This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
File: 3230302e33332e38322e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier: 0rYDMVlK1TqINuIOPZLHIiUDony2NwF9r0tH1Ny/5QA=
Subject key identifier: B1:41:BB:04:DB:E5:78:F1:24:90:17:74:8F:63:D1:E7:60:0C:D5:77
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 10BB5808AF702D9EF162FB0DB56B1708EE237C27
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
Signing time: Tue 06 Jan 2026 19:31:20 +0000
ROA not before: Tue 06 Jan 2026 19:26:20 +0000
ROA not after: Tue 05 Jan 2027 19:31:20 +0000
asID: 3549
IP address blocks: 200.33.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bb:58:08:af:70:2d:9e:f1:62:fb:0d:b5:6b:17:08:ee:23:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Jan 6 19:26:20 2026 GMT
Not After : Jan 5 19:31:20 2027 GMT
Subject: CN=B141BB04DBE578F1249017748F63D1E7600CD577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:4b:21:db:1e:41:cc:82:8f:89:62:35:b2:
04:8d:98:2b:1a:67:4d:a1:d0:88:26:fd:77:7b:0f:
af:9d:23:87:e5:4b:e7:f7:10:43:e0:34:41:26:dd:
5e:7c:65:18:60:30:cf:b2:5d:c6:23:2c:7a:56:88:
46:37:4b:e8:4d:5e:c4:55:a5:b8:e0:95:2a:f8:05:
60:fe:7d:13:f0:59:20:8e:b6:c4:e3:68:8c:07:2b:
42:0f:7e:f4:5d:28:cd:ab:fb:79:4f:02:ae:1b:ca:
55:e7:d3:22:7b:43:c8:69:c5:53:27:2a:22:30:a9:
0a:58:56:87:6b:5e:14:a6:7a:2d:46:1e:33:2c:9d:
81:85:69:83:52:03:f3:59:87:59:e4:fa:fe:97:27:
e0:05:9e:00:6b:b8:8e:93:97:9e:37:34:b0:6f:41:
66:c6:60:51:e3:8c:45:ab:12:12:ee:ae:7a:7b:31:
7d:67:ca:52:5d:7b:6c:40:01:c8:97:46:cc:34:3f:
7d:db:72:aa:1c:d8:cd:0b:9d:0e:5d:f7:77:9a:e0:
d1:f6:5a:cf:bb:20:25:67:e9:40:3f:0b:9b:55:b6:
b0:10:04:f9:1a:76:87:54:8c:9e:3f:2c:e4:17:95:
cb:f9:39:ee:1f:25:89:a3:f8:dc:c6:71:81:9b:9e:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:BB:04:DB:E5:78:F1:24:90:17:74:8F:63:D1:E7:60:0C:D5:77
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.82.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6f:f8:1a:8d:ec:56:5a:7a:86:b6:6b:1b:00:a8:6a:37:2a:
ba:d4:b0:48:43:46:70:73:55:6a:51:c2:46:d8:fd:51:c4:82:
92:82:0f:b4:cf:d9:16:46:16:d0:73:e5:d3:fc:dc:58:75:1e:
59:4a:0a:be:3d:48:92:34:d0:9e:ad:fa:8e:0e:2f:16:c4:b8:
fb:15:28:fa:ca:c3:c8:60:6d:f0:bc:26:08:6e:44:3c:84:f8:
2b:e1:a7:fe:24:05:4a:28:bc:a3:22:ca:28:86:5e:98:6f:8c:
62:91:5c:36:ed:1a:a4:d6:83:2f:15:54:72:95:d4:02:7d:0b:
98:a9:d1:50:31:c9:84:6d:69:5c:3d:9f:9b:72:31:cc:01:c6:
41:76:f0:99:6a:2a:ad:84:dd:fb:ca:97:a5:3d:dc:00:01:d5:
c8:4b:1b:2b:35:99:27:81:b3:7c:6f:77:61:13:56:0d:10:30:
0c:ea:1c:24:52:9c:22:f2:ef:39:c8:a8:64:33:71:d9:13:db:
4f:53:d4:ca:d2:00:e1:e6:ae:e1:7f:ee:01:ac:b9:1a:88:d5:
b9:ce:5c:58:56:f2:6a:de:db:ba:60:8c:f6:0c:98:ed:a0:e6:
e7:d3:b4:fb:40:77:9d:0b:1a:2d:c3:5b:70:e7:96:69:f6:99:
45:09:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:32:41 2026 by rpki-client