c8:eb:1f:f9:98:65:83:cd:5a:48:f9:74:ce:08:47:0c:da:56: b2:d7:20:a0:73:ba:6e:cc:d8:de:c4:b4:b7:aa:f7:5a:f4:fc: ec:2e:4a:9c:14:4b:03:4b:0a:0f:c7:36:89:41:ba:4d:2b:32: 97:b4:2c:f4:9b:9e:d4:54:3b:fd:64:96:12:bc:83:eb:57:1b: ea:1d:6f:70:f8:66:88:76:86:37:55:48:a8:35:95:a0:65:82: a4:3a:56:5c:de:e5:bc:d1:95:9e:95:5f:54:44:00:57:13:c8: 48:9d:36:02:9c:0b:51:44:9f:3a:f9:fb:ed:8b:24:73:22:e9: d3:5c:3b:76:c5:55:2e:35:3b:12:a5:26:ff:30:4b:2e:d0:6f: 33:34:2b:1f -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgIUeNuuTMkQaSPmCEaSnA9o9OQjfmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNjAxMDYxOTE5NDhaFw0yNzAxMDUxOTI0NDhaMDMxMTAvBgNV BAMTKEQyMTZCNjE0MjUwOThEQUFGNzNBMjQ4NjFCNkUyNDRDQjc4QzdFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPpPS+6/YPPQn/wq8V8w7SCEd6 dLSmP6MW5Qv3SHxViPA+OpOBJel7nmuvJTVh/hKpwlpeS8Ujxl4qBd/2xSkF2sW/ hTsqaxdsl5mmc3S+KnfKGl7NycXZAgZfzI1j3mt+BR6UY6N4r7yO6pYPcIPBO/WM bsP85CM6TO6XXSq1pjfGUU2ji+6O5THBdsA7toqT1st6f415dtgif55XOmY5zprt pNILYPm6CVlKJJJimv0WeWkznvoTGcSBLToYLT5OknjdfCqgn/5NESV3pwu3izp+ KL99+jL/B5tQ2pA6VHh7yyf1gF68oR98VJ0G0b+GT8jIP8GzzjLcGcNA3Ws3AgMB AAGjggLBMIICvTAdBgNVHQ4EFgQU0ha2FCUJjar3OiSGG24kTLeMfjswHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzAyZTMwMmYz MTM2MmQzMjM0MjAzZDNlMjAzNzM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMgcMA0GCSqGSIb3 DQEBCwUAA4IBAQA0EkoVx7qoQhOnb09zakNom1WhH5B5i6vtxmYdKjtkb4lRcM2r UNGfovvqMSDLX033/mobdv0e3OXMTDBg8xDf7NBU+vEi2auZ3Wk6SBFG5n0VrZlz HpkoCCIkPawy8In8UoPluifqZNjUJDzI6x/5mGWDzVpI+XTOCEcM2lay1yCgc7pu zNjexLS3qvda9PzsLkqcFEsDSwoPxzaJQbpNKzKXtCz0m57UVDv9ZJYSvIPrVxvq HW9w+GaIdoY3VUioNZWgZYKkOlZc3uW80ZWelV9URABXE8hInTYCnAtRRJ86+fvt iyRzIunTXDt2xVUuNTsSpSb/MEsu0G8zNCsf -----END CERTIFICATE-----Generated at Sun Jan 25 14:51:12 2026 by rpki-client