This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e203136363239.roa File: 3230302e38392e33322e302f31392d3234203d3e203136363239.roa (raw, json) Hash identifier: X6DGWOsTfO8k7gnCx3dfmuEkwd2fvKQwKD6EPHL+NJE= Subject key identifier: 67:CE:0A:2E:05:74:38:38:03:18:C2:DD:5C:6C:9F:78:68:C0:96:93 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 6A149474FCB7901D8B739A508544F187C43B3868 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e203136363239.roa Signing time: Tue 06 Jan 2026 19:24:50 +0000 ROA not before: Tue 06 Jan 2026 19:19:50 +0000 ROA not after: Tue 05 Jan 2027 19:24:50 +0000 asID: 16629 IP address blocks: 200.89.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 14:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:14:94:74:fc:b7:90:1d:8b:73:9a:50:85:44:f1:87:c4:3b:38:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Jan 6 19:19:50 2026 GMT Not After : Jan 5 19:24:50 2027 GMT Subject: CN=67CE0A2E057438380318C2DD5C6C9F7868C09693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:17:c2:65:a4:16:4d:7a:da:d6:9f:df:ed: 93:c1:6b:7f:4e:a2:42:87:0e:a9:2c:f4:c2:72:67: ef:5c:49:75:cf:1f:1a:01:cc:46:a8:25:26:db:a9: 49:bb:14:4c:df:03:11:61:b1:af:24:7f:38:4d:2a: 20:bd:39:ce:ce:1d:2e:05:d3:7f:38:c3:21:e8:74: ca:c9:cb:fd:51:9d:ce:c0:ad:8f:b7:54:50:d0:32: d6:01:3c:5a:89:79:d0:b0:54:93:e2:22:6f:c3:d8: a3:15:d3:74:d9:3a:47:a5:a4:e6:99:d8:fc:06:38: be:50:d9:00:4e:34:51:a2:32:94:1f:2c:bc:34:eb: 6e:a3:29:e8:11:28:d1:31:c9:53:f7:b5:25:e3:77: d7:21:7e:66:4e:9a:58:94:b0:0e:81:eb:b3:b3:1c: 1f:70:fb:cf:d0:b5:85:47:0e:1b:de:36:de:23:d4: 0b:cb:71:63:ea:2c:60:c3:54:43:42:19:ab:38:2a: 7b:22:a7:c5:ef:36:67:34:b3:13:9d:c2:91:4b:c9: b6:67:e3:fc:11:9c:0b:5b:90:bb:3a:d5:f5:f3:11: 7a:5e:20:36:1e:1d:9a:9b:00:04:90:07:49:a4:fc: 5f:be:5f:1f:70:44:cf:e8:d7:25:79:1a:52:f1:5f: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:0A:2E:05:74:38:38:03:18:C2:DD:5C:6C:9F:78:68:C0:96:93 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e203136363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.89.32.0/19 Signature Algorithm: sha256WithRSAEncryption 64:52:3a:b8:f8:fa:49:df:a0:a2:d7:d2:5e:1c:68:b9:70:5c: 87:5d:78:dc:82:04:ce:d9:1e:8f:90:77:31:20:e5:74:34:0a: 55:aa:77:10:88:75:1a:72:31:fc:7d:21:39:b1:6a:04:f6:79: 30:bc:a4:00:74:2f:09:87:e5:8f:09:0e:73:80:a1:53:10:96: d2:da:64:42:44:48:47:64:c5:a4:ec:2f:43:4e:8f:c1:d4:f3: 85:16:82:68:4e:cd:02:02:01:4a:98:fb:97:ac:31:a3:13:97: 93:4c:ba:78:ed:52:ae:83:2a:a2:12:04:2d:a6:73:6b:8a:57: 0c:f2:bb:d2:f2:ba:53:39:dc:c2:ba:bd:0d:eb:c3:40:f7:5e: e3:91:5a:09:f9:69:57:b9:0a:5e:e5:8f:74:ac:b2:bf:fb:99: 54:e6:75:f4:38:a0:64:d0:b4:4c:af:ed:a2:05:e5:98:a3:76: af:19:59:df:a6:3f:c9:36:50:6e:c3:46:d6:56:ad:f1:3b:a5: b9:68:57:81:c7:28:c0:9c:e5:83:f5:f4:69:94:c0:54:08:ac: 1c:33:5a:1b:60:9f:64:4a:71:64:33:6d:14:39:b2:f4:87:7f: 45:3f:2e:f6:0d:85:78:ca:de:5d:ad:1a:33:3c:ae:0c:f6:87: 91:8b:6d:be -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUahSUdPy3kB2Lc5pQhUTxh8Q7OGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNjAxMDYxOTE5NTBaFw0yNzAxMDUxOTI0NTBaMDMxMTAvBgNV BAMTKDY3Q0UwQTJFMDU3NDM4MzgwMzE4QzJERDVDNkM5Rjc4NjhDMDk2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DRfCZaQWTXra1p/f7ZPBa39O okKHDqks9MJyZ+9cSXXPHxoBzEaoJSbbqUm7FEzfAxFhsa8kfzhNKiC9Oc7OHS4F 0384wyHodMrJy/1Rnc7ArY+3VFDQMtYBPFqJedCwVJPiIm/D2KMV03TZOkelpOaZ 2PwGOL5Q2QBONFGiMpQfLLw0626jKegRKNExyVP3tSXjd9chfmZOmliUsA6B67Oz HB9w+8/QtYVHDhveNt4j1AvLcWPqLGDDVENCGas4Knsip8XvNmc0sxOdwpFLybZn 4/wRnAtbkLs61fXzEXpeIDYeHZqbAASQB0mk/F++Xx9wRM/o1yV5GlLxX2chAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUZ84KLgV0ODgDGMLdXGyfeGjAlpMwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzgzOTJlMzMzMjJlMzAy ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIWSAwDQYJ KoZIhvcNAQELBQADggEBAGRSOrj4+knfoKLX0l4caLlwXIddeNyCBM7ZHo+QdzEg 5XQ0ClWqdxCIdRpyMfx9ITmxagT2eTC8pAB0LwmH5Y8JDnOAoVMQltLaZEJESEdk xaTsL0NOj8HU84UWgmhOzQICAUqY+5esMaMTl5NMunjtUq6DKqISBC2mc2uKVwzy u9LyulM53MK6vQ3rw0D3XuORWgn5aVe5Cl7lj3Sssr/7mVTmdfQ4oGTQtEyv7aIF 5Zijdq8ZWd+mP8k2UG7DRtZWrfE7pbloV4HHKMCc5YP19GmUwFQIrBwzWhtgn2RK cWQzbRQ5svSHf0U/LvYNhXjK3l2tGjM8rgz2h5GLbb4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:15:04 2026 by rpki-client