This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e20323633323438.roa
File: 3230302e3139322e3233362e302f32322d3234203d3e20323633323438.roa (raw, json)
Hash identifier: IDgYJdtQ9YmV2iRkDkrj2avnaoRrDsAJO+tRn22Egqo=
Subject key identifier: A0:98:CB:C8:BE:91:FC:45:CE:C9:C1:81:24:63:88:58:E8:96:C3:1B
Certificate issuer: /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial: 27D62E74C3DE8A0CE4257A5387F8E551D306E05A
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e20323633323438.roa
Signing time: Tue 06 Jan 2026 19:11:02 +0000
ROA not before: Tue 06 Jan 2026 19:06:02 +0000
ROA not after: Tue 05 Jan 2027 19:11:02 +0000
asID: 263248
IP address blocks: 200.192.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d6:2e:74:c3:de:8a:0c:e4:25:7a:53:87:f8:e5:51:d3:06:e0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Validity
Not Before: Jan 6 19:06:02 2026 GMT
Not After : Jan 5 19:11:02 2027 GMT
Subject: CN=A098CBC8BE91FC45CEC9C18124638858E896C31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:d4:27:9c:41:45:03:d0:87:1a:35:1b:2d:
8c:62:28:8a:67:c7:df:91:40:45:ac:99:0f:1c:8b:
7a:14:02:ae:0b:26:43:17:cd:bb:68:8d:20:58:57:
75:dd:68:76:4d:2d:59:c4:98:c9:0b:02:d9:b4:15:
a5:5f:77:91:1d:8b:16:32:94:42:33:22:5b:fe:aa:
ec:9a:82:c6:bc:1d:a6:c6:49:7c:14:3e:d2:b1:2d:
72:ef:c6:76:da:73:30:24:aa:c8:fa:31:9f:9c:69:
ae:11:04:2c:a2:8c:8a:f3:c6:70:92:ce:cf:4d:2c:
7e:27:47:7a:77:05:3e:89:2a:62:a3:ff:8d:be:6d:
67:b1:fe:86:3e:01:cc:23:a5:10:d9:1d:f7:a4:77:
35:11:67:14:20:62:11:98:55:0b:92:f4:3a:7e:93:
ca:df:b5:15:0e:76:a3:e7:c5:78:5a:d5:d8:fd:47:
e0:87:46:19:ff:53:a0:18:3c:5b:da:1d:d7:86:26:
d0:e0:12:29:7d:52:dd:59:d4:b7:22:99:d9:0c:a1:
cd:fc:ce:26:8e:1d:4c:ac:7b:61:77:d6:9b:ca:f8:
51:1b:b4:de:3f:62:ac:b3:89:b9:cc:85:2c:16:3b:
a8:91:e3:f6:3b:f5:03:22:25:80:dd:72:b7:21:d0:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:CB:C8:BE:91:FC:45:CE:C9:C1:81:24:63:88:58:E8:96:C3:1B
X509v3 Authority Key Identifier:
keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e20323633323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.236.0/22
Signature Algorithm: sha256WithRSAEncryption
07:82:03:0a:45:9b:ef:70:ce:33:b0:65:dc:21:56:2b:2f:63:
31:46:21:52:ad:ec:6c:66:63:e8:66:72:d4:b6:0d:c7:af:73:
49:4a:74:de:54:55:5b:d2:d4:cd:ce:c2:98:a0:36:64:d0:23:
f2:0b:63:cf:12:e5:cd:fe:4a:28:0b:f9:3e:db:ec:91:19:ef:
45:a1:cd:d6:01:be:49:5f:1b:68:f6:7a:3e:0b:71:1f:e9:01:
8e:9b:b7:4f:0c:43:08:32:53:54:0e:bb:53:f4:44:d0:ce:93:
bd:0f:f8:70:a7:27:cb:9e:c5:b2:a6:d3:ef:ed:44:a4:ba:02:
57:85:48:24:d8:3f:62:bc:3a:7c:5a:c4:90:f3:7e:14:fa:43:
96:ae:5f:e6:b9:80:21:a8:5a:fc:19:4c:e9:b9:f5:17:08:79:
e2:fd:70:55:43:01:e3:8f:f4:20:ef:02:3b:2a:8d:21:33:8a:
3e:38:53:07:98:21:a0:8c:42:84:94:c8:6b:20:59:74:29:06:
5b:53:e0:62:cd:40:31:2b:54:a0:ca:ce:3d:6f:c4:53:2f:6e:
bd:db:47:2c:6b:50:b9:d7:74:d0:c1:fb:03:b7:1b:90:17:89:
27:04:e7:5a:3c:d2:a1:a5:03:b7:29:dd:a0:4d:fc:bf:b0:47:
1f:01:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:45:55 2026 by rpki-client