This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234302e302f32342d3234203d3e20323633313734.roa
File: 3230302e32392e3234302e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier: 4i66fL0k/LQzoegGVvS1j+7fQsQImUpaQ9d34Mz0+2s=
Subject key identifier: 39:2F:83:AA:B7:AB:88:B3:39:A7:F1:17:29:F0:C9:E9:11:F2:FF:3A
Certificate issuer: /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial: 3502B7FF0AC6AD4307DF2F517E54627C958DA0D9
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234302e302f32342d3234203d3e20323633313734.roa
Signing time: Tue 06 Jan 2026 19:42:26 +0000
ROA not before: Tue 06 Jan 2026 19:37:26 +0000
ROA not after: Tue 05 Jan 2027 19:42:26 +0000
asID: 263174
IP address blocks: 200.29.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 23:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:02:b7:ff:0a:c6:ad:43:07:df:2f:51:7e:54:62:7c:95:8d:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Validity
Not Before: Jan 6 19:37:26 2026 GMT
Not After : Jan 5 19:42:26 2027 GMT
Subject: CN=392F83AAB7AB88B339A7F11729F0C9E911F2FF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:4e:97:a9:b7:54:1f:c8:27:71:75:58:9b:
25:fa:78:81:0d:46:1d:02:d9:5e:55:27:2a:19:bb:
71:ea:b3:7f:06:4a:9e:a8:1c:13:7f:19:4a:8a:bd:
20:0e:46:fd:0b:9c:f8:f7:c8:ee:0f:fd:5b:80:fc:
87:3f:d1:81:2b:73:ed:2c:25:4f:db:1a:6b:60:6e:
d6:ef:67:83:12:69:c9:4c:08:ab:40:d2:6c:40:f4:
0e:a3:98:bd:b5:eb:97:f0:fa:1d:8d:38:81:26:f4:
7f:8b:06:e2:4d:6e:61:9b:d5:e7:31:75:dd:e8:33:
65:27:fc:b0:14:d9:0f:a1:9a:20:78:9c:22:89:f0:
27:d9:3c:ed:4f:ae:a4:63:e0:d3:ef:dc:b8:d6:6b:
7d:10:7a:a9:7f:d4:33:6b:ac:fd:2d:ec:72:e6:ad:
c8:2d:51:44:55:e1:56:58:e0:6e:a2:48:a1:12:f5:
88:c1:d7:10:f5:61:5e:e0:c6:03:24:33:cc:51:b6:
a6:3e:af:cb:34:c4:a3:cb:32:f6:69:ad:75:cc:f7:
f6:74:81:4a:26:7d:94:40:18:0c:ac:29:28:1c:0e:
f4:12:85:7d:d0:59:66:26:5b:7c:b3:36:f5:4a:f6:
1b:45:59:6d:b3:bc:19:0e:63:8a:47:fa:a7:bb:be:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:83:AA:B7:AB:88:B3:39:A7:F1:17:29:F0:C9:E9:11:F2:FF:3A
X509v3 Authority Key Identifier:
keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234302e302f32342d3234203d3e20323633313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.240.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c9:9b:14:74:aa:c7:65:71:27:b0:77:a6:96:d2:c7:51:a3:
2a:85:e6:23:a6:84:a0:30:34:65:e6:3a:fe:56:6a:be:64:85:
a8:1e:bd:d6:44:40:60:32:78:72:68:5b:0c:d8:85:4e:47:29:
86:19:50:98:57:b2:43:62:66:81:cd:36:32:5d:86:b8:9b:2d:
a1:4c:3d:be:1e:5a:e7:d1:30:f5:aa:9c:fd:11:48:90:f3:cb:
cf:fb:32:b6:6b:a8:38:63:65:47:20:03:bf:25:9b:f9:85:3f:
bf:3c:5b:df:3a:54:00:59:ca:c3:5c:f7:4c:e1:31:43:61:c6:
29:c5:2d:cf:4d:06:6c:b2:21:db:bd:df:46:38:e5:9f:c3:c5:
c7:61:73:88:8b:30:16:99:16:87:3a:71:13:0f:dc:bc:94:b7:
13:58:2d:62:7f:12:be:c6:50:70:86:83:cb:3e:b7:98:a2:b3:
8b:1c:ec:74:49:13:16:d0:72:fa:d9:ee:6d:05:16:e4:d2:4c:
4e:23:ad:2a:2f:ad:0e:79:62:c1:cc:f3:41:75:f9:7c:06:40:
d1:c2:a3:4a:d5:74:89:52:c8:3d:1b:a3:bb:91:b8:83:ae:a0:
10:42:5d:00:40:fc:44:b5:64:e6:cf:09:41:9a:e0:24:2b:6f:
1d:da:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:32:32 2026 by rpki-client