This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e3232392e3135322e302f32322d3234203d3e203231383236.roa
File: 3230302e3232392e3135322e302f32322d3234203d3e203231383236.roa (raw, json)
Hash identifier: 08vjSdv448u2wn86eWs0v4TrvxV5NNzQxGNe5qSUins=
Subject key identifier: 61:07:B0:2A:22:D4:63:BA:AC:26:E7:D9:A9:93:F8:77:7C:63:4D:4F
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 3335F240B1A23367C1E2A60272D2C97F24AADDB7
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e3232392e3135322e302f32322d3234203d3e203231383236.roa
Signing time: Tue 06 Jan 2026 19:37:44 +0000
ROA not before: Tue 06 Jan 2026 19:32:44 +0000
ROA not after: Tue 05 Jan 2027 19:37:44 +0000
asID: 21826
IP address blocks: 200.229.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:35:f2:40:b1:a2:33:67:c1:e2:a6:02:72:d2:c9:7f:24:aa:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Jan 6 19:32:44 2026 GMT
Not After : Jan 5 19:37:44 2027 GMT
Subject: CN=6107B02A22D463BAAC26E7D9A993F8777C634D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:44:9b:0e:81:a5:53:c7:46:39:23:93:52:89:
dc:6d:7e:27:d8:d9:97:6c:ff:6b:64:53:77:03:d9:
6c:7e:22:17:5c:4e:0e:70:de:54:8e:96:e4:c1:83:
07:37:c7:d6:28:3a:f3:ab:ed:d2:7e:6d:f8:6a:7d:
01:eb:3e:8c:a2:b1:d3:91:e2:ac:98:ec:c2:42:86:
aa:fb:8f:e2:69:6e:71:f4:51:ff:a1:63:e7:a1:78:
e9:0c:7d:09:1e:fa:6a:50:71:38:c5:14:e0:1c:57:
f2:38:c0:b1:46:ee:82:74:00:83:c6:fe:fa:2a:68:
6e:f3:9f:a6:00:0d:e4:14:18:98:d7:57:03:fa:2a:
9c:5b:2c:e1:ed:04:ba:b4:ce:70:ad:64:a8:e5:d6:
84:56:bc:00:69:cb:b7:3c:24:76:03:fd:af:61:32:
e6:11:ee:75:8f:d1:24:db:af:6b:a3:62:97:22:aa:
69:04:2c:c4:98:17:8d:bc:7b:6e:49:2c:5b:ed:51:
8c:da:9a:e2:a1:50:70:88:51:28:2e:67:2f:e6:a7:
5f:e9:ac:e2:30:82:da:76:3d:42:27:46:2a:d6:ff:
31:02:85:f3:3a:7a:14:25:03:a4:db:c1:b5:62:6f:
ca:3a:57:e4:98:93:5e:bd:99:e8:34:ac:81:f6:2b:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:B0:2A:22:D4:63:BA:AC:26:E7:D9:A9:93:F8:77:7C:63:4D:4F
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e3232392e3135322e302f32322d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:84:d7:d8:00:e6:d8:fa:94:0b:99:2b:d6:34:a7:8c:0a:02:
4d:24:e2:5c:26:f1:5a:42:c2:6b:fc:9e:70:9d:f0:f4:dc:8d:
28:ca:a9:1a:ea:49:ac:1d:8f:67:e9:1d:04:39:99:64:4e:f2:
0e:0d:8b:8b:20:2b:f3:ce:22:34:c1:3a:11:65:86:b9:a6:6d:
f1:bf:89:11:e3:ba:64:f9:45:4e:88:e3:0e:a7:63:0a:e0:fc:
a5:36:7c:87:48:c1:45:3c:cb:ae:ef:97:c7:81:bd:05:29:21:
85:93:9f:7f:81:e8:d1:2f:c4:30:04:53:36:ce:37:da:83:ea:
2f:03:7f:2d:d2:a7:40:05:4a:0b:16:a5:37:d1:1c:97:72:69:
d3:ef:7a:ce:3f:fa:b9:2b:ef:8f:e0:88:f8:88:a0:6c:52:44:
c3:d0:64:65:fd:0a:0c:52:97:9b:40:f9:c3:c4:f8:c6:14:92:
36:cd:ec:7b:aa:41:53:66:9f:a2:25:97:a4:90:9c:a7:6f:a5:
f2:92:7b:79:8b:66:9c:d3:34:61:52:a8:d4:2e:f1:34:c3:da:
fe:f0:0e:3a:5e:65:6f:1c:47:f3:b5:fd:c6:58:c2:21:0a:e9:
76:88:ac:bc:23:4b:42:59:f7:6f:75:b2:5f:43:7e:76:57:b9:
f2:40:83:a6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMzXyQLGiM2fB4qYCctLJfySq3bcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1RTBGMTMzRUY4QTZERjJFQ0NCRkRENkU5MTU5NjQ4
OTNBNDMyNDAeFw0yNjAxMDYxOTMyNDRaFw0yNzAxMDUxOTM3NDRaMDMxMTAvBgNV
BAMTKDYxMDdCMDJBMjJENDYzQkFBQzI2RTdEOUE5OTNGODc3N0M2MzRENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5RJsOgaVTx0Y5I5NSidxtfifY
2Zds/2tkU3cD2Wx+IhdcTg5w3lSOluTBgwc3x9YoOvOr7dJ+bfhqfQHrPoyisdOR
4qyY7MJChqr7j+JpbnH0Uf+hY+eheOkMfQke+mpQcTjFFOAcV/I4wLFG7oJ0AIPG
/voqaG7zn6YADeQUGJjXVwP6KpxbLOHtBLq0znCtZKjl1oRWvABpy7c8JHYD/a9h
MuYR7nWP0STbr2ujYpciqmkELMSYF428e25JLFvtUYzamuKhUHCIUSguZy/mp1/p
rOIwgtp2PUInRirW/zEChfM6ehQlA6TbwbVib8o6V+SYk169meg0rIH2K+LPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYQewKiLUY7qsJufZqZP4d3xjTU8wHwYDVR0j
BBgwFoAUFl4PEz74pt8uzL/dbpFZZIk6QyQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRkY5NzQ0RTY0QzU2RTEzOEFFQzUxN0Q5MTBGNjFEODk1
Q0FENjQ1Q0NGMjFDQjdDMTZBMjc4RDVDMkY5NDRDLzAvMTY1RTBGMTMzRUY4QTZE
RjJFQ0NCRkRENkU5MTU5NjQ4OTNBNDMyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjVFMEYxMzNFRjhBNkRGMkVD
Q0JGREQ2RTkxNTk2NDg5M0E0MzI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkZGOTc0NEU2NEM1NkUxMzhBRUM1MTdEOTEwRjYxRDg5NUNBRDY0NUND
RjIxQ0I3QzE2QTI3OEQ1QzJGOTQ0Qy8wLzMyMzAzMDJlMzIzMjM5MmUzMTM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMxMzgzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyOWY
MA0GCSqGSIb3DQEBCwUAA4IBAQB+hNfYAObY+pQLmSvWNKeMCgJNJOJcJvFaQsJr
/J5wnfD03I0oyqka6kmsHY9n6R0EOZlkTvIODYuLICvzziI0wToRZYa5pm3xv4kR
47pk+UVOiOMOp2MK4PylNnyHSMFFPMuu75fHgb0FKSGFk59/gejRL8QwBFM2zjfa
g+ovA38t0qdABUoLFqU30RyXcmnT73rOP/q5K++P4Ij4iKBsUkTD0GRl/QoMUpeb
QPnDxPjGFJI2zex7qkFTZp+iJZekkJynb6Xyknt5i2ac0zRhUqjULvE0w9r+8A46
XmVvHEfztf3GWMIhCul2iKy8I0tCWfdvdbJfQ352V7nyQIOm
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:54:32 2026 by rpki-client