This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa
File: 3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa (raw, json)
Hash identifier: ne4eonugOYXagt2xE7aRj/XinFvu7pvl2E6SleToRN4=
Subject key identifier: 18:02:BC:64:99:B7:A4:B0:25:E8:A3:63:A7:1C:57:32:03:A9:A5:7D
Certificate issuer: /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Certificate serial: 64B473D4A9FE0121D386C85DDD21D7539E6F47CC
Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa
Signing time: Tue 06 Jan 2026 18:58:30 +0000
ROA not before: Tue 06 Jan 2026 18:53:30 +0000
ROA not after: Tue 05 Jan 2027 18:58:30 +0000
asID: 264630
IP address blocks: 200.106.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl
rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b4:73:d4:a9:fe:01:21:d3:86:c8:5d:dd:21:d7:53:9e:6f:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Validity
Not Before: Jan 6 18:53:30 2026 GMT
Not After : Jan 5 18:58:30 2027 GMT
Subject: CN=1802BC6499B7A4B025E8A363A71C573203A9A57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:82:ab:7b:ce:df:d9:f2:91:b9:19:7a:db:
ab:6d:fc:aa:64:bd:e1:8b:cb:dd:92:d1:41:12:43:
33:26:b7:12:c1:8a:fd:be:9c:3b:8d:36:a6:7a:05:
ce:f8:8b:0b:9d:bb:72:75:42:5b:33:e8:30:49:49:
71:e9:48:b0:69:05:d2:73:bf:a2:60:c5:ca:bd:f2:
1f:5c:fe:ae:18:b8:74:0d:73:e6:59:d2:c9:d1:a5:
42:8d:49:66:f7:dd:5f:eb:ad:14:26:d1:11:0a:7a:
d6:0e:7c:76:b2:ce:bd:e7:97:32:6b:3e:bc:1d:d2:
b4:bb:2e:7a:09:e8:83:36:21:3d:80:fa:06:1a:ef:
ec:78:5c:94:0d:dd:1c:7a:ef:bb:fe:90:05:ab:e1:
e1:14:5a:93:cb:b3:14:3e:b2:76:3d:0d:52:37:4f:
b0:84:f4:80:10:36:c1:eb:2f:91:02:a3:e6:98:15:
3a:c9:2b:42:d4:99:ab:a9:7b:3d:40:61:7e:e4:eb:
a7:99:cb:a0:96:0b:43:52:20:b4:84:88:ac:02:81:
df:42:c6:9f:37:92:6e:0d:04:e9:5f:ce:14:c6:21:
04:23:5a:73:12:a0:18:e1:66:52:11:c1:fc:e2:a3:
db:db:3e:c2:e9:20:89:80:e5:eb:9a:d3:cf:bd:50:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:BC:64:99:B7:A4:B0:25:E8:A3:63:A7:1C:57:32:03:A9:A5:7D
X509v3 Authority Key Identifier:
keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.248.0/21
Signature Algorithm: sha256WithRSAEncryption
36:91:98:75:a9:8f:e0:91:6e:d7:48:38:2c:d3:15:18:c1:01:
c6:7a:19:d8:3c:bc:cd:76:79:38:a4:d9:7a:f2:6c:fb:7d:63:
8d:aa:34:dd:e7:d7:10:27:f2:dc:80:5e:28:14:50:ee:0a:ca:
6d:da:ae:7a:ea:fb:62:73:87:70:eb:4a:df:38:b1:f0:df:28:
43:ab:2e:42:d1:69:21:54:09:6e:b1:d3:b6:fe:7d:39:75:83:
a5:03:13:32:b8:62:77:b5:85:30:6e:03:72:17:d6:cc:e0:1e:
32:b9:92:e8:19:a7:a6:97:f4:a6:fb:90:54:a1:5b:95:aa:81:
5d:94:f7:74:b5:bb:cf:4c:59:bb:97:fb:fc:a7:28:d9:49:99:
63:16:08:e6:86:77:1c:2d:bb:e8:4d:47:17:ac:96:0d:a9:bc:
7f:8a:8b:03:ff:3a:28:c1:ab:74:cc:08:8d:26:32:81:fa:e9:
ed:2a:25:5f:f2:06:e3:ae:1d:e4:23:ba:45:de:ad:02:7a:bd:
a9:22:c2:8c:39:6d:4a:6d:b0:c9:49:f1:a2:f7:a8:55:ad:85:
21:2a:0a:5f:98:39:ba:75:27:c9:5f:69:05:db:c9:91:da:63:
f0:34:6e:ae:fc:da:30:0d:45:d9:6c:e2:e8:45:c5:64:22:a4:
8b:b0:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:47 2026 by rpki-client