This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa
File: 3230302e38392e36342e302f32302d3230203d3e203233313430.roa (raw, json)
Hash identifier: vAK0xRaufQqPEhuot2pkNlTQwizJjpSKrZBMW+X64uI=
Subject key identifier: BB:E8:4C:EA:50:36:38:CF:F3:CD:C4:47:CA:73:A9:90:D2:4D:20:48
Certificate issuer: /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
Certificate serial: 5F6F2DDFDABE163E54889528BD102AF020E554F1
Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa
Signing time: Tue 06 Jan 2026 19:36:26 +0000
ROA not before: Tue 06 Jan 2026 19:31:26 +0000
ROA not after: Tue 05 Jan 2027 19:36:26 +0000
asID: 23140
IP address blocks: 200.89.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl
rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 23:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6f:2d:df:da:be:16:3e:54:88:95:28:bd:10:2a:f0:20:e5:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
Validity
Not Before: Jan 6 19:31:26 2026 GMT
Not After : Jan 5 19:36:26 2027 GMT
Subject: CN=BBE84CEA503638CFF3CDC447CA73A990D24D2048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:2c:ea:2f:77:20:f4:d5:58:ab:0f:63:86:
af:35:fa:ed:1f:cb:b4:2a:bb:d9:62:46:0f:c3:89:
66:66:d7:42:63:cd:3f:c6:af:63:4a:90:f9:ee:5a:
4d:9e:82:3e:18:65:5d:98:d8:7b:32:bc:72:5e:a8:
fb:59:f2:1e:b3:9d:a5:b3:44:03:d7:5c:d0:2e:02:
12:98:8f:17:72:67:71:96:16:36:2d:9d:12:93:22:
ec:ae:f9:f7:4e:9c:3d:bb:a4:f5:2e:30:00:4a:c9:
bf:4e:a0:f4:77:ac:42:72:87:dc:d1:29:6b:7d:61:
25:5a:89:47:d8:d2:89:fc:64:7e:b8:95:53:94:d3:
3a:a8:07:80:fd:76:72:83:ae:49:53:c3:7f:66:02:
61:a8:03:49:ff:4a:65:25:c0:d6:65:5c:65:2c:93:
75:ba:93:87:11:f0:1f:82:91:1a:ff:59:ae:b4:d6:
5a:2a:30:ec:74:41:64:f3:28:81:2d:af:2c:eb:aa:
02:9a:49:96:97:4d:d3:29:78:a1:fa:2b:c7:c2:f4:
1c:c4:81:cc:62:99:2b:03:9c:4d:3c:35:05:df:e1:
19:78:87:72:9f:c8:cd:06:7d:d1:f0:2e:a8:e7:94:
cf:73:c2:2f:79:46:43:b3:9c:69:4c:0d:61:b0:10:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:4C:EA:50:36:38:CF:F3:CD:C4:47:CA:73:A9:90:D2:4D:20:48
X509v3 Authority Key Identifier:
keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.64.0/20
Signature Algorithm: sha256WithRSAEncryption
70:de:f8:88:f8:36:0d:18:34:22:33:95:37:93:ff:bc:32:d8:
e5:c0:8c:58:82:f7:ca:1e:ef:8e:66:ff:a4:3f:00:71:84:ce:
89:04:5e:70:1b:ff:64:c1:cf:3a:e3:04:84:57:ff:8b:a5:a7:
e8:f4:1c:cf:64:ad:33:e0:a7:fa:b7:54:ed:c9:60:dd:8e:be:
14:34:40:44:8c:62:9d:7a:ba:cb:d2:02:58:b5:ef:60:68:40:
b5:d3:c4:25:d6:d6:85:8f:4a:cb:10:82:81:41:1d:3a:66:c4:
7b:be:4a:f5:70:02:94:cc:41:72:8d:f5:7f:47:97:80:c5:56:
a1:fe:0a:35:89:49:2c:2a:07:ec:3c:db:9e:ed:a7:b7:4e:0c:
b5:7d:44:6a:3e:35:cd:41:52:4f:f8:16:9e:2f:87:a6:64:9e:
41:65:0a:71:cc:e6:8d:34:18:e0:a4:63:b9:8d:70:56:d5:ea:
8f:69:9f:47:28:3a:94:8d:e1:fb:37:c0:d3:7f:63:8c:58:06:
06:35:b7:cb:47:85:50:c7:c8:19:13:aa:1b:65:bb:70:12:e2:
39:0d:10:97:4c:ba:cc:82:09:aa:48:cb:01:0e:e9:19:cb:0d:
c0:fe:43:c6:59:59:76:43:83:38:5e:89:fa:11:35:c0:5d:5d:
1b:02:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:17 2026 by rpki-client