This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234302e302f32342d3234203d3e203132363834.roa
File: 3230302e38352e3234302e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: b0/SjbxD1b/ibWoaTxAKztdCVTW6AuL1ANBHVtWES5s=
Subject key identifier: 6B:46:C7:4E:75:1D:B6:96:9E:BD:FF:51:81:7A:5D:E7:BE:36:E7:69
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 557E5B106FBB2DDC24C14C51D0C2541C375D6ED4
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234302e302f32342d3234203d3e203132363834.roa
Signing time: Tue 06 Jan 2026 18:58:42 +0000
ROA not before: Tue 06 Jan 2026 18:53:42 +0000
ROA not after: Tue 05 Jan 2027 18:58:42 +0000
asID: 12684
IP address blocks: 200.85.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 05:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7e:5b:10:6f:bb:2d:dc:24:c1:4c:51:d0:c2:54:1c:37:5d:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Jan 6 18:53:42 2026 GMT
Not After : Jan 5 18:58:42 2027 GMT
Subject: CN=6B46C74E751DB6969EBDFF51817A5DE7BE36E769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:01:6e:a3:44:f7:2a:98:9d:12:f8:4f:c5:
57:1c:a2:7a:6e:df:8f:b6:0c:28:75:87:1d:7e:a7:
b6:5b:fa:96:86:44:af:fe:4f:7d:76:c0:dc:fc:5b:
16:13:c2:f7:08:c8:44:63:95:c9:35:28:02:8f:1f:
d1:38:a4:e1:85:cb:73:fd:67:f0:c5:ca:e4:3c:51:
a2:03:93:39:b2:81:3d:eb:ae:18:45:38:45:49:21:
4f:18:63:74:9b:8f:d9:89:59:4c:39:93:94:dd:af:
85:2c:6a:d8:e8:24:7c:9b:ff:d2:17:91:7f:d9:44:
b5:3e:aa:bb:45:c3:e8:06:47:80:00:1d:3d:aa:36:
12:40:8f:e8:42:0c:45:6b:d8:1c:22:3d:90:1b:68:
c8:35:9f:b2:2c:f7:25:5a:de:22:00:4a:25:76:3b:
03:ef:92:e3:14:51:a1:e0:8b:7c:90:29:27:62:34:
b3:7a:8f:3e:5d:1e:a1:d1:88:34:02:8f:c6:83:fa:
d3:e1:9b:29:fa:0c:99:e0:ba:b0:fd:6c:48:0a:23:
e2:6f:ad:9c:cf:76:88:2b:46:d7:25:9b:f9:99:68:
3c:24:7c:d0:39:04:e1:36:f9:9a:7c:f0:f3:df:06:
b1:e3:8b:40:ef:98:c8:8a:5c:f4:f1:8d:43:7f:82:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:C7:4E:75:1D:B6:96:9E:BD:FF:51:81:7A:5D:E7:BE:36:E7:69
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234302e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e5:5d:6c:38:50:c7:e0:fd:21:88:86:de:51:0c:d8:d2:2f:
2e:a4:b6:80:8f:0c:33:7a:94:11:11:6f:47:d2:dc:2a:43:01:
07:99:41:be:60:80:ce:56:a7:19:51:5e:e9:6f:c4:38:40:dc:
52:a3:bb:0f:29:7c:da:81:d6:ca:8b:3e:56:f5:ce:7c:e4:3e:
eb:20:24:c6:5a:b5:0c:a6:cb:f9:2b:5c:1e:5b:cd:28:84:0a:
73:04:5d:70:c2:a1:e9:f1:7f:5c:bd:8e:33:da:bf:02:21:ca:
68:6c:7f:c2:e1:66:2b:29:61:d2:d5:06:84:ba:77:50:ff:76:
55:5a:70:3e:da:83:75:6d:5e:81:f0:be:ca:c4:88:bc:38:21:
5b:5b:91:15:fe:a2:e9:12:93:bd:73:cf:18:1b:f9:54:1d:19:
97:1c:a1:02:9a:77:46:08:87:83:41:b7:3b:b2:5d:3f:3a:cc:
ee:e8:48:e5:a8:85:48:90:15:5f:a4:ab:69:29:a1:1f:fe:41:
30:ed:a2:2a:4a:44:92:61:ff:5e:c4:d7:7c:31:4e:aa:ac:ee:
0c:10:da:f4:f2:5b:6d:ce:73:3c:c8:5f:42:c9:5b:41:28:85:
9d:69:92:ec:a0:b6:ea:82:28:45:9c:ea:72:74:91:88:ec:d6:
a3:fd:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:46 2026 by rpki-client