This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203238303431.roa
File: 3230302e3132352e3133332e302f32342d3234203d3e203238303431.roa (raw, json)
Hash identifier: /2uKS30rLecU1bXzaeMUVdIAoaHiG0dtO2g0mwXixPw=
Subject key identifier: 99:3C:0C:16:76:46:F7:3F:BD:DA:C3:71:8D:2A:DD:65:D8:F8:3E:E9
Certificate issuer: /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial: 6999B031C800A7D436C07F2EC535219F8040D4E3
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203238303431.roa
Signing time: Tue 06 Jan 2026 19:27:43 +0000
ROA not before: Tue 06 Jan 2026 19:22:43 +0000
ROA not after: Tue 05 Jan 2027 19:27:43 +0000
asID: 28041
IP address blocks: 200.125.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:99:b0:31:c8:00:a7:d4:36:c0:7f:2e:c5:35:21:9f:80:40:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
Validity
Not Before: Jan 6 19:22:43 2026 GMT
Not After : Jan 5 19:27:43 2027 GMT
Subject: CN=993C0C167646F73FBDDAC3718D2ADD65D8F83EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:01:18:02:c8:be:a8:c4:60:8f:83:41:30:
a2:dc:96:b9:67:86:bb:05:a8:3d:ef:9a:93:26:71:
fa:1b:02:ef:1e:c1:eb:bb:35:ba:c9:46:d8:c5:13:
65:74:55:98:57:c4:57:3c:97:f0:8a:00:90:0b:cc:
22:c8:92:c6:09:cc:5f:3d:26:68:83:83:c6:af:b4:
3e:59:79:e2:c2:12:d2:d3:4a:56:a0:87:b9:84:56:
df:c8:f2:a9:a9:0c:6a:ac:ac:9e:f7:f6:49:5a:22:
40:5a:43:ed:af:2a:91:87:79:08:af:cd:08:af:24:
c8:f6:df:49:30:41:b5:60:8b:84:56:2d:6a:ec:95:
07:2f:54:d8:f1:19:c7:19:86:cb:73:22:be:49:f5:
c4:f9:c7:d6:0a:bf:3d:43:d5:fd:ca:51:36:e0:39:
65:bc:40:f6:81:46:35:db:ff:de:3d:ec:c0:c6:3b:
a5:fc:68:c3:83:57:af:22:29:33:a6:e7:77:f4:f1:
a5:4e:47:e4:1a:c9:06:c9:7a:c6:97:d5:de:a1:88:
a5:e8:67:89:34:8c:5a:9b:37:cb:1f:b5:e4:92:9e:
14:8d:01:c8:ff:7f:de:f2:d7:72:33:80:95:86:37:
01:f3:4f:b7:26:17:a4:d2:95:70:4a:d2:df:4e:52:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:0C:16:76:46:F7:3F:BD:DA:C3:71:8D:2A:DD:65:D8:F8:3E:E9
X509v3 Authority Key Identifier:
keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203238303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d3:95:dd:d3:2c:ff:25:c0:f4:df:f3:45:00:36:b3:eb:2e:
4f:cf:e0:6d:db:f0:46:a1:e0:7b:37:6c:f2:f0:23:5b:7b:76:
0e:33:48:d9:d7:e1:14:08:49:b4:f3:7f:2e:23:81:c0:d5:e8:
f1:15:bf:f0:dd:7b:0b:e6:17:9e:74:34:ae:28:b6:05:d6:6a:
13:38:37:48:69:a1:35:fd:ea:73:d8:42:70:a6:6a:41:da:d6:
47:95:95:71:83:05:eb:1a:e8:42:f8:10:6c:2f:50:37:b3:f6:
b4:7d:ce:13:6a:09:19:2f:83:1b:09:f0:18:ac:c9:24:84:58:
6a:8c:5b:2c:cb:b1:9f:03:26:f7:36:ff:cf:1a:0d:8a:7d:4c:
15:49:8d:e0:69:2c:43:13:54:82:ae:e9:67:a8:7b:97:7b:bf:
c4:62:f3:7e:d7:57:28:79:32:4f:21:4a:f2:30:3b:8a:01:55:
38:ab:1c:72:5a:9c:f5:fb:9a:2f:61:92:ad:62:07:aa:a4:5b:
3a:04:8d:52:fc:88:df:22:df:8d:22:e7:a4:27:32:ee:9e:12:
a1:62:fa:57:07:6b:43:20:45:5a:ec:fe:55:38:99:8e:42:3e:
ae:3f:38:7d:70:5b:f1:f3:a5:aa:84:73:eb:a7:ca:c0:d1:39:
49:d1:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:54:04 2026 by rpki-client