This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa
File: 3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier: 8rCxm5lKqBYOpBRjKB34XwDK+b690evTNHvMWRYFciA=
Subject key identifier: 16:B3:AB:96:15:5F:13:66:33:DC:BE:03:56:3E:8C:96:E6:30:F9:B7
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 1A9178CA8FB063BDD39BF3A5350E57C5FA9E1957
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa
Signing time: Tue 06 Jan 2026 20:58:17 +0000
ROA not before: Tue 06 Jan 2026 20:53:17 +0000
ROA not after: Tue 05 Jan 2027 20:58:17 +0000
asID: 13381
IP address blocks: 200.112.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:91:78:ca:8f:b0:63:bd:d3:9b:f3:a5:35:0e:57:c5:fa:9e:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Jan 6 20:53:17 2026 GMT
Not After : Jan 5 20:58:17 2027 GMT
Subject: CN=16B3AB96155F136633DCBE03563E8C96E630F9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:8e:32:42:3e:f1:7a:0e:0f:1f:fd:1c:75:
29:c0:63:05:04:33:dd:f8:d0:87:e8:66:e9:3f:81:
97:de:a8:49:ff:49:f0:fc:6b:02:85:de:1c:76:1f:
a1:98:69:7a:37:1d:f0:70:0f:d6:ab:bc:f7:c2:72:
4a:28:2b:9a:1c:95:e0:d4:cf:2b:eb:69:53:9f:82:
2b:29:13:45:3b:5b:54:37:47:1a:3a:7d:4b:ac:50:
24:a4:5b:c3:ce:0f:a5:7f:43:c3:f0:3f:7b:38:84:
c2:9c:0e:cf:7c:dc:58:4d:eb:fc:67:ac:64:9f:bd:
68:59:eb:ad:af:07:8e:e3:30:ba:b7:13:4a:a0:09:
9e:b8:e9:17:e8:0a:81:5b:dd:bd:74:5f:09:88:03:
51:73:0e:d3:1a:8a:67:38:0d:16:3f:e5:1d:b6:3a:
0e:f5:88:3d:96:94:f7:1e:b1:d0:87:4c:d9:4c:d7:
35:be:5c:eb:1f:c0:7a:98:5e:9a:ab:c8:f5:77:df:
c3:d6:ae:4b:da:b6:53:bb:27:32:05:90:ab:f0:a1:
b0:88:91:85:53:c2:a4:73:5e:41:a6:74:dd:8b:c2:
a8:78:81:5c:f5:0f:29:ce:0c:53:16:52:d8:77:d7:
61:52:ba:23:c2:d4:2e:81:d6:c4:85:bc:4c:a9:80:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B3:AB:96:15:5F:13:66:33:DC:BE:03:56:3E:8C:96:E6:30:F9:B7
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.251.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8b:31:a0:17:90:93:98:63:f9:82:92:c0:10:0f:b7:c5:a7:
fb:a5:0c:e5:5b:60:75:27:f5:b8:08:0e:75:d5:93:ff:a3:3f:
33:2d:0d:e8:b4:79:f3:67:6d:7a:ff:cc:f5:4f:36:79:6a:12:
bd:5c:cf:77:44:a7:1a:e4:d1:39:51:9b:c4:3e:7b:03:44:72:
e2:3f:3b:8c:cd:cc:47:46:0e:5c:c1:59:7c:ae:a1:15:6d:28:
48:07:3a:f3:7c:77:71:d0:46:87:75:5c:19:79:53:a0:8e:3c:
c6:c2:3c:ed:28:86:f0:3c:b5:04:24:df:a7:42:84:44:50:32:
1a:26:52:14:bf:ec:09:60:2e:37:d0:c7:68:80:8f:35:75:95:
75:75:9a:e4:be:19:02:06:60:5b:b6:ac:f2:3d:9c:e5:28:7b:
f5:af:71:77:c3:51:04:ca:5a:b7:45:ae:a7:4b:f4:f1:04:49:
41:20:2c:08:e4:22:c0:37:4b:db:9c:49:3d:4f:8e:91:88:c5:
0f:0c:f5:62:d2:6e:57:fe:23:75:26:5e:71:c1:f7:f7:af:6b:
15:ca:28:fb:d2:05:ac:5f:b3:3d:ba:d6:48:e1:1e:78:f7:f8:
f3:8b:da:31:a2:6c:f5:5b:02:a3:ff:18:f8:6d:db:7a:74:48:
72:08:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:40:47 2026 by rpki-client