This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203237393437.roa
File: 3230302e3132352e3134322e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: Q+3fouAiTGCgjaUI78egMEG7M5l5TZX6lNssHlhYZ98=
Subject key identifier: 1A:0B:39:0E:96:B5:F9:D9:D3:2B:FA:09:93:D0:F9:D0:09:58:CE:DE
Certificate issuer: /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial: 17608516C280D5F021B5477AAA30601500531D32
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:27:45 +0000
ROA not before: Tue 06 Jan 2026 19:22:45 +0000
ROA not after: Tue 05 Jan 2027 19:27:45 +0000
asID: 27947
IP address blocks: 200.125.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Jan 2026 12:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:60:85:16:c2:80:d5:f0:21:b5:47:7a:aa:30:60:15:00:53:1d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
Validity
Not Before: Jan 6 19:22:45 2026 GMT
Not After : Jan 5 19:27:45 2027 GMT
Subject: CN=1A0B390E96B5F9D9D32BFA0993D0F9D00958CEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:85:b3:19:10:1f:1e:1d:24:6e:b0:8d:75:
f4:ab:7c:b9:88:3a:3b:4c:67:8f:87:06:28:63:4f:
f3:ec:30:56:f1:d4:2b:90:5f:d2:e2:2d:55:4a:a7:
93:bc:98:bd:7e:0b:bf:13:1b:d5:84:ee:56:9c:34:
73:23:ee:02:22:7f:61:9f:9d:97:0e:7c:97:6f:dd:
05:1a:ba:f7:5a:bc:4f:9b:cb:f4:94:60:d8:bc:81:
68:0c:b6:a3:15:85:92:df:2d:4f:be:a4:cd:69:2f:
4e:e7:9a:3b:26:c9:ae:ab:97:08:96:ee:cb:f3:4b:
e3:98:d6:11:22:98:96:a7:8b:6b:9c:b6:71:da:99:
d1:6b:6d:27:e4:fc:db:5a:d0:dc:a5:09:dc:30:06:
0f:9a:c0:23:f1:e6:a3:71:2e:b7:80:6f:17:d9:0f:
ab:85:e6:4a:db:06:a8:d1:40:1d:9c:d8:46:14:72:
ac:06:cd:83:4d:24:ee:a4:07:d2:5a:f9:b8:7e:b5:
df:4f:96:d5:8e:db:04:ce:0a:71:be:d3:4d:62:c6:
3a:0f:d4:d9:95:90:47:b8:d1:01:a6:a4:aa:04:4e:
ee:db:d0:ff:be:b4:9f:7f:c9:a0:65:90:d4:f9:00:
1d:21:68:8e:a4:30:3f:1b:e2:80:db:b7:e2:0a:a7:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:39:0E:96:B5:F9:D9:D3:2B:FA:09:93:D0:F9:D0:09:58:CE:DE
X509v3 Authority Key Identifier:
keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:82:8a:ec:84:52:c7:c8:76:d2:c9:08:38:9b:6f:52:c9:8d:
61:4d:39:dd:00:15:07:9d:ad:71:0c:57:db:d5:69:d5:60:27:
48:d2:50:2f:83:8e:fd:99:83:76:19:29:64:62:14:5f:59:f1:
fb:98:eb:a3:2e:7b:8a:ab:1b:ce:f3:e0:4a:d7:b3:f0:df:7e:
69:3e:93:a1:44:4f:ed:31:3f:15:ed:bd:95:3c:a1:fc:fc:b0:
a3:79:fa:34:8a:55:c4:8e:2b:c3:de:0c:48:92:35:16:c1:4c:
9c:27:6a:10:36:ba:82:ab:c9:f3:c3:e2:ca:db:e8:b4:82:c2:
c0:6d:a4:3a:18:16:aa:79:f6:cc:0a:f6:5b:ae:c1:75:74:79:
22:38:8f:06:36:56:09:70:95:2f:01:f4:5c:6c:4f:ea:97:9c:
b8:5b:23:d2:94:25:5b:44:57:58:2b:8d:cf:3f:91:0a:ce:69:
ab:02:1d:1b:9c:86:ce:9d:fe:7d:39:b4:5f:a4:aa:e8:9d:2f:
63:80:2e:91:c1:f9:9a:3c:6b:39:15:55:72:d2:69:47:09:66:
1b:42:99:92:30:81:f9:4d:82:f0:e3:a3:29:8c:5d:a6:51:fa:
fe:e7:7c:08:94:09:f9:4a:08:d5:48:dc:22:a5:1f:97:eb:48:
5b:d1:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 14:28:11 2026 by rpki-client