This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
File: 3230302e33332e372e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier: zhojAcPQ4O0f0oGyCKZffxRK01VpFeC+BmmU+o2ZDlc=
Subject key identifier: DD:E8:B2:90:08:A4:32:B4:13:D1:F6:9B:B1:C6:6B:E6:E6:95:34:2D
Certificate issuer: /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial: 4F9D306705F0C5259EEF3CB614230E00244D2586
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
Signing time: Tue 06 Jan 2026 19:17:06 +0000
ROA not before: Tue 06 Jan 2026 19:12:06 +0000
ROA not after: Tue 05 Jan 2027 19:17:06 +0000
asID: 8151
IP address blocks: 200.33.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9d:30:67:05:f0:c5:25:9e:ef:3c:b6:14:23:0e:00:24:4d:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Validity
Not Before: Jan 6 19:12:06 2026 GMT
Not After : Jan 5 19:17:06 2027 GMT
Subject: CN=DDE8B29008A432B413D1F69BB1C66BE6E695342D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:41:16:13:56:f5:61:fa:cc:da:70:3b:b9:
5f:e5:b1:ff:f0:36:72:a3:d9:32:09:c7:47:b4:4c:
1d:ca:86:35:c8:fc:d2:6d:ca:45:67:04:59:ca:03:
72:6a:ed:fc:50:3a:0f:2a:a5:44:4d:85:a1:c4:3b:
25:d6:92:86:4a:c8:90:fa:4e:d5:d5:38:32:cb:23:
1d:3d:2d:57:83:d3:fc:92:11:7c:2f:46:6c:63:a7:
a4:46:8e:85:28:52:1b:48:6f:31:5e:a7:b4:04:8b:
b9:4a:90:4a:3c:44:68:42:4a:6c:22:09:90:52:e2:
b5:a4:7d:ce:da:e0:ed:eb:12:c1:27:2f:61:80:be:
b5:6e:09:05:e1:ad:d4:16:86:4b:fa:c5:ef:0a:40:
a8:1f:6e:37:ab:dc:9c:ff:54:73:43:f8:34:e7:03:
84:14:92:4b:16:d9:51:94:dd:9e:2c:38:60:9b:53:
17:a8:1a:58:0b:1f:29:5d:1d:43:82:2a:db:82:6e:
ad:74:5f:63:29:2b:78:a8:16:5e:d0:10:54:2a:77:
71:84:00:39:9f:a1:c0:7d:be:30:69:c9:b5:62:c9:
86:9e:0d:a2:85:5d:ab:d7:f9:b1:f9:4b:aa:f3:ef:
e2:32:64:9c:96:22:e1:e8:ee:3d:5d:d8:5b:11:59:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:B2:90:08:A4:32:B4:13:D1:F6:9B:B1:C6:6B:E6:E6:95:34:2D
X509v3 Authority Key Identifier:
keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.7.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9b:72:2e:ad:1c:39:5b:58:2c:b1:9e:a3:88:9b:ec:93:76:
ce:8c:5b:fd:29:31:8d:f4:31:d8:97:92:bd:18:40:28:ee:2d:
a5:f9:c0:79:92:c4:45:51:2a:82:e5:15:e3:3f:15:da:0a:51:
b3:c2:5d:cc:d7:b3:b7:e5:d4:3c:67:43:1e:88:fd:18:c6:22:
01:54:4d:f0:5a:f6:e6:f1:b8:44:38:9b:3d:50:a7:1b:90:a1:
ce:4e:3b:d6:d2:83:d8:99:a5:ec:36:7b:b4:8f:8a:3d:00:13:
49:bd:77:d8:73:5f:34:ef:8b:74:75:c6:3e:7c:cb:48:bc:c2:
01:88:27:59:59:fd:18:ce:d7:5d:42:4e:ca:88:a9:4c:84:2d:
2a:33:be:a1:be:70:e6:ec:c1:67:b7:87:9e:4b:49:9b:0b:c8:
5e:73:84:5f:1c:6d:ee:25:ca:3d:b2:4d:2a:e9:fd:a9:51:2d:
3f:5e:56:5d:5e:22:33:ce:52:6d:c7:7a:de:41:ae:a5:dc:a5:
6c:12:e3:3c:eb:ea:61:f1:2d:08:94:26:fd:5b:24:d9:63:f0:
2b:cf:b2:3e:38:e2:6a:b9:cc:31:47:58:20:c0:85:e2:1a:dd:
61:a0:69:33:cd:29:a9:1d:c6:e4:a6:15:dc:be:a0:2d:80:64:
b9:24:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:02:43 2026 by rpki-client