This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
File: 3230302e39312e36342e302f31382d3234203d3e20323032.roa (raw, json)
Hash identifier: hEnNjmyzxI0q6yUlSo+ColLZzdDLVtPfl5iEpCftE0s=
Subject key identifier: B6:15:2D:07:A6:96:94:C0:42:9B:5F:7C:35:ED:E4:DC:DB:59:D2:90
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 27551D7E7EE9E2259C3240C9DF4D2BEAFA87C49C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
Signing time: Tue 06 Jan 2026 19:30:45 +0000
ROA not before: Tue 06 Jan 2026 19:25:45 +0000
ROA not after: Tue 05 Jan 2027 19:30:45 +0000
asID: 202
IP address blocks: 200.91.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:55:1d:7e:7e:e9:e2:25:9c:32:40:c9:df:4d:2b:ea:fa:87:c4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:45 2026 GMT
Not After : Jan 5 19:30:45 2027 GMT
Subject: CN=B6152D07A69694C0429B5F7C35EDE4DCDB59D290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:7c:89:8e:53:d6:70:72:80:03:bd:74:16:
e9:38:2f:95:4a:26:3e:f0:f5:c6:bd:10:bc:94:49:
8d:b0:3f:1f:31:db:0e:a6:bc:d7:70:d6:44:75:05:
52:10:a0:43:71:02:12:99:7f:0f:60:20:b4:d9:c2:
28:af:13:c4:bd:c4:67:dc:a7:da:c1:d1:fd:a5:35:
8f:bb:ac:ad:ba:10:f5:35:59:4a:34:33:ff:ee:52:
12:14:dc:54:a6:11:45:37:c7:67:36:54:51:ca:59:
ef:f1:aa:1c:35:e1:02:f1:ac:1b:c9:74:3b:a6:c3:
10:18:92:9e:57:73:a4:ea:a5:08:26:ba:4a:cf:9d:
5b:7f:29:97:56:7f:2f:5c:b8:b1:0a:4f:28:57:7f:
5e:3b:72:ee:61:f4:a5:c5:b6:a6:74:77:95:1e:c0:
0e:d5:03:ab:a8:65:a9:b1:f5:8b:da:e2:65:ce:03:
6e:8e:26:77:68:70:2e:2d:19:85:eb:4a:a3:15:16:
ce:87:c6:00:4e:a2:91:f6:80:ed:50:00:c4:3f:3a:
a6:fc:b9:55:c5:94:1c:b8:67:17:18:e0:58:8a:1f:
91:7a:93:30:f9:e6:25:9c:ec:bd:d4:d1:a3:94:16:
18:fd:2b:32:3a:14:e3:13:e5:45:e8:94:c6:19:ba:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:2D:07:A6:96:94:C0:42:9B:5F:7C:35:ED:E4:DC:DB:59:D2:90
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:78:a0:07:ee:7c:d1:51:51:72:db:96:00:96:f2:43:cf:fa:
9f:1a:ec:30:61:5a:be:c0:64:af:3b:11:3f:9e:b9:78:e1:a2:
db:1b:7b:be:10:10:c0:88:d2:fb:7f:c2:ef:fa:94:11:5f:b2:
c1:ad:f8:95:ba:77:8b:82:fd:26:97:8e:a3:2a:45:ea:8f:90:
3b:28:b3:e3:39:2a:1c:28:8a:52:1d:a0:e1:ee:8b:90:fc:57:
33:58:30:6f:8b:ae:7e:66:e9:57:42:c4:5d:92:f9:be:43:c8:
44:a7:cd:f2:65:95:93:ea:2f:42:ba:1b:36:a9:b9:7b:fc:c8:
7d:9e:7f:4f:fa:89:8d:95:26:9a:28:91:ce:f8:af:b0:f0:d7:
4d:69:cd:4b:8c:45:3c:14:6d:b5:7a:89:16:2d:0e:e7:c9:fa:
7b:c2:b0:5d:e7:29:43:4d:72:e4:a2:48:bc:0c:64:cf:a5:a6:
f4:be:f9:68:29:06:30:28:72:ae:e5:15:2b:19:a3:38:81:68:
98:0f:48:eb:19:ba:8c:1b:73:d7:84:f7:8d:ff:1d:f2:06:80:
e5:44:39:07:a2:d3:f4:91:4f:8e:e8:ab:aa:fd:9b:6c:e0:1b:
b7:44:b5:c2:31:ba:ee:b4:77:a9:f8:34:eb:62:d4:e6:00:02:
2f:8f:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:37:34 2026 by rpki-client