This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
File: 3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa (raw, json)
Hash identifier: zNwk5lG4WsuyePKUnzCeqBgA97UiNjDxqA+XnOpAxL4=
Subject key identifier: 53:B0:C5:52:B7:FE:D4:4D:76:FD:F0:43:83:E8:5C:D6:92:A4:0E:B5
Certificate issuer: /CN=749800288DD85BE233671D21F84E85060EC5FBAD
Certificate serial: 162DF5D41F09D453A4AAAA31E2D192FC4BC2D4D1
Authority key identifier: 74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
Signing time: Tue 06 Jan 2026 19:10:10 +0000
ROA not before: Tue 06 Jan 2026 19:05:10 +0000
ROA not after: Tue 05 Jan 2027 19:10:10 +0000
asID: 265708
IP address blocks: 200.85.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl
rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 06:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2d:f5:d4:1f:09:d4:53:a4:aa:aa:31:e2:d1:92:fc:4b:c2:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749800288DD85BE233671D21F84E85060EC5FBAD
Validity
Not Before: Jan 6 19:05:10 2026 GMT
Not After : Jan 5 19:10:10 2027 GMT
Subject: CN=53B0C552B7FED44D76FDF04383E85CD692A40EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:95:a0:ab:e2:4a:bb:cf:c1:03:a2:ed:56:
20:cb:4a:a9:63:ce:ac:95:88:5c:ef:4f:5a:89:68:
f4:1d:83:53:2b:e2:6d:d9:42:36:a6:74:2e:d9:7a:
95:a1:79:5c:d9:15:6e:d4:06:fe:e6:99:cf:80:25:
d2:a1:78:fe:34:cc:ff:de:c6:5a:b7:cc:5c:1f:12:
d4:9f:d7:cf:a0:4c:28:2f:2b:1f:c3:c2:92:02:70:
ff:f7:b5:b8:09:61:57:38:43:fe:7d:e9:f1:a3:1d:
cf:65:26:85:8b:1b:fc:0b:15:44:17:33:d6:d7:0c:
48:f2:54:35:c1:af:ca:61:b6:50:cd:1b:ed:2e:4b:
52:52:f8:b1:4e:74:39:12:dc:7e:56:a0:38:dd:2a:
06:df:88:f1:83:9d:51:bb:4e:83:50:e3:26:e3:e6:
10:ab:8d:19:1c:07:46:0f:fb:60:93:81:f6:8a:36:
a0:d0:5a:3d:90:9e:88:cf:b1:d5:38:35:a4:05:e0:
89:12:21:bf:53:81:4e:66:91:0c:6b:df:13:d1:87:
ca:0b:df:66:e5:49:34:65:11:02:6a:d0:b7:12:d4:
a1:61:4e:5a:f5:c0:da:d3:6c:54:1c:82:ab:c9:24:
24:49:4b:7b:8d:df:3c:b1:01:0c:97:e8:2e:7b:35:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:C5:52:B7:FE:D4:4D:76:FD:F0:43:83:E8:5C:D6:92:A4:0E:B5
X509v3 Authority Key Identifier:
keyid:74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.136.0/22
Signature Algorithm: sha256WithRSAEncryption
72:a2:7b:cd:59:da:65:59:c9:da:4e:c3:c4:91:4b:bd:96:0b:
b5:74:87:8a:74:b7:0a:c0:a4:65:c0:84:c7:42:d2:42:55:e1:
bd:5b:e7:50:df:cc:22:a5:5c:f0:2b:f7:29:73:9a:5a:65:38:
f1:8d:ca:41:10:ff:bb:9e:a3:79:e0:c2:2a:a9:82:ba:81:13:
78:2c:78:21:03:98:8b:63:fa:a7:d3:e3:90:21:89:5e:ab:be:
58:20:0c:2b:91:1f:a8:97:67:72:90:93:1f:bb:f2:32:71:bc:
ec:de:91:dd:ba:ab:43:85:bd:a1:17:fb:fc:25:80:48:52:da:
af:dd:36:bf:a2:75:11:6a:98:03:3b:ac:7e:b3:a7:27:08:47:
94:06:63:b9:95:8e:34:ef:ad:91:04:4c:76:1b:9d:03:b1:51:
37:1a:2f:60:b5:66:5f:3b:7e:15:7e:f5:16:a0:d7:cf:67:c2:
08:97:6b:b6:84:60:48:07:e6:ea:b2:f6:7e:7e:b8:62:95:53:
84:6b:2a:34:84:55:43:16:2b:07:7d:3f:f0:0c:f5:bc:fe:9a:
36:ca:cd:30:62:78:dd:af:8b:15:5d:10:d6:1d:1f:70:5a:1d:
28:af:2f:5c:40:f2:50:46:bb:7e:94:71:89:51:f1:6e:b1:4a:
c6:fb:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:12:39 2026 by rpki-client