This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa
File: 3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa (raw, json)
Hash identifier: lH1mtDDfg4wBEFzPNmnAqWzPrVYENN3ZxPFWoGr2K94=
Subject key identifier: 4D:5E:2D:B3:82:53:7C:EC:9A:5F:C7:F8:E9:65:68:F1:BB:6C:55:45
Certificate issuer: /CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Certificate serial: 11D1A49BCA799AF1F7677D97888178E896F80E43
Authority key identifier: 3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa
Signing time: Tue 06 Jan 2026 19:37:46 +0000
ROA not before: Tue 06 Jan 2026 19:32:46 +0000
ROA not after: Tue 05 Jan 2027 19:37:46 +0000
asID: 264778
IP address blocks: 200.59.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d1:a4:9b:ca:79:9a:f1:f7:67:7d:97:88:81:78:e8:96:f8:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Validity
Not Before: Jan 6 19:32:46 2026 GMT
Not After : Jan 5 19:37:46 2027 GMT
Subject: CN=4D5E2DB382537CEC9A5FC7F8E96568F1BB6C5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:7d:31:4b:d0:3b:ec:93:e6:f8:e0:0e:5b:
dc:7b:90:ab:61:2a:65:90:cc:d4:8b:27:9b:fd:7f:
78:dc:53:a0:e5:1c:20:5d:28:20:05:12:28:ea:7d:
61:aa:ad:59:e8:73:04:5f:e2:e4:cd:0b:f0:09:fe:
6c:90:12:c5:1c:61:ab:e0:4e:52:8a:ab:23:ea:3b:
8f:a5:98:b7:48:35:70:18:9e:7a:96:5f:97:e1:36:
df:17:44:58:c9:e0:0a:92:82:58:08:ff:d2:4c:27:
2a:3a:0a:d7:ce:60:4b:18:cc:8c:2d:e7:0e:42:e5:
99:7a:24:f8:2a:1b:b2:70:6f:1a:b2:8e:1f:f6:99:
6f:01:72:6f:ff:79:ba:c2:bc:01:9b:49:2b:c8:bb:
9f:9e:58:f7:93:84:bd:f7:80:60:08:81:71:4e:3e:
a0:9f:5a:7b:b6:ad:17:30:0c:62:b6:00:93:f5:bc:
8b:1b:4a:b8:2f:e0:7a:22:d2:b4:7f:f1:ac:1d:f2:
a4:30:27:9e:ec:fc:16:49:00:55:b2:a6:42:f8:94:
e9:36:cd:29:f8:61:ad:66:19:4e:d7:12:fb:38:5c:
22:c6:d9:d1:5c:f0:50:19:a4:fe:c7:2f:3e:ba:83:
f3:5f:24:75:b0:8c:7d:ae:63:5f:ed:e5:0e:6d:47:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:2D:B3:82:53:7C:EC:9A:5F:C7:F8:E9:65:68:F1:BB:6C:55:45
X509v3 Authority Key Identifier:
keyid:3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3230302e35392e3138342e302f32312d3234203d3e20323634373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.184.0/21
Signature Algorithm: sha256WithRSAEncryption
69:70:dd:96:6c:0e:90:f8:aa:b9:da:62:56:15:93:e9:06:38:
ba:cd:ca:d2:5c:00:56:16:00:e3:f3:fc:25:ed:cc:7d:89:7a:
e7:48:38:07:b8:a4:a5:3d:02:fb:ba:de:44:95:30:a3:ae:3c:
29:c1:69:e7:37:1c:01:11:e9:9f:d0:a2:bd:d4:c4:19:0d:47:
6f:ce:11:49:73:be:fa:ba:06:a6:b2:25:6f:9c:a5:72:4f:d9:
71:b8:f7:7b:7e:96:c8:6f:9b:fa:74:15:4c:3b:0e:de:df:93:
72:13:e2:21:7d:6c:74:6e:cb:f4:a9:97:90:33:54:83:2d:e8:
e6:40:07:f5:bf:69:30:ba:f6:9b:fa:ed:73:7c:6c:c3:fe:94:
ba:27:c4:15:56:30:bf:5d:2c:2e:c4:31:23:13:d0:84:71:88:
d9:ad:af:96:8b:94:d2:93:06:4c:b7:1d:a5:28:a8:6d:76:2a:
bf:5b:54:62:22:ab:cf:4e:46:f4:12:44:f7:41:1e:a2:fa:10:
86:79:8f:02:62:d9:5d:ca:05:ed:c2:52:1b:23:34:f9:48:2d:
75:34:93:88:f1:bc:b1:dc:55:81:b3:5c:3f:3f:53:e9:ab:b7:
1c:90:a7:b4:ca:3d:b7:a0:50:af:c0:55:84:6f:74:8d:88:21:
33:ac:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:14 2026 by rpki-client