This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa
File: 3230302e33332e3132352e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier: bKzzXBKQdOxi+bgb5vVd4hquZkyHjq/EylH1sDH6ff4=
Subject key identifier: C5:E3:EE:22:1C:83:B8:E8:88:45:CC:0A:51:1C:03:D9:CA:4A:26:9D
Certificate issuer: /CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
Certificate serial: 20DC2DE8883DFD8998DDD9C7793121148B0EAF1E
Authority key identifier: 43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa
Signing time: Wed 28 Jan 2026 12:30:00 +0000
ROA not before: Wed 28 Jan 2026 12:25:00 +0000
ROA not after: Wed 27 Jan 2027 12:30:00 +0000
asID: 11556
IP address blocks: 200.33.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl
rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:dc:2d:e8:88:3d:fd:89:98:dd:d9:c7:79:31:21:14:8b:0e:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
Validity
Not Before: Jan 28 12:25:00 2026 GMT
Not After : Jan 27 12:30:00 2027 GMT
Subject: CN=C5E3EE221C83B8E88845CC0A511C03D9CA4A269D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:c4:e8:a1:64:8c:72:15:34:1a:13:25:a1:
91:5f:3b:2c:2a:47:b9:6e:23:05:54:4b:ed:0f:19:
94:9b:c9:90:96:e2:06:3f:82:0f:a9:ad:2f:b2:a7:
68:d3:ba:b5:35:c6:8d:d0:81:c1:6b:55:b1:66:6b:
e9:4b:0e:b0:0a:84:f4:69:9a:37:11:06:be:91:51:
9e:b8:03:3d:c6:93:21:98:8d:a5:d4:5e:61:a7:fa:
7d:45:a4:2c:84:3b:b9:68:eb:4d:60:f5:cf:ff:35:
d3:56:2e:53:4a:6e:7b:2f:3a:0d:55:01:a3:37:18:
c2:bc:e6:04:71:a7:c1:1e:50:ed:00:a0:7f:3e:89:
4f:f3:6c:36:85:5b:43:5d:06:03:78:af:3d:0e:3a:
5a:b7:5e:bc:85:df:ea:94:8e:8b:50:32:45:d0:68:
b2:1d:2c:63:98:9b:02:a9:ea:92:91:13:e5:07:77:
ea:1c:a0:68:cc:0f:d8:9a:0d:6d:d3:f2:5d:1f:c9:
7e:ad:e7:51:0e:c1:ee:d1:e5:3d:8e:c1:11:59:0f:
89:1f:6f:06:70:38:1d:2f:6a:25:cf:eb:ca:83:6a:
99:96:81:e0:b6:0c:13:b4:f9:b6:f1:9a:20:35:04:
65:c8:f9:22:cc:7f:a4:e2:65:bd:fa:50:28:ff:46:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E3:EE:22:1C:83:B8:E8:88:45:CC:0A:51:1C:03:D9:CA:4A:26:9D
X509v3 Authority Key Identifier:
keyid:43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:44:f0:b0:ae:cd:c8:1e:a3:e3:52:01:4b:7b:ce:cc:f6:07:
6d:46:6f:84:78:b1:34:a0:c2:7f:37:46:6d:0a:c3:60:f5:07:
fa:70:fc:88:3b:4b:31:77:2d:dc:73:1b:c6:65:8c:fa:fa:8e:
98:32:7b:03:2f:e7:dd:57:78:c2:14:9e:fb:ed:c7:5d:f7:12:
d2:ef:32:5a:04:e9:6e:7f:6e:2b:06:31:c1:22:88:8a:80:8f:
f1:ca:50:81:95:5b:c6:8d:c0:bc:72:22:db:f2:2b:1f:7a:b4:
66:74:66:e5:41:a1:49:28:b3:6a:d7:f8:25:f1:af:cf:32:03:
a5:1a:ae:98:8b:2d:75:18:6f:33:90:e9:ac:4d:21:74:f1:56:
2a:7f:84:ef:1c:09:b0:b0:eb:7b:cc:e3:9f:17:2a:92:fc:5a:
da:d3:1d:a2:94:c1:6c:6e:f2:ff:08:05:6d:74:34:f6:fb:7d:
56:b1:46:fd:66:bc:92:8e:20:0a:6a:8b:b4:98:32:2f:99:1d:
81:0d:88:98:07:7d:97:e4:d2:38:dd:79:ef:fc:33:ae:6e:bb:
d0:6d:79:cb:09:d5:f5:ba:10:5e:8e:4a:4c:6c:b9:32:45:7b:
09:35:9b:77:d7:fb:ae:90:fa:9f:6d:dd:f7:d9:5a:3f:ab:c1:
dd:23:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:27:20 2026 by rpki-client