This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3232392e302e302f32302d3234203d3e203532323633.roa
File: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (raw, json)
Hash identifier: 43SHmgUBCtJMx1DODjK0rQ20Jz9ywGL5/0BbTB7GRXI=
Subject key identifier: 9F:B2:D0:85:52:85:E1:D9:3A:A7:F4:2F:A5:3F:DA:45:3A:15:89:7A
Certificate issuer: /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial: 5761E9A9E64DE5A8A6CEE6005611EEDC31AABF2D
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3232392e302e302f32302d3234203d3e203532323633.roa
Signing time: Tue 06 Jan 2026 19:41:08 +0000
ROA not before: Tue 06 Jan 2026 19:36:08 +0000
ROA not after: Tue 05 Jan 2027 19:41:08 +0000
asID: 52263
IP address blocks: 200.229.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:61:e9:a9:e6:4d:e5:a8:a6:ce:e6:00:56:11:ee:dc:31:aa:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Validity
Not Before: Jan 6 19:36:08 2026 GMT
Not After : Jan 5 19:41:08 2027 GMT
Subject: CN=9FB2D0855285E1D93AA7F42FA53FDA453A15897A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:87:93:06:41:82:1e:c0:13:63:19:4f:b0:
3f:3c:1c:7b:0a:ec:f7:1a:ea:64:41:92:45:74:0a:
21:f7:12:1a:fd:ea:32:52:81:3a:2b:1f:c1:82:93:
98:dd:61:54:7d:9f:b8:43:2b:df:58:bd:69:8c:d8:
e2:ed:11:11:32:f0:07:d4:7a:46:cf:3b:f3:1e:35:
69:f8:b5:49:d4:0f:19:06:0a:e3:37:86:06:97:ed:
b7:ef:a8:f3:16:9e:0d:21:26:4f:09:d9:e5:8e:da:
78:6f:26:f1:65:02:80:ba:25:c9:ff:c2:6d:47:34:
c3:f0:9d:7a:f2:ad:d5:9a:50:dc:11:9e:25:c4:80:
cc:02:ae:8f:3b:4f:3c:5a:0a:b1:8b:8e:8a:14:c0:
0e:6c:37:b2:29:05:0c:73:8d:7d:3d:ef:1e:7a:ed:
4d:dc:6f:e1:61:14:af:b4:3e:6c:00:dc:f7:7f:88:
cd:12:22:e0:f9:fc:7f:f5:4c:1e:39:b4:5c:ca:7a:
17:90:95:53:a8:9a:4b:10:b8:d9:90:ec:95:dd:eb:
1f:aa:3d:5f:d1:a7:0c:7d:43:17:58:28:5d:dd:13:
a4:93:5d:d9:4a:3c:18:df:9f:6f:57:2b:ef:49:f9:
a3:08:55:ac:59:3f:eb:b9:dc:ed:22:74:5c:40:81:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:D0:85:52:85:E1:D9:3A:A7:F4:2F:A5:3F:DA:45:3A:15:89:7A
X509v3 Authority Key Identifier:
keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3232392e302e302f32302d3234203d3e203532323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:2a:97:9c:48:d9:76:c4:5e:80:ca:a4:b0:09:01:7f:1a:71:
fb:3b:fa:af:5f:a4:db:1d:09:2d:60:e9:73:f4:aa:dd:03:20:
16:2b:b7:5a:08:22:eb:f8:ab:a8:57:5a:ba:27:a7:33:a9:f8:
92:3f:03:f1:f4:32:b2:ab:5b:01:cc:0b:5b:cc:bd:77:11:7f:
7a:2b:66:5e:ba:20:bd:4a:6b:0d:6d:a0:db:9b:9d:01:90:55:
73:f0:48:8b:1f:33:14:8d:12:7e:69:de:fa:56:92:7a:c0:61:
9d:d2:c9:1c:6a:a5:99:70:74:03:61:03:d2:23:37:9b:f3:eb:
92:ef:6a:e4:8c:f2:72:c4:22:93:8e:d5:8d:0b:87:4f:b2:8a:
d8:99:6d:77:83:58:eb:4b:f0:a5:5c:42:62:f2:31:83:1f:43:
d5:53:4d:a3:d8:d9:53:04:f9:be:0e:b8:e9:83:93:7e:be:59:
36:7b:d8:72:14:cc:a1:f4:af:c0:b8:9d:a9:68:c4:3a:d8:86:
24:b5:0d:f4:66:2f:10:ba:4b:14:36:07:49:e7:eb:23:17:e5:
a3:4f:e8:22:1b:ed:a6:fa:5f:79:1c:fa:cd:64:80:1b:e2:b6:
af:39:81:27:96:c1:0b:75:34:ef:3d:bb:f7:b9:9b:08:64:ee:
00:1c:e7:92
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUV2HpqeZN5aimzuYAVhHu3DGqvy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I0ODcxQUE3MDNGQTk4RjY2MzkzNUJGQzI0NENDMUI5
OUFEOEE0OTAeFw0yNjAxMDYxOTM2MDhaFw0yNzAxMDUxOTQxMDhaMDMxMTAvBgNV
BAMTKDlGQjJEMDg1NTI4NUUxRDkzQUE3RjQyRkE1M0ZEQTQ1M0ExNTg5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSIeTBkGCHsATYxlPsD88HHsK
7Pca6mRBkkV0CiH3Ehr96jJSgTorH8GCk5jdYVR9n7hDK99YvWmM2OLtEREy8AfU
ekbPO/MeNWn4tUnUDxkGCuM3hgaX7bfvqPMWng0hJk8J2eWO2nhvJvFlAoC6Jcn/
wm1HNMPwnXryrdWaUNwRniXEgMwCro87TzxaCrGLjooUwA5sN7IpBQxzjX097x56
7U3cb+FhFK+0PmwA3Pd/iM0SIuD5/H/1TB45tFzKeheQlVOomksQuNmQ7JXd6x+q
PV/Rpwx9QxdYKF3dE6STXdlKPBjfn29XK+9J+aMIVaxZP+u53O0idFxAgazDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUn7LQhVKF4dk6p/QvpT/aRToViXowHwYDVR0j
BBgwFoAUy0hxqnA/qY9mOTW/wkTMG5mtikkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQ0REN0VGNEM4QzE2MEI1MzQwODAxQjc4MzlENkE4NjhF
NEREMzQ4Njc5M0FENjAzODM3NjU1MDQ0M0QwMUYyLzAvQ0I0ODcxQUE3MDNGQTk4
RjY2MzkzNUJGQzI0NENDMUI5OUFEOEE0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjQ4NzFBQTcwM0ZBOThGNjYz
OTM1QkZDMjQ0Q0MxQjk5QUQ4QTQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUNERDdFRjRDOEMxNjBCNTM0MDgwMUI3ODM5RDZBODY4RTRERDM0ODY3
OTNBRDYwMzgzNzY1NTA0NDNEMDFGMi8wLzMyMzAzMDJlMzIzMjM5MmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATI5QAwDQYJ
KoZIhvcNAQELBQADggEBADoql5xI2XbEXoDKpLAJAX8acfs7+q9fpNsdCS1g6XP0
qt0DIBYrt1oIIuv4q6hXWronpzOp+JI/A/H0MrKrWwHMC1vMvXcRf3orZl66IL1K
aw1toNubnQGQVXPwSIsfMxSNEn5p3vpWknrAYZ3SyRxqpZlwdANhA9IjN5vz65Lv
auSM8nLEIpOO1Y0Lh0+yitiZbXeDWOtL8KVcQmLyMYMfQ9VTTaPY2VME+b4OuOmD
k36+WTZ72HIUzKH0r8C4naloxDrYhiS1DfRmLxC6SxQ2B0nn6yMX5aNP6CIb7ab6
X3kc+s1kgBvitq85gSeWwQt1NO89u/e5mwhk7gAc55I=
-----END CERTIFICATE-----
Generated at Tue Jan 13 12:36:11 2026 by rpki-client