This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/3230302e3231392e35322e302f32322d3234203d3e20323731383135.roa
File: 3230302e3231392e35322e302f32322d3234203d3e20323731383135.roa (raw, json)
Hash identifier: u2r385pZE/FOoFOyAXTXmO5ngRsDjeLDPdc4ab+sLzs=
Subject key identifier: 83:F4:2F:00:D7:CB:4E:9C:C6:6D:97:FD:4C:25:2D:39:33:AA:F4:FE
Certificate issuer: /CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837
Certificate serial: 08A260AACFE456EA4F575530C6780A7E259670E8
Authority key identifier: 68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/3230302e3231392e35322e302f32322d3234203d3e20323731383135.roa
Signing time: Tue 06 Jan 2026 19:05:00 +0000
ROA not before: Tue 06 Jan 2026 19:00:00 +0000
ROA not after: Tue 05 Jan 2027 19:05:00 +0000
asID: 271815
IP address blocks: 200.219.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl
rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a2:60:aa:cf:e4:56:ea:4f:57:55:30:c6:78:0a:7e:25:96:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837
Validity
Not Before: Jan 6 19:00:00 2026 GMT
Not After : Jan 5 19:05:00 2027 GMT
Subject: CN=83F42F00D7CB4E9CC66D97FD4C252D3933AAF4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:6c:9d:0f:9f:0e:db:42:8b:49:33:f7:c7:
23:39:62:a4:00:d5:db:22:7f:ff:27:82:37:c7:63:
df:cc:6a:82:ed:6e:03:46:02:86:93:af:10:28:7f:
8e:86:2e:f1:b6:85:2b:0d:7e:ee:b8:f7:9d:a0:f6:
4d:c8:9b:06:21:8e:70:14:54:51:7f:b6:de:21:59:
b1:e3:ae:8b:06:ae:98:d6:56:d4:68:b8:e1:fb:13:
ab:08:75:5b:71:01:68:c7:a6:00:58:01:6c:63:16:
1a:88:6c:24:fb:a3:bc:4b:55:c0:40:50:8f:aa:48:
0e:00:1a:3b:66:ac:5d:67:00:00:69:eb:2a:08:9e:
dd:18:00:c8:f4:6b:37:da:12:2e:0a:6f:e5:bd:d6:
61:48:92:db:e2:c9:eb:b7:0c:96:34:e2:32:f0:52:
5a:31:52:d0:84:85:b4:c1:d9:95:d8:c3:66:bd:67:
71:cc:b4:46:4f:f9:30:26:13:10:2a:8a:33:7d:86:
3f:6d:60:d8:03:8b:ee:e1:76:48:5b:7d:4a:6b:5b:
98:b8:b2:c4:23:13:92:1b:85:dd:9b:be:22:5b:c1:
7e:07:fc:67:f1:40:1d:22:b5:c7:e1:4c:9d:2c:a3:
4f:e3:bc:59:73:bb:cb:2c:47:1e:c1:89:3e:d6:c7:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:2F:00:D7:CB:4E:9C:C6:6D:97:FD:4C:25:2D:39:33:AA:F4:FE
X509v3 Authority Key Identifier:
keyid:68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/3230302e3231392e35322e302f32322d3234203d3e20323731383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d8:46:81:b5:68:f6:85:d4:33:91:a6:ac:6d:b7:f9:c5:57:
06:a9:02:48:7d:48:43:ba:3e:0a:1d:1d:3b:00:ce:48:db:f1:
f3:35:a8:5a:f3:ad:5f:99:97:b3:79:bf:32:ff:b5:0b:2d:0c:
46:8d:b1:e2:cd:17:31:ce:f1:3f:cb:4b:88:78:d9:4b:b4:6b:
07:7d:28:b1:39:85:12:30:49:e3:16:6b:be:fb:be:9d:ad:06:
c0:10:b6:34:f4:c8:b7:b2:62:5f:69:d8:02:f8:5e:69:2d:0b:
4b:97:db:d9:ed:f0:33:c8:9c:14:ad:e9:ce:6b:40:38:7d:fd:
e9:b2:50:2e:ba:cf:82:28:6c:d8:8f:97:25:fe:1f:ab:34:7b:
5a:9e:e4:ad:c4:d7:12:ab:91:79:6d:d8:7c:cf:0e:56:05:2c:
bb:72:21:87:ef:8f:69:0e:16:0a:67:40:9e:13:c4:f0:41:cb:
12:21:a9:6e:86:05:a3:b5:6b:b7:7c:2d:cc:c8:85:e9:e7:23:
85:a6:72:a9:b6:76:b0:6a:13:34:f5:6e:e3:60:0f:f4:d2:07:
f0:01:4c:56:67:c7:77:0f:49:b9:3a:9c:da:c0:d5:44:26:e8:
19:9c:49:0f:b1:97:95:67:af:1c:34:86:f1:16:3e:a6:0e:0f:
3f:c0:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 14:37:17 2026 by rpki-client