This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa
File: 3230302e372e3135362e302f32322d3232203d3e203532333939.roa (raw, json)
Hash identifier: IOM795N/h0Wf0FisESTfOh0YeraYUcITgIDnKavTPG0=
Subject key identifier: CB:CE:5E:1F:89:09:71:6F:D5:21:8E:45:23:16:12:89:48:88:CE:AD
Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial: 2E6E07FFBDADC0F2228147FA7D9BD15AB3D355B0
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa
Signing time: Tue 06 Jan 2026 19:30:07 +0000
ROA not before: Tue 06 Jan 2026 19:25:07 +0000
ROA not after: Tue 05 Jan 2027 19:30:07 +0000
asID: 52399
IP address blocks: 200.7.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 20:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6e:07:ff:bd:ad:c0:f2:22:81:47:fa:7d:9b:d1:5a:b3:d3:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Validity
Not Before: Jan 6 19:25:07 2026 GMT
Not After : Jan 5 19:30:07 2027 GMT
Subject: CN=CBCE5E1F8909716FD5218E45231612894888CEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:b8:0b:1d:7b:56:68:cb:31:c5:92:3d:da:
e5:6d:dc:e7:f2:92:8a:9f:53:8b:9d:87:cb:d1:71:
76:f0:85:d2:01:e8:f0:46:2a:2f:15:55:69:40:56:
e9:52:97:7f:f8:eb:19:bb:2f:d1:19:a1:8e:7c:3b:
03:8c:f4:c4:b0:65:a9:70:15:ac:57:7d:f8:0d:94:
0f:e2:8c:7a:a1:8f:0f:bf:6c:9c:89:55:5e:49:27:
94:df:b3:63:b7:31:ff:a6:3b:a3:df:6e:07:97:64:
0f:d0:43:99:67:96:db:a6:e8:ba:80:64:80:56:22:
fc:ff:0d:9a:4a:c6:ef:ce:41:03:c4:45:af:c6:15:
af:23:0d:ba:f8:1e:20:6d:3a:cc:b4:cb:74:e4:61:
12:09:97:f3:61:99:1e:11:fd:51:af:9f:f5:e0:19:
46:54:ec:cc:ba:d5:d2:30:a7:c3:a3:6b:9e:6a:5b:
af:23:53:4b:88:da:2e:ec:a2:00:dc:c0:e9:34:fb:
8c:8a:fa:b2:51:07:48:07:e0:a3:19:4e:ea:39:52:
af:47:59:51:f9:bc:33:de:ec:73:f5:df:61:cb:73:
98:ee:81:40:dc:d2:bd:dd:5b:3a:02:ee:d2:2e:07:
fe:7b:f7:ab:8c:2c:49:f3:67:e5:18:24:80:24:a1:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:5E:1F:89:09:71:6F:D5:21:8E:45:23:16:12:89:48:88:CE:AD
X509v3 Authority Key Identifier:
keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:8a:08:1c:53:52:a6:a3:2d:09:26:1a:3d:6d:46:6d:5d:4a:
07:7d:ec:4d:57:b4:79:0c:7c:1e:0a:c1:e4:aa:0f:ab:6e:af:
c2:95:f3:dc:71:ac:41:cb:d3:ee:98:b8:85:a1:ee:08:dc:5c:
73:22:52:83:b3:23:ba:5f:f6:90:71:f4:eb:31:13:42:62:f6:
f8:7d:7e:ab:99:04:f3:a3:dd:31:65:ee:f8:91:2e:16:07:6e:
7f:fa:a6:06:4e:3b:76:58:89:57:af:65:56:f7:a7:13:49:77:
b6:b3:81:fc:0e:8e:94:73:54:2e:20:09:f3:58:0a:46:6f:7e:
7e:df:b0:a1:1a:a4:e7:36:53:f1:c1:63:9a:a9:5b:c9:f9:d7:
fe:d0:fe:9a:97:c5:f5:3a:7d:5b:08:2f:10:93:ad:25:63:08:
ec:0e:b8:cb:fd:4a:eb:51:61:8e:47:69:98:af:b8:e1:b5:ad:
79:b9:dc:1b:4e:c0:61:cb:89:bb:03:8d:20:60:50:5b:0b:31:
2a:1f:73:d8:f8:19:91:e8:25:6c:06:77:86:1d:05:38:16:ad:
28:44:06:ea:ec:3f:b3:a6:6b:de:71:ee:a4:e7:4d:01:0c:d5:
25:08:0a:c5:1f:d9:25:85:50:d0:6c:84:90:be:1c:f5:eb:30:
b2:05:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 11:31:22 2026 by rpki-client