This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
File: 3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier: T0L2na1WrTIRsDYz0jfRNdq53Q7JA+xDBRZFsSPAgRY=
Subject key identifier: FF:70:17:4C:28:BB:60:D4:E1:1C:C6:6C:2A:FF:A8:D5:56:69:71:5F
Certificate issuer: /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial: 3346541CF8213508A81AADBB51F01E38035DE870
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
Signing time: Tue 06 Jan 2026 20:58:12 +0000
ROA not before: Tue 06 Jan 2026 20:53:12 +0000
ROA not after: Tue 05 Jan 2027 20:58:12 +0000
asID: 19905
IP address blocks: 200.10.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 24 Jan 2026 02:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:46:54:1c:f8:21:35:08:a8:1a:ad:bb:51:f0:1e:38:03:5d:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Validity
Not Before: Jan 6 20:53:12 2026 GMT
Not After : Jan 5 20:58:12 2027 GMT
Subject: CN=FF70174C28BB60D4E11CC66C2AFFA8D55669715F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:31:7e:e8:44:39:ff:a8:61:4e:09:64:62:
6d:7e:9f:0a:be:9a:e7:7b:ab:fe:2a:e6:53:66:e0:
7f:20:06:71:b5:59:7a:6d:e0:a1:9b:6b:33:0f:8a:
91:d0:62:8f:7f:ea:d4:a7:6b:db:15:30:8d:40:67:
6e:fc:9d:8e:01:a5:d9:7e:c7:7d:4c:fc:35:23:d4:
0c:24:de:ef:b9:19:25:69:27:04:b5:76:b4:32:50:
7f:22:98:b6:48:b1:0f:7d:91:cc:93:41:bb:40:57:
bc:10:2b:1d:72:d8:52:83:20:f5:fa:4d:07:5e:8c:
16:90:b9:13:71:49:9e:dc:9d:94:d3:b7:67:2d:98:
89:e8:fd:c1:36:35:c2:6b:32:ab:44:9b:3b:8a:47:
3b:09:fa:2e:30:be:33:81:6a:b4:c9:db:6b:7a:08:
45:81:62:c0:c2:11:6e:31:d7:d6:d4:f8:e3:d2:ff:
b1:48:2b:0a:16:c1:80:19:b6:76:94:e1:fc:18:33:
6b:cf:3f:cb:f0:ec:25:be:b8:78:d1:b4:e7:f8:5a:
b8:d3:1d:ef:f0:52:8f:0c:39:52:c1:25:39:21:89:
a7:99:56:fd:85:d1:f7:65:2b:c1:04:c2:5f:a3:87:
7a:e1:ab:f7:65:ef:ce:6e:28:21:01:42:c5:00:7e:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:17:4C:28:BB:60:D4:E1:1C:C6:6C:2A:FF:A8:D5:56:69:71:5F
X509v3 Authority Key Identifier:
keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.156.0/24
Signature Algorithm: sha256WithRSAEncryption
24:62:25:fc:be:eb:a2:1f:fd:fd:85:96:0c:04:f6:79:59:4b:
27:ff:dc:09:45:02:73:53:2a:29:47:4a:4d:50:38:93:5e:1f:
79:41:ea:40:08:40:b9:8a:04:97:a4:c1:25:0a:6f:38:ca:77:
9b:fb:bd:85:2c:1d:37:a4:89:18:3c:43:af:a6:a2:38:55:b0:
bc:f3:29:9d:ea:26:6f:f8:09:d8:10:cc:cd:25:bc:4e:1f:44:
48:08:ff:b1:88:72:d5:11:92:9b:3d:cd:39:8a:d6:6b:e3:e0:
83:ae:42:4c:dc:b1:96:88:6d:a2:23:a4:27:12:bb:ae:a7:c9:
03:fb:c0:28:e3:c2:a9:d3:81:00:0d:49:71:6d:a6:9c:3b:12:
bc:90:d4:ab:70:4f:69:86:9c:22:cf:a7:c5:bf:3a:d3:fc:ed:
a3:c8:09:9e:c8:87:a4:52:90:75:d6:35:5b:d8:f9:48:e8:29:
ce:70:42:5c:db:39:10:c2:43:eb:67:52:12:22:15:30:fc:43:
08:41:45:ec:6b:48:73:ee:10:f7:e8:ff:ea:63:e7:ed:0e:28:
e3:3c:fd:40:ae:3b:e1:da:03:96:71:98:3b:b8:8b:8c:27:30:
fc:2d:f2:45:af:75:75:ff:a8:6d:bb:bc:b8:e6:4a:6c:01:bb:
94:b8:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:26:05 2026 by rpki-client