This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
File: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (raw, json)
Hash identifier: E1IQlK+SM6uZWwQ2NdtnO1wfKIzIa6EL9Yi8LlnCyVk=
Subject key identifier: C9:74:F5:82:F3:19:59:64:98:E2:AE:DA:84:D2:3C:E3:0F:4F:F3:D8
Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial: 498DD2AB587C754A7285DB40C62DFB88B6E8C057
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
Signing time: Tue 06 Jan 2026 19:40:07 +0000
ROA not before: Tue 06 Jan 2026 19:35:07 +0000
ROA not after: Tue 05 Jan 2027 19:40:07 +0000
asID: 27770
IP address blocks: 200.7.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8d:d2:ab:58:7c:75:4a:72:85:db:40:c6:2d:fb:88:b6:e8:c0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Validity
Not Before: Jan 6 19:35:07 2026 GMT
Not After : Jan 5 19:40:07 2027 GMT
Subject: CN=C974F582F319596498E2AEDA84D23CE30F4FF3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:11:18:c6:49:b4:d7:e9:e6:83:a6:fd:ed:
53:95:9d:46:72:23:dd:95:92:99:c7:eb:7f:1c:cd:
7c:2a:ff:7d:a8:40:c7:b9:bf:8e:ce:11:d2:80:5d:
0b:96:c5:ea:db:7a:ca:99:c9:d1:44:92:ca:f4:0c:
ff:01:8c:c0:31:72:31:78:07:c2:7f:64:45:46:a4:
ad:fc:7c:d5:f5:2f:63:da:9f:55:1c:4d:a3:90:c0:
24:d3:67:a0:c6:1f:60:0a:0b:53:57:6d:42:f9:b9:
bb:bb:d7:5e:cf:bd:83:1f:f4:f0:32:d5:21:21:64:
c0:a4:94:2a:90:2c:2f:a8:4e:63:89:11:c7:38:3c:
8e:26:54:f9:3c:33:ac:46:38:00:6e:86:62:81:32:
3a:b3:55:2a:da:17:5a:33:08:1b:f5:f4:35:71:f3:
2d:43:42:43:80:09:21:6e:49:c3:20:71:81:5d:ad:
98:dd:a6:ce:5c:18:42:ca:10:a2:5c:aa:38:a6:1a:
55:67:6c:cb:82:c3:9b:b4:c0:d4:d0:97:23:33:70:
af:0c:76:d5:1c:d6:15:21:dc:00:52:1a:9f:e2:05:
7e:c6:43:b2:a5:b8:7f:fd:d3:18:8d:3c:0c:1a:5d:
2d:31:25:b2:ea:7e:ef:0e:90:53:6f:1a:cf:f3:3f:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:F5:82:F3:19:59:64:98:E2:AE:DA:84:D2:3C:E3:0F:4F:F3:D8
X509v3 Authority Key Identifier:
keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.128.0/20
Signature Algorithm: sha256WithRSAEncryption
22:a5:b8:b6:60:03:73:0d:17:9f:ca:a2:9c:68:75:6b:d1:58:
e8:53:b2:b6:ad:cb:87:d1:eb:29:dc:c3:a3:e7:92:09:cd:45:
40:7b:64:e4:47:e4:b9:7e:f4:f7:cf:69:b1:77:f3:6f:e1:aa:
f2:f0:62:4c:e1:24:67:39:e0:e0:b2:b4:bd:a3:09:c9:36:3f:
da:b9:9b:ee:2c:98:32:fc:68:85:b2:a1:ca:53:73:ad:29:bc:
cf:a3:e0:ba:e0:42:49:eb:ad:c9:e5:27:e4:7e:5f:41:ab:8e:
73:21:f5:c6:bb:4f:57:7f:69:e3:e3:5b:15:94:d9:1a:11:2d:
42:cd:8e:dc:ab:54:bb:ed:e0:c3:f1:14:8c:9b:d5:93:d5:95:
ec:d1:b5:8a:74:a5:3b:89:77:02:b4:7d:05:0c:ae:e4:bb:da:
cf:b4:94:aa:38:06:ee:74:57:2b:0b:a4:7e:28:36:33:b8:d4:
90:53:18:5c:f9:db:1a:71:04:97:34:ca:a2:92:8b:96:51:fc:
df:a2:78:10:26:40:4c:75:29:86:93:7e:23:f1:89:c5:98:da:
60:12:6b:f7:30:8a:5c:0b:17:a1:af:53:ac:0e:00:3f:17:37:
ba:9c:90:ad:8d:6e:f3:57:a9:28:79:66:63:f8:92:06:f5:03:
e2:e8:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:28 2026 by rpki-client