This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa File: 3230302e32382e302e302f32302d3234203d3e2037303034.roa (raw, json) Hash identifier: gRHDWRR+IPMBL5FMMKGjWS22lXmiYbQ4Cwk31ZpLMH4= Subject key identifier: 82:BE:50:73:D4:22:FE:76:A3:D5:0F:CA:37:C5:13:73:7C:79:F0:37 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 24A2314F7C27EA310A0B29154E233C36F6B3E683 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa Signing time: Tue 06 Jan 2026 19:24:46 +0000 ROA not before: Tue 06 Jan 2026 19:19:46 +0000 ROA not after: Tue 05 Jan 2027 19:24:46 +0000 asID: 7004 IP address blocks: 200.28.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 14:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a2:31:4f:7c:27:ea:31:0a:0b:29:15:4e:23:3c:36:f6:b3:e6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Jan 6 19:19:46 2026 GMT Not After : Jan 5 19:24:46 2027 GMT Subject: CN=82BE5073D422FE76A3D50FCA37C513737C79F037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:d7:fa:00:15:5a:c7:fd:eb:48:9c:40:08: 96:22:d4:26:87:4b:5b:26:64:47:24:9d:8b:4e:c0: ad:6e:77:66:1e:72:5d:8a:81:57:b0:cb:94:8e:01: a3:f2:9e:17:02:6c:65:d3:30:12:37:80:ee:cf:5d: ac:d3:b4:3d:f8:68:61:e7:04:a0:89:24:5b:2f:39: b1:a7:13:b5:85:5b:7b:a5:63:47:ba:f8:42:6b:a4: c8:08:c7:8f:ca:fc:21:f3:69:dd:c8:97:57:3b:2b: 9d:3b:70:76:63:c2:35:5f:8b:64:c3:2e:5e:11:86: 74:0a:14:7d:f8:6d:5c:cd:67:7a:6c:f1:f7:b6:d8: 77:d8:e5:a9:3c:af:2b:69:38:b5:6f:5a:28:a0:bd: 9c:2d:63:92:c0:4b:83:b3:be:ba:ef:32:9c:77:fd: dd:53:35:a3:5b:cd:79:83:3a:fa:16:6e:ea:33:2a: ee:ba:10:42:0d:3d:2c:63:68:f4:19:d0:a6:7d:a3: a8:4a:9c:ab:96:3d:9f:84:76:02:88:76:fa:a8:87: f5:8d:44:75:d1:11:2a:6e:8c:3a:c3:84:ce:86:7c: 1f:ae:d2:9c:72:3f:02:a2:86:7a:bb:4e:76:5f:82: ed:49:8e:18:28:3f:9e:1f:84:4d:b8:1c:be:bd:31: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:50:73:D4:22:FE:76:A3:D5:0F:CA:37:C5:13:73:7C:79:F0:37 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.28.0.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:49:ea:ec:07:ef:31:da:cb:eb:21:03:99:2d:6a:4c:1a:20: 03:b1:84:3d:ec:b0:35:7f:03:af:c3:a0:95:be:c4:af:60:c4: 07:cf:c4:ef:06:09:ea:e8:cd:12:9c:1b:c6:68:d4:ec:f1:a2: b0:05:81:e6:c9:08:ad:d6:2a:4b:8c:61:cd:03:bf:68:ab:1e: a1:ee:2e:31:b4:0b:c4:b7:4c:8c:c6:0f:de:8a:f5:9a:4c:81: 2c:f9:22:af:49:38:c0:8e:5c:e4:dd:dd:6f:a7:a8:e3:4f:52: bf:73:6a:de:45:f6:b3:5f:28:ef:ff:77:f2:36:24:8b:b3:e3: 31:4b:19:8c:13:47:f7:05:f2:2d:13:de:55:35:15:45:a4:73: b8:91:6c:2a:73:49:6d:fb:ba:cc:1d:63:ce:eb:24:48:f6:48: ca:e4:6c:a7:52:97:b6:d9:dc:80:1c:f1:cf:19:72:50:f4:e4: 79:9b:d0:86:28:3b:a2:51:42:eb:38:89:46:e4:dc:ce:6f:19: 07:52:06:6c:ac:b5:32:d8:6f:ed:46:11:69:58:b5:99:ff:8e: 95:26:02:3e:76:c8:86:6e:e3:64:cb:22:14:1b:ee:f1:34:8d: d8:d7:c7:f1:05:cd:24:19:bb:03:dc:59:f9:2b:cc:de:f4:f0: 81:a6:36:52 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIUJKIxT3wn6jEKCykVTiM8Nvaz5oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNjAxMDYxOTE5NDZaFw0yNzAxMDUxOTI0NDZaMDMxMTAvBgNV BAMTKDgyQkU1MDczRDQyMkZFNzZBM0Q1MEZDQTM3QzUxMzczN0M3OUYwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHNf6ABVax/3rSJxACJYi1CaH S1smZEcknYtOwK1ud2Yecl2KgVewy5SOAaPynhcCbGXTMBI3gO7PXazTtD34aGHn BKCJJFsvObGnE7WFW3ulY0e6+EJrpMgIx4/K/CHzad3Il1c7K507cHZjwjVfi2TD Ll4RhnQKFH34bVzNZ3ps8fe22HfY5ak8rytpOLVvWiigvZwtY5LAS4OzvrrvMpx3 /d1TNaNbzXmDOvoWbuozKu66EEINPSxjaPQZ0KZ9o6hKnKuWPZ+EdgKIdvqoh/WN RHXRESpujDrDhM6GfB+u0pxyPwKihnq7TnZfgu1JjhgoP54fhE24HL69MbfnAgMB AAGjggLCMIICvjAdBgNVHQ4EFgQUgr5Qc9Qi/naj1Q/KN8UTc3x58DcwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzAyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgcADANBgkqhkiG 9w0BAQsFAAOCAQEAm0nq7AfvMdrL6yEDmS1qTBogA7GEPeywNX8Dr8Oglb7Er2DE B8/E7wYJ6ujNEpwbxmjU7PGisAWB5skIrdYqS4xhzQO/aKseoe4uMbQLxLdMjMYP 3or1mkyBLPkir0k4wI5c5N3db6eo409Sv3Nq3kX2s18o7/938jYki7PjMUsZjBNH 9wXyLRPeVTUVRaRzuJFsKnNJbfu6zB1jzuskSPZIyuRsp1KXttncgBzxzxlyUPTk eZvQhig7olFC6ziJRuTczm8ZB1IGbKy1Mthv7UYRaVi1mf+OlSYCPnbIhm7jZMsi FBvu8TSN2NfH8QXNJBm7A9xZ+SvM3vTwgaY2Ug== -----END CERTIFICATE-----Generated at Sun Jan 25 13:16:41 2026 by rpki-client