This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa
File: 3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa (raw, json)
Hash identifier: L3WGJ3yvYXskbP6uZn+7t8Tr8EbVT3kDejLJ5CXHwlY=
Subject key identifier: 34:A4:C0:D3:B4:EF:D1:8E:50:77:0C:69:8D:CE:6F:49:06:87:80:73
Certificate issuer: /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial: 0277F3311A4F8BCD3056B6FFF47C4E674E1201FA
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa
Signing time: Tue 06 Jan 2026 19:46:59 +0000
ROA not before: Tue 06 Jan 2026 19:41:59 +0000
ROA not after: Tue 05 Jan 2027 19:46:59 +0000
asID: 27669
IP address blocks: 200.108.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 14:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:77:f3:31:1a:4f:8b:cd:30:56:b6:ff:f4:7c:4e:67:4e:12:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Validity
Not Before: Jan 6 19:41:59 2026 GMT
Not After : Jan 5 19:46:59 2027 GMT
Subject: CN=34A4C0D3B4EFD18E50770C698DCE6F4906878073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:1f:a1:af:7f:13:08:48:b0:a9:93:44:84:
86:4e:a5:52:27:f1:7b:a0:a0:83:91:c5:3a:6e:ed:
ac:8c:43:75:12:9f:54:69:59:32:67:33:24:b7:a4:
43:20:20:2d:94:5d:05:19:a1:c3:0d:d0:ab:b8:4b:
aa:04:00:11:f1:39:67:ca:92:35:f8:fc:3e:38:2e:
ca:89:3e:84:30:af:d0:6b:fd:4b:ff:34:9f:21:d4:
79:31:74:07:03:2e:ce:d0:d8:97:cc:b8:43:c1:b0:
70:47:60:ce:56:c4:39:d5:4f:a1:8a:74:83:0d:7f:
03:c6:3a:04:12:9c:0d:ec:8f:4f:3c:8f:11:db:b1:
c1:fa:70:d3:cb:62:3a:17:47:aa:51:dd:f5:a2:e2:
c2:19:8c:55:12:3c:d5:cb:fd:bd:04:3b:1c:dc:b5:
8d:af:72:04:9d:36:66:fa:42:af:9f:24:4c:b1:f7:
59:1a:fa:7b:bd:63:1f:9a:1c:94:df:38:e8:58:03:
18:79:d3:c2:81:4e:86:1b:7a:a5:f3:ce:c6:af:cd:
18:24:73:39:f4:2b:e5:a8:00:47:bc:e5:2c:d5:7a:
6e:4e:6e:05:4d:53:f7:59:e7:7d:7f:13:bd:b0:b1:
fb:ec:f6:1e:e4:4c:e4:b3:9f:1a:5e:77:29:87:77:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:C0:D3:B4:EF:D1:8E:50:77:0C:69:8D:CE:6F:49:06:87:80:73
X509v3 Authority Key Identifier:
keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.136.0/22
Signature Algorithm: sha256WithRSAEncryption
82:17:e6:15:bb:28:67:71:96:7c:35:48:78:73:59:21:92:cd:
d2:75:e1:67:ea:03:16:49:11:8b:17:a0:87:e6:8c:86:b3:5b:
38:4e:8f:52:37:f6:f9:bf:dc:b3:79:0e:c2:cf:46:f9:97:8c:
f9:11:78:c8:7e:99:0d:65:21:ac:4e:41:54:4d:43:e1:39:2a:
61:e3:d0:43:cf:cd:30:47:b6:47:3e:98:ad:93:c5:4d:15:5b:
ed:fc:64:64:48:76:b6:1a:97:67:bf:a3:c9:e6:91:1b:83:8e:
ec:05:ca:be:c5:19:4c:5a:cc:e0:17:c0:e4:80:8f:b5:8b:6a:
02:77:6a:39:76:7d:7a:89:74:92:be:42:26:92:89:9e:51:b9:
35:9e:99:44:d7:10:5e:7e:c8:99:a1:1d:bc:7c:1d:20:dc:5d:
bc:59:e0:46:50:1a:05:29:13:43:ca:8f:79:85:21:ed:12:dd:
9e:73:4c:c3:37:72:88:7b:c4:66:b2:33:d3:35:ca:35:54:cf:
cd:9d:e0:e1:6d:bf:1a:17:d4:bf:19:82:fb:eb:13:66:8e:91:
92:fc:86:22:7d:20:37:8e:55:9a:0f:dd:36:7f:69:e1:8c:f9:
da:3a:c1:88:a8:63:c3:8d:4d:ec:dc:ff:55:e4:b6:59:ad:e0:
b6:21:0a:a6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAnfzMRpPi80wVrb/9HxOZ04SAfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMERCMjU4MjBFOTFCQTM1MjhEMTA5QkM0OTdEMzQ4
QUYxQ0M4RTAeFw0yNjAxMDYxOTQxNTlaFw0yNzAxMDUxOTQ2NTlaMDMxMTAvBgNV
BAMTKDM0QTRDMEQzQjRFRkQxOEU1MDc3MEM2OThEQ0U2RjQ5MDY4NzgwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHB+hr38TCEiwqZNEhIZOpVIn
8XugoIORxTpu7ayMQ3USn1RpWTJnMyS3pEMgIC2UXQUZocMN0Ku4S6oEABHxOWfK
kjX4/D44LsqJPoQwr9Br/Uv/NJ8h1HkxdAcDLs7Q2JfMuEPBsHBHYM5WxDnVT6GK
dIMNfwPGOgQSnA3sj088jxHbscH6cNPLYjoXR6pR3fWi4sIZjFUSPNXL/b0EOxzc
tY2vcgSdNmb6Qq+fJEyx91ka+nu9Yx+aHJTfOOhYAxh508KBToYbeqXzzsavzRgk
czn0K+WoAEe85SzVem5ObgVNU/dZ531/E72wsfvs9h7kTOSznxpedymHd+sPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNKTA07Tv0Y5Qdwxpjc5vSQaHgHMwHwYDVR0j
BBgwFoAUzRDbJYIOkbo1KNEJvEl9NIrxzI4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDhGMzYwMEMwODExNjRFRTg3REIwOEVEM0U4QjQ4RDIz
RTE4NjZEQjJBREQyMUE4RkI4OTkxOUIzQjc0QzA1LzAvQ0QxMERCMjU4MjBFOTFC
QTM1MjhEMTA5QkM0OTdEMzQ4QUYxQ0M4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDEwREIyNTgyMEU5MUJBMzUy
OEQxMDlCQzQ5N0QzNDhBRjFDQzhFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ4RjM2MDBDMDgxMTY0RUU4N0RCMDhFRDNFOEI0OEQyM0UxODY2REIy
QUREMjFBOEZCODk5MTlCM0I3NEMwNS8wLzMyMzAzMDJlMzEzMDM4MmUzMTMzMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzYzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyGyI
MA0GCSqGSIb3DQEBCwUAA4IBAQCCF+YVuyhncZZ8NUh4c1khks3SdeFn6gMWSRGL
F6CH5oyGs1s4To9SN/b5v9yzeQ7Cz0b5l4z5EXjIfpkNZSGsTkFUTUPhOSph49BD
z80wR7ZHPpitk8VNFVvt/GRkSHa2Gpdnv6PJ5pEbg47sBcq+xRlMWszgF8DkgI+1
i2oCd2o5dn16iXSSvkImkomeUbk1nplE1xBefsiZoR28fB0g3F28WeBGUBoFKRND
yo95hSHtEt2ec0zDN3KIe8RmsjPTNco1VM/NneDhbb8aF9S/GYL76xNmjpGS/IYi
fSA3jlWaD902f2nhjPnaOsGIqGPDjU3s3P9V5LZZreC2IQqm
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:41 2026 by rpki-client