This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3234302e302f32302d3234203d3e203232393237.roa
File: 3230302e36382e3234302e302f32302d3234203d3e203232393237.roa (raw, json)
Hash identifier: amegDsZtvmSAbrlyRJWQq0h+i+FD/2ybZNGdccc27K4=
Subject key identifier: 22:50:02:08:16:47:33:E2:15:24:32:42:A4:64:A9:3F:33:1C:FA:40
Certificate issuer: /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial: 49C0E50E518FFC2727D905C1BE3F97A26661EDAB
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3234302e302f32302d3234203d3e203232393237.roa
Signing time: Tue 09 Dec 2025 17:54:25 +0000
ROA not before: Tue 09 Dec 2025 17:49:25 +0000
ROA not after: Tue 08 Dec 2026 17:54:25 +0000
asID: 22927
IP address blocks: 200.68.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c0:e5:0e:51:8f:fc:27:27:d9:05:c1:be:3f:97:a2:66:61:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Validity
Not Before: Dec 9 17:49:25 2025 GMT
Not After : Dec 8 17:54:25 2026 GMT
Subject: CN=22500208164733E215243242A464A93F331CFA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:c5:08:6d:e5:0c:d4:fa:80:b9:a8:c8:83:
c9:fc:b3:3e:c6:62:e5:a5:1d:be:ad:cd:18:c8:83:
80:fa:95:27:5b:29:dc:dd:98:bd:b3:61:f6:80:1f:
9c:8e:9b:12:5a:b0:b4:77:b6:71:a1:00:0b:86:d9:
dd:7f:5b:28:b5:dc:e5:99:78:39:3c:07:0d:5b:83:
3e:80:21:0b:05:53:ae:05:60:3b:65:44:9b:c2:68:
f8:50:32:09:1b:52:65:d2:1a:fa:ac:c9:2f:1b:e9:
27:a3:0d:be:7b:94:f6:3e:b2:d7:b9:dc:fb:3d:3f:
f0:73:ae:59:0e:af:44:36:66:4a:ed:be:86:67:7f:
9b:73:84:9d:e6:f7:7a:e9:96:78:40:00:eb:42:9c:
c6:ee:ab:71:45:32:0b:25:e9:f9:8e:32:57:31:8a:
0b:cf:52:57:34:7f:d8:f0:0f:e0:e1:91:e6:26:26:
68:b8:22:b8:29:11:ee:29:f8:3b:1f:55:50:be:94:
6e:9e:52:76:83:8f:00:03:b7:1f:6a:32:1a:f3:2d:
d5:c1:a5:72:24:91:4c:98:bb:5a:4c:96:b5:a2:9a:
9f:11:de:f2:75:5f:49:02:a0:87:f9:bc:24:50:01:
7a:5c:c4:28:23:0b:d5:8d:79:ef:cd:7b:a3:67:5b:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:02:08:16:47:33:E2:15:24:32:42:A4:64:A9:3F:33:1C:FA:40
X509v3 Authority Key Identifier:
keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3234302e302f32302d3234203d3e203232393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:1d:f4:3a:bf:6e:21:00:53:b5:98:1e:77:24:ac:1a:3a:3e:
8f:b0:39:3c:92:57:43:20:02:07:0a:19:2d:d8:0d:8e:e3:c3:
43:b2:df:5b:e1:7f:f9:ad:6c:47:4e:ac:13:55:0d:b9:00:23:
5b:7d:a6:7b:0a:0b:ef:38:ce:ea:41:a7:b0:f3:53:40:40:07:
43:79:a4:f9:14:0b:c1:41:83:8b:15:0f:e6:60:1b:d0:8c:f1:
f1:74:aa:0c:76:fa:41:57:47:00:0d:1d:0b:2e:84:90:40:a2:
4f:23:cb:6f:db:b2:db:6b:13:70:02:04:87:9b:2f:1b:a6:af:
12:d3:e7:0b:50:ae:f5:17:07:dd:76:a1:e7:fc:18:9f:7d:42:
78:62:3c:f6:1e:f0:0c:30:8e:28:a4:f8:bb:78:ad:2f:16:a3:
83:db:5a:a5:ce:aa:e4:5f:10:ad:17:a1:e4:e3:2b:40:1d:c4:
57:11:45:31:4c:a9:d3:da:2e:1e:8f:4f:73:86:50:f2:15:6a:
9d:1b:5e:06:bc:75:6c:33:16:91:6b:35:e6:b1:0b:44:fc:d2:
32:c2:3e:c0:e0:4d:50:ad:c5:3c:1a:34:29:bf:e6:a2:e3:55:
86:b3:26:49:5c:8e:d7:84:40:a6:83:54:ee:75:92:34:ee:0f:
cb:13:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:41:53 2025 by rpki-client