This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa
File: 3230302e372e3135362e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier: nLnJOpQ+yj9DA0PDepz3eDITHE5u17UzMGfSTY9DGSs=
Subject key identifier: D6:B8:83:51:8B:28:E9:3F:DF:13:A8:38:FF:9E:10:DA:42:4A:E9:F1
Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial: 395C1D21580AF916B9524C820ED0C3FA864E8B86
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa
Signing time: Tue 06 Jan 2026 19:30:07 +0000
ROA not before: Tue 06 Jan 2026 19:25:07 +0000
ROA not after: Tue 05 Jan 2027 19:30:07 +0000
asID: 52399
IP address blocks: 200.7.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 19:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5c:1d:21:58:0a:f9:16:b9:52:4c:82:0e:d0:c3:fa:86:4e:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Validity
Not Before: Jan 6 19:25:07 2026 GMT
Not After : Jan 5 19:30:07 2027 GMT
Subject: CN=D6B883518B28E93FDF13A838FF9E10DA424AE9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:6a:5d:92:e6:91:3d:4e:dc:0b:b8:0b:90:
1a:bf:29:0f:94:49:c1:53:85:2a:0b:58:fd:9e:a9:
92:c4:78:bf:4c:98:4d:5e:f3:49:31:45:88:e8:e0:
42:44:a7:13:24:22:01:a6:bc:20:bb:70:e1:c4:ad:
fb:d8:4c:a0:e7:d0:96:e5:22:b3:79:28:af:68:51:
3e:ea:02:78:07:14:7a:ba:85:5b:5e:65:73:9a:d7:
ec:d1:d6:c8:ed:af:d5:c9:a5:a0:c2:0a:44:a1:52:
79:0d:bf:3a:fa:39:64:67:8f:27:c1:e6:ff:dd:5e:
ed:09:3a:6a:35:45:14:4c:f7:09:48:07:7c:47:40:
0d:a1:db:89:eb:66:38:1a:41:28:5b:9c:9a:65:c5:
0d:8c:7c:f5:46:6c:9d:0a:b2:4c:6d:23:47:70:a5:
13:ef:b4:45:d1:e1:3b:72:64:7d:7a:57:4c:a0:38:
77:db:e3:c9:69:11:f6:c0:49:20:31:9f:9f:f5:56:
46:7d:c0:95:32:fd:3c:47:1a:ac:71:3d:02:06:c8:
d8:c0:ea:e9:b7:5c:e0:d9:5d:ae:61:b7:45:52:95:
b2:a0:96:42:02:c8:86:91:12:68:fe:d4:30:30:60:
8a:03:b5:03:ad:cd:92:58:87:10:20:30:73:37:9a:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:83:51:8B:28:E9:3F:DF:13:A8:38:FF:9E:10:DA:42:4A:E9:F1
X509v3 Authority Key Identifier:
keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:29:c2:29:7f:3f:bd:a3:8d:40:2a:19:de:74:33:62:ed:12:
77:c4:bb:2f:3e:0b:6d:03:e5:84:a2:62:42:9b:b6:f6:46:0a:
fd:ff:46:e9:ce:0d:02:ed:0b:b9:3a:36:f9:50:97:31:1d:fd:
2c:e1:b3:47:88:9f:76:6e:25:8a:32:bd:3c:5b:02:15:87:f4:
21:0a:63:57:f1:ab:be:fa:05:35:07:75:8f:b0:bf:7c:76:37:
a2:42:32:99:b0:c3:fb:4a:fd:a9:71:99:58:67:fa:d8:18:0c:
29:ec:5d:dc:5b:4a:d0:7c:1e:6f:5d:4b:af:2a:40:0f:b0:71:
40:77:ef:60:2d:bf:aa:66:56:90:3e:b8:72:bc:00:1f:a8:f0:
90:8f:c7:c1:9b:20:ec:a9:fc:8f:0a:ae:0d:d9:dc:f9:03:a8:
85:56:31:de:7b:ea:17:82:92:9f:b7:3b:82:05:6a:be:ba:ed:
a0:be:09:67:be:30:44:c3:37:ea:05:06:39:b6:9f:c2:a8:cb:
1c:da:23:ce:45:8a:b9:9c:37:ed:c4:d8:f6:71:17:6e:12:fe:
e6:02:9d:40:d5:ac:de:65:67:99:18:5d:2b:90:c9:35:f5:0c:
2b:d1:cf:98:ca:60:8e:70:51:ac:ca:4a:cc:8f:39:e8:a3:6a:
37:56:32:64
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOVwdIVgK+Ra5UkyCDtDD+oZOi4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCN0EyODg1OTk0N0M1MkEzODdCQjYyODc2NEY5MUFB
QTFEMDVCOTAeFw0yNjAxMDYxOTI1MDdaFw0yNzAxMDUxOTMwMDdaMDMxMTAvBgNV
BAMTKEQ2Qjg4MzUxOEIyOEU5M0ZERjEzQTgzOEZGOUUxMERBNDI0QUU5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmw2pdkuaRPU7cC7gLkBq/KQ+U
ScFThSoLWP2eqZLEeL9MmE1e80kxRYjo4EJEpxMkIgGmvCC7cOHErfvYTKDn0Jbl
IrN5KK9oUT7qAngHFHq6hVteZXOa1+zR1sjtr9XJpaDCCkShUnkNvzr6OWRnjyfB
5v/dXu0JOmo1RRRM9wlIB3xHQA2h24nrZjgaQShbnJplxQ2MfPVGbJ0KskxtI0dw
pRPvtEXR4TtyZH16V0ygOHfb48lpEfbASSAxn5/1VkZ9wJUy/TxHGqxxPQIGyNjA
6um3XODZXa5ht0VSlbKglkICyIaREmj+1DAwYIoDtQOtzZJYhxAgMHM3mhShAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1riDUYso6T/fE6g4/54Q2kJK6fEwHwYDVR0j
BBgwFoAUwreiiFmUfFKjh7tih2T5GqodBbkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDJBQjQ4REYyNEY0RDg1REFBNDlCREFCNzc2MDlFNURC
NUIzNzcxMkNGRDlERTdBNUNFOUY5ODA3NjAxMEYyLzAvQzJCN0EyODg1OTk0N0M1
MkEzODdCQjYyODc2NEY5MUFBQTFEMDVCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI3QTI4ODU5OTQ3QzUyQTM4
N0JCNjI4NzY0RjkxQUFBMUQwNUI5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQyQUI0OERGMjRGNEQ4NURBQTQ5QkRBQjc3NjA5RTVEQjVCMzc3MTJD
RkQ5REU3QTVDRTlGOTgwNzYwMTBGMi8wLzMyMzAzMDJlMzcyZTMxMzUzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIB5wwDQYJ
KoZIhvcNAQELBQADggEBAG8pwil/P72jjUAqGd50M2LtEnfEuy8+C20D5YSiYkKb
tvZGCv3/RunODQLtC7k6NvlQlzEd/Szhs0eIn3ZuJYoyvTxbAhWH9CEKY1fxq776
BTUHdY+wv3x2N6JCMpmww/tK/alxmVhn+tgYDCnsXdxbStB8Hm9dS68qQA+wcUB3
72Atv6pmVpA+uHK8AB+o8JCPx8GbIOyp/I8Krg3Z3PkDqIVWMd576heCkp+3O4IF
ar667aC+CWe+METDN+oFBjm2n8KoyxzaI85FirmcN+3E2PZxF24S/uYCnUDVrN5l
Z5kYXSuQyTX1DCvRz5jKYI5wUazKSsyPOeijajdWMmQ=
-----END CERTIFICATE-----
Generated at Mon Jan 12 17:24:56 2026 by rpki-client