This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa
File: 3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa (raw, json)
Hash identifier: K8o0y+NRqSG/AiHceGl/bwBr82RufhEJgmVN26L2SBo=
Subject key identifier: 93:00:3B:BB:B3:95:72:31:50:3C:51:98:B0:AD:A4:CC:9E:38:77:36
Certificate issuer: /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial: 6D7F2CBF3FD072E5BE767A45A409B5E1F172A2D3
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa
Signing time: Tue 06 Jan 2026 19:27:45 +0000
ROA not before: Tue 06 Jan 2026 19:22:45 +0000
ROA not after: Tue 05 Jan 2027 19:27:45 +0000
asID: 28041
IP address blocks: 200.125.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7f:2c:bf:3f:d0:72:e5:be:76:7a:45:a4:09:b5:e1:f1:72:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
Validity
Not Before: Jan 6 19:22:45 2026 GMT
Not After : Jan 5 19:27:45 2027 GMT
Subject: CN=93003BBBB3957231503C5198B0ADA4CC9E387736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:49:bf:0c:d8:8a:e5:a6:75:23:50:db:cc:
21:c5:e3:29:f2:02:dd:a4:fa:48:5d:c9:f5:29:dc:
3e:30:a0:3a:b8:07:3a:63:d3:f1:b4:7b:41:e4:b2:
d1:bf:2e:4f:24:a1:53:79:24:64:b2:14:a6:7c:07:
14:f9:26:cc:7f:6f:29:98:6d:d7:c9:44:e4:67:c8:
88:19:44:91:84:14:3b:72:54:2c:9b:fc:e5:05:bd:
a9:82:41:c0:4a:98:44:15:88:f0:36:c0:ed:27:3a:
24:9b:5b:e6:d2:ff:50:83:48:24:dc:76:89:11:04:
b8:c8:7c:9a:05:2a:63:1f:be:db:cb:e2:49:7c:43:
77:9f:88:dc:f2:42:ef:5a:f8:73:a6:db:cd:d6:a8:
45:23:48:3e:1e:60:ba:d1:02:7b:43:fe:ac:7f:e4:
0b:d7:a0:30:99:37:02:83:c3:fa:9f:5c:29:e5:d0:
28:91:94:6e:d0:b3:86:5b:cd:0d:ed:ac:c3:5a:51:
ec:89:8c:e5:90:8b:bb:7b:3b:00:fd:ec:7a:5c:53:
fc:83:33:e7:3b:85:92:ae:18:01:8d:b7:c9:0e:f9:
c8:b9:3c:35:15:f9:b3:28:5f:56:04:a3:5c:49:b0:
75:8d:07:f3:da:ef:de:b3:4d:e1:41:e8:7f:44:fb:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:3B:BB:B3:95:72:31:50:3C:51:98:B0:AD:A4:CC:9E:38:77:36
X509v3 Authority Key Identifier:
keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ed:33:ef:1d:84:00:ce:f4:e8:fb:50:79:6b:43:95:ff:90:
e0:68:7d:2d:c4:21:aa:22:59:4c:80:c9:07:37:a3:b8:6e:05:
e8:90:e8:ec:08:66:ad:0d:12:2a:6e:75:84:2b:0f:e8:d6:24:
1d:e8:f0:66:db:d3:42:91:98:18:e0:b2:f5:23:19:b2:60:0d:
4b:3b:4b:83:f2:f0:7f:f1:a0:a2:b3:b4:9c:a8:ad:ee:f6:e9:
fa:05:3f:f1:51:8d:8c:6f:97:d7:30:93:ef:47:84:20:22:09:
57:e9:33:01:0b:be:6d:75:0c:46:76:05:3d:00:71:33:ed:90:
ac:ce:fe:b1:08:a3:36:22:c7:96:84:18:25:ca:cc:9c:fa:8e:
9d:b1:cc:14:85:9e:e5:fd:21:eb:9d:8b:78:92:9b:65:98:42:
a3:1d:1d:0f:68:22:7f:bf:32:26:d3:6d:28:9f:00:f2:01:2f:
14:c4:f6:91:15:d5:d4:97:94:27:64:85:98:a8:8b:53:25:a3:
e8:e0:f1:3d:8b:2d:f8:46:a5:df:04:c7:3c:a3:24:e7:7b:8f:
9d:3e:51:c5:c5:96:b6:6f:68:17:f1:cb:e0:cd:61:79:e6:2b:
b7:e1:1a:6f:33:5a:a7:24:63:9c:d3:4e:13:b0:52:33:1e:f3:
85:15:d9:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbX8svz/QcuW+dnpFpAm14fFyotMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MDlGNzc3OTg4RDhCQjlDMjlEQkJCNTM5Njg4MTI1
NjhDNjE2RTAeFw0yNjAxMDYxOTIyNDVaFw0yNzAxMDUxOTI3NDVaMDMxMTAvBgNV
BAMTKDkzMDAzQkJCQjM5NTcyMzE1MDNDNTE5OEIwQURBNENDOUUzODc3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFEm/DNiK5aZ1I1DbzCHF4yny
At2k+khdyfUp3D4woDq4Bzpj0/G0e0HkstG/Lk8koVN5JGSyFKZ8BxT5Jsx/bymY
bdfJRORnyIgZRJGEFDtyVCyb/OUFvamCQcBKmEQViPA2wO0nOiSbW+bS/1CDSCTc
dokRBLjIfJoFKmMfvtvL4kl8Q3efiNzyQu9a+HOm283WqEUjSD4eYLrRAntD/qx/
5AvXoDCZNwKDw/qfXCnl0CiRlG7Qs4ZbzQ3trMNaUeyJjOWQi7t7OwD97HpcU/yD
M+c7hZKuGAGNt8kO+ci5PDUV+bMoX1YEo1xJsHWNB/Pa796zTeFB6H9E+6RdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkwA7u7OVcjFQPFGYsK2kzJ44dzYwHwYDVR0j
BBgwFoAU0nCfd3mI2LucKdu7U5aIElaMYW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JEQTNDQkUzRjk0QjE5RURGMDA5OTUzQzBGNDU1RDcw
NTNCMDYwODgzRkY3NEFCM0ZGQ0ExMjgxOEYwOTMyLzAvRDI3MDlGNzc3OTg4RDhC
QjlDMjlEQkJCNTM5Njg4MTI1NjhDNjE2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjcwOUY3Nzc5ODhEOEJCOUMy
OURCQkI1Mzk2ODgxMjU2OEM2MTZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCREEzQ0JFM0Y5NEIxOUVERjAwOTk1M0MwRjQ1NUQ3MDUzQjA2MDg4
M0ZGNzRBQjNGRkNBMTI4MThGMDkzMi8wLzMyMzAzMDJlMzEzMjM1MmUzMTM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyH2O
MA0GCSqGSIb3DQEBCwUAA4IBAQA17TPvHYQAzvTo+1B5a0OV/5DgaH0txCGqIllM
gMkHN6O4bgXokOjsCGatDRIqbnWEKw/o1iQd6PBm29NCkZgY4LL1IxmyYA1LO0uD
8vB/8aCis7ScqK3u9un6BT/xUY2Mb5fXMJPvR4QgIglX6TMBC75tdQxGdgU9AHEz
7ZCszv6xCKM2IseWhBglysyc+o6dscwUhZ7l/SHrnYt4kptlmEKjHR0PaCJ/vzIm
020onwDyAS8UxPaRFdXUl5QnZIWYqItTJaPo4PE9iy34RqXfBMc8oyTne4+dPlHF
xZa2b2gX8cvgzWF55iu34RpvM1qnJGOc004TsFIzHvOFFdkP
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:50:19 2026 by rpki-client