This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa
File: 3230302e3131342e39362e302f32312d3234203d3e203238303830.roa (raw, json)
Hash identifier: HbPCvoKFqjtsDTRXuTTngpRG+c7jQ8YkKQYQsC1Q6L0=
Subject key identifier: B5:E2:C1:ED:3B:C3:FB:EB:EB:80:7E:9E:75:8D:92:70:1D:08:43:39
Certificate issuer: /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial: 04FC5213B62C5042245F29609DAC1EE876C99055
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa
Signing time: Tue 06 Jan 2026 19:41:01 +0000
ROA not before: Tue 06 Jan 2026 19:36:01 +0000
ROA not after: Tue 05 Jan 2027 19:41:01 +0000
asID: 28080
IP address blocks: 200.114.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fc:52:13:b6:2c:50:42:24:5f:29:60:9d:ac:1e:e8:76:c9:90:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Validity
Not Before: Jan 6 19:36:01 2026 GMT
Not After : Jan 5 19:41:01 2027 GMT
Subject: CN=B5E2C1ED3BC3FBEBEB807E9E758D92701D084339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:55:65:96:20:9f:88:60:d4:08:56:62:71:
7e:83:6c:d6:71:37:cd:8b:be:89:9f:6f:eb:9b:ad:
e5:30:ac:ae:de:5d:a7:0a:40:2f:6a:15:7a:a1:8b:
b0:c7:91:b7:8d:fb:81:02:87:1d:43:da:78:f6:d0:
aa:36:ce:72:54:9e:e2:5e:9a:cf:ea:ec:b7:1d:6e:
5f:8b:51:62:37:3a:1a:6b:b7:cd:25:9f:1f:13:ae:
09:49:a8:80:73:1a:e3:18:f7:a6:0a:b2:66:44:7a:
d6:45:84:45:1a:6a:44:c4:e2:11:cc:2f:53:da:fe:
d4:35:18:37:40:05:5d:bc:09:89:1e:d3:ac:22:8d:
70:e4:dc:27:ca:bc:ce:d8:a0:c4:9b:48:13:43:79:
9b:9f:ab:0f:03:be:a6:be:49:30:b6:55:54:d7:4d:
ce:67:11:22:4a:57:43:bb:4d:db:85:6a:f1:cc:d4:
d4:a1:dd:ee:f3:f0:48:7b:05:8b:b2:18:eb:44:54:
41:bb:7c:23:48:d5:01:d5:31:1f:43:9b:51:f2:6b:
1d:fc:69:d1:fa:7e:94:cb:0d:a3:10:b0:54:d0:ca:
8d:dc:d8:f6:75:bd:63:72:93:4d:12:8b:3d:17:95:
0e:3f:9b:85:1c:29:83:3f:bd:48:2f:66:eb:d9:d6:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:C1:ED:3B:C3:FB:EB:EB:80:7E:9E:75:8D:92:70:1D:08:43:39
X509v3 Authority Key Identifier:
keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.96.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:91:3d:69:25:ea:b1:f9:8a:10:02:7f:58:dc:1b:e7:c9:bf:
b9:45:36:4d:5a:d0:8d:14:e1:d5:37:89:4d:cc:40:0b:a3:e1:
b8:79:86:2b:23:24:33:f9:be:b0:1a:83:64:02:3b:67:58:56:
4c:85:77:d8:0b:a7:42:62:21:47:50:19:d6:af:2f:88:37:01:
0d:11:c6:4f:cd:fc:b3:d6:01:ec:5b:23:b3:6a:22:13:64:ee:
79:ee:1e:df:2e:88:e0:f2:35:df:06:0a:e5:40:68:14:1c:53:
35:ec:54:28:eb:ec:fd:35:98:ef:5f:1f:2e:73:28:8b:d5:62:
aa:17:93:37:5b:34:ad:85:c8:5d:05:c3:94:e2:04:28:5c:58:
66:94:93:78:85:dc:24:18:82:8b:24:bb:79:9f:45:2e:af:4b:
be:ad:e4:3b:da:46:2f:f2:b4:b7:0b:38:eb:6c:46:85:81:10:
aa:8e:5d:ce:f1:d5:3f:10:8b:8c:34:2d:a5:51:a9:29:ba:9f:
d8:72:03:25:c4:8b:95:1b:c3:27:a2:b4:a3:bc:0d:f2:e3:54:
23:6b:8b:1b:52:31:aa:36:42:35:f6:fb:a3:f9:a6:a1:c9:25:
bf:bf:53:8a:bd:1b:5f:bd:44:59:3b:32:5e:78:27:35:26:79:
29:f3:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:53:46 2026 by rpki-client