This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa
File: 3230302e35382e39362e302f32302d3234203d3e203237383233.roa (raw, json)
Hash identifier: bqTvGugngFuD6c/CKEnGx5gJiy0+JAnYV8cUwfuRMP8=
Subject key identifier: C1:DC:0F:02:16:19:1A:CE:D0:0A:A6:E3:C4:38:DA:6C:0B:7B:9C:5B
Certificate issuer: /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial: 608D4670DE006F7C32D035DC8F725C341D3D75D3
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa
Signing time: Tue 06 Jan 2026 19:05:59 +0000
ROA not before: Tue 06 Jan 2026 19:00:59 +0000
ROA not after: Tue 05 Jan 2027 19:05:59 +0000
asID: 27823
IP address blocks: 200.58.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 02:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8d:46:70:de:00:6f:7c:32:d0:35:dc:8f:72:5c:34:1d:3d:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Validity
Not Before: Jan 6 19:00:59 2026 GMT
Not After : Jan 5 19:05:59 2027 GMT
Subject: CN=C1DC0F0216191ACED00AA6E3C438DA6C0B7B9C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:e2:02:e1:16:05:f7:08:0f:70:89:a7:2b:
8e:9e:1e:d3:4b:92:25:49:db:34:d7:16:13:31:f0:
f9:10:eb:02:ea:1b:99:31:b7:fb:21:99:00:92:0c:
a3:ac:ca:43:eb:ff:f1:4c:8b:d5:47:9f:50:3b:f1:
4c:ac:5c:f3:87:2f:e7:11:f5:9d:83:e1:e1:a7:bb:
a0:f1:bd:9a:ef:08:4c:a4:54:9e:1a:7a:f7:5a:4e:
ce:2d:cf:f0:dd:a7:b3:93:d4:c1:86:46:54:74:1e:
bf:39:de:59:17:27:7c:36:f5:a6:d9:da:b1:fb:a1:
80:6e:8d:5a:64:1b:48:2e:58:25:b9:37:64:7c:d8:
9b:be:62:ac:ab:5d:66:c5:ea:b7:75:c5:1f:a4:a3:
ba:34:59:8d:6c:50:88:9c:2b:e3:12:a7:68:0c:bc:
c2:24:d1:24:af:3c:95:26:42:c3:3e:a1:07:1d:c8:
a4:0c:f3:01:63:f2:a4:aa:62:b3:9f:5a:44:3f:e7:
12:d8:b1:a3:1f:ef:dc:d3:28:ff:ba:8e:0d:0c:2e:
ab:dc:cf:e1:3b:2d:62:8f:f3:fd:08:83:e3:45:b6:
74:f9:fc:ef:be:cd:0f:06:7d:82:c1:d0:fa:22:26:
4c:0c:75:1f:8f:0c:9e:c0:bb:5e:5d:86:47:df:03:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:0F:02:16:19:1A:CE:D0:0A:A6:E3:C4:38:DA:6C:0B:7B:9C:5B
X509v3 Authority Key Identifier:
keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
88:cb:97:91:c1:12:1e:c8:96:be:2a:50:15:6c:2a:19:7c:93:
e9:50:eb:f2:ce:10:df:fa:81:e2:eb:63:27:55:61:dc:42:01:
64:88:05:ab:ed:c8:a1:1d:08:b8:74:6a:0b:f7:11:51:34:6c:
d0:6f:06:44:ea:71:6d:3e:1f:e4:73:58:1e:29:33:cd:ba:4b:
32:44:9a:a5:87:11:0c:2a:d2:07:2e:e8:60:a8:53:ef:b2:cf:
c3:7b:4a:2e:d1:27:b9:a1:b9:e3:50:7d:2a:d5:93:9d:ff:41:
5b:4b:bb:9b:76:3b:1e:c2:da:4b:dc:1b:a7:3f:e2:10:1d:be:
a9:19:15:8e:b7:de:48:f1:4e:da:8e:5d:3c:b4:3f:f2:93:43:
60:04:82:13:1d:0b:67:0b:44:da:5f:a3:7f:4a:4e:b7:da:7b:
69:9a:d9:58:68:18:62:15:8d:a7:be:28:92:ed:db:d6:9b:8c:
3c:a9:68:8f:44:33:70:fa:ec:c3:64:70:1c:f7:92:b7:43:65:
c1:0f:a7:7c:14:ad:b2:c9:a9:95:9e:f0:41:4e:a9:30:ee:0e:
8f:38:29:b4:b0:11:d3:59:0c:6f:ea:ef:5c:3e:b3:32:5f:68:
14:59:17:bc:0d:32:57:9b:6a:c1:2c:03:1a:22:c5:04:9c:f5:
bb:b5:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:55 2026 by rpki-client