This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
File: 3230302e32362e3230382e302f32312d3231203d3e203131303831.roa (raw, json)
Hash identifier: nSj7IWFkZODLbOhf87JCgET5Vbl6HT8zS1t2qEdAMok=
Subject key identifier: 43:19:1B:07:9E:60:2E:66:F6:2E:C8:C2:FC:C9:38:0F:A3:81:D7:74
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 61741E5EA1B75618C7BF09894A795CDBFC94E820
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
Signing time: Tue 06 Jan 2026 19:43:20 +0000
ROA not before: Tue 06 Jan 2026 19:38:20 +0000
ROA not after: Tue 05 Jan 2027 19:43:20 +0000
asID: 11081
IP address blocks: 200.26.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 06:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:74:1e:5e:a1:b7:56:18:c7:bf:09:89:4a:79:5c:db:fc:94:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Jan 6 19:38:20 2026 GMT
Not After : Jan 5 19:43:20 2027 GMT
Subject: CN=43191B079E602E66F62EC8C2FCC9380FA381D774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:c0:12:80:a1:e9:68:6a:2f:b4:aa:a8:1a:
01:1e:9e:3f:60:ac:ca:f8:74:29:06:14:8b:80:d0:
5f:73:cb:ce:22:e4:7c:36:2b:79:e5:3f:d1:1e:52:
a3:73:68:19:8c:aa:58:01:ac:9f:33:71:7e:9c:9a:
cd:88:8a:17:e1:18:9c:2e:9a:c1:35:99:4d:90:86:
85:c7:14:e4:14:c7:be:86:43:1f:b6:48:c0:6e:e8:
b6:c0:28:47:ba:e9:c8:bd:f1:36:77:f1:01:46:9d:
8d:5d:50:94:37:ad:58:64:d5:ea:83:20:a7:20:dc:
15:4a:02:1b:85:22:e7:75:54:23:0f:4a:c4:f3:b9:
85:76:f5:db:50:c6:ca:33:8b:21:88:e8:38:d3:08:
3a:74:9f:99:67:4d:16:5c:fe:46:7c:c5:1c:e8:ba:
be:89:66:03:bb:0a:e9:92:c7:97:fa:71:b2:b7:08:
97:1a:08:32:04:c9:55:50:ca:cd:fc:94:2e:f0:1b:
69:bd:dd:30:9f:d1:67:33:01:cb:81:df:e7:b5:ef:
99:8e:2a:08:d3:78:dd:45:86:b3:86:2d:1a:55:a2:
3a:87:64:58:74:be:93:11:e8:41:0a:3e:24:8a:5b:
bf:a1:da:08:a5:03:69:91:35:a5:34:e7:eb:ba:69:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:19:1B:07:9E:60:2E:66:F6:2E:C8:C2:FC:C9:38:0F:A3:81:D7:74
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:ef:00:94:5f:00:3a:2d:21:0f:2f:d8:0d:30:46:a5:8b:83:
04:28:63:c7:8b:19:15:c0:5c:99:d5:d8:47:c7:a8:af:79:63:
db:a2:eb:9b:85:9e:d0:a3:1e:d8:42:4d:60:be:91:b3:33:ef:
1a:c0:45:7b:8b:5d:25:4f:6e:99:87:02:c3:1a:dc:a0:70:d7:
48:a6:fc:e7:99:ee:01:93:2c:0c:ea:6b:bd:53:c5:1a:80:44:
83:08:cf:78:82:f8:27:2e:b7:2d:95:f1:c5:02:46:ed:e2:06:
12:e7:34:e0:29:b0:98:75:6e:6d:a5:dc:04:65:fa:4e:f1:a2:
68:7c:4f:5b:16:c5:c4:e8:f5:e0:3e:c6:6f:66:60:74:69:3e:
15:64:2c:61:80:4c:1e:5c:53:1c:88:dc:91:35:f3:02:4c:e5:
ad:f6:6b:af:d5:50:28:ba:29:81:77:f6:f6:2a:bd:92:77:ca:
c0:ea:8a:ca:9f:32:a5:5a:13:57:b0:bd:48:cf:25:b5:03:f8:
5f:bc:4f:90:94:51:04:1f:b9:f5:96:27:b0:af:be:1b:53:ae:
e7:0e:fc:34:24:99:a4:3c:d6:00:0b:b0:bf:a3:03:c1:84:36:
b4:ec:a2:23:ca:98:e7:5d:e3:e3:f9:c3:6b:70:c0:35:55:59:
8a:83:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:56:24 2026 by rpki-client