This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa
File: 3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier: KTW6K7aSqmb3VRfjvCwel7YfaXqMC02JmOPz8WikVUM=
Subject key identifier: E9:B1:8D:29:8D:31:16:05:69:37:45:50:79:FA:F7:D3:6D:65:D0:7C
Certificate issuer: /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial: 15E0085E6E81529B1E90F898FA64A2DA4E85A3D9
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa
Signing time: Tue 06 Jan 2026 19:33:50 +0000
ROA not before: Tue 06 Jan 2026 19:28:50 +0000
ROA not after: Tue 05 Jan 2027 19:33:50 +0000
asID: 271906
IP address blocks: 200.85.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 13:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:08:5e:6e:81:52:9b:1e:90:f8:98:fa:64:a2:da:4e:85:a3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Validity
Not Before: Jan 6 19:28:50 2026 GMT
Not After : Jan 5 19:33:50 2027 GMT
Subject: CN=E9B18D298D3116056937455079FAF7D36D65D07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:6d:33:db:95:9e:ad:72:40:aa:60:ae:67:
01:4e:42:53:8d:44:5e:93:e7:71:df:9e:6e:66:6d:
bc:d5:c9:bb:96:ff:b8:18:6d:02:69:b3:ff:a9:36:
18:58:e0:57:2a:50:0f:7a:61:95:c7:88:5d:3f:d8:
6e:2f:fd:52:bd:10:35:17:bb:81:2b:7a:b2:90:68:
96:ec:c6:37:af:85:4a:d5:05:6d:f4:ad:17:fa:66:
4e:f4:76:8d:76:72:56:89:52:d5:47:e4:4f:b1:9c:
d9:df:dd:04:97:cf:3f:72:ae:b0:a5:62:d8:e7:59:
34:dc:38:94:2c:d4:98:20:23:29:b7:12:7c:90:82:
60:af:8f:8b:49:79:da:d8:47:0c:8b:2c:3d:44:61:
16:ee:dd:bc:86:09:e4:2c:ac:be:90:22:ef:29:83:
e3:0d:35:90:57:c7:48:22:c5:96:eb:a0:ac:6b:02:
dc:33:40:db:16:6c:3c:fb:7d:58:f0:56:ae:1f:26:
19:0b:78:b5:bf:dd:97:40:2f:41:90:c8:7e:3d:10:
74:99:8a:73:45:4a:a8:70:87:26:d3:51:a5:8d:a7:
3e:7d:cd:7a:4c:f0:03:17:51:cb:fe:bd:98:70:a4:
18:4e:bb:56:90:4a:a4:7f:29:60:f6:2c:28:e5:d0:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:8D:29:8D:31:16:05:69:37:45:50:79:FA:F7:D3:6D:65:D0:7C
X509v3 Authority Key Identifier:
keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:53:1a:ec:94:26:1c:53:45:88:ea:86:cf:00:a9:ed:62:d0:
23:87:24:e8:b3:72:c9:ea:af:a4:89:a8:53:f8:22:57:b2:53:
d7:16:78:ae:d1:a4:9a:6d:63:26:bd:59:5a:cf:47:e1:65:db:
19:aa:07:38:90:86:60:1b:df:86:f0:19:5f:4f:20:d0:8d:6d:
9f:d1:c8:59:b0:6a:df:8b:4b:bf:e7:36:98:39:35:68:78:39:
09:78:63:54:11:c9:b7:f0:42:b2:90:14:52:39:1e:cd:fa:26:
c5:48:ae:04:1f:68:2a:ca:46:ef:4b:40:65:c8:55:eb:5e:74:
41:55:5c:a3:6e:de:81:69:bf:0e:97:46:38:07:bd:82:09:33:
4c:6b:b3:02:ba:8f:bd:96:b1:bd:11:04:c6:9a:1a:26:56:76:
d9:b3:6c:ef:a3:37:45:8c:b7:b8:0a:d1:f1:bc:ac:6a:e3:ea:
24:8f:54:ce:88:8d:4e:42:a6:71:e0:28:66:dc:36:ed:3d:a0:
36:ba:7a:eb:b5:b6:db:fa:72:53:4d:74:8c:a7:46:28:00:a3:
aa:80:8d:77:89:0b:90:e8:ad:e3:b1:c8:bd:8a:dd:d1:8b:9e:
48:bb:6e:47:26:e0:01:13:0f:1a:4e:dd:e4:52:c2:23:f3:70:
43:f1:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:30 2026 by rpki-client