This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/3230302e3132332e3231362e302f32312d3234203d3e20323633323330.roa
File: 3230302e3132332e3231362e302f32312d3234203d3e20323633323330.roa (raw, json)
Hash identifier: rKIlC+yyoig0rfIaIYPF2NBscp1vR0TBKQjV1MgMBfY=
Subject key identifier: A4:69:C6:66:51:B6:63:22:1C:7D:DE:87:76:60:E5:D0:4E:04:1A:99
Certificate issuer: /CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Certificate serial: 53492E0ABE12E409F5FDE2B10D3A60981DE70CA4
Authority key identifier: 4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/3230302e3132332e3231362e302f32312d3234203d3e20323633323330.roa
Signing time: Tue 06 Jan 2026 19:06:09 +0000
ROA not before: Tue 06 Jan 2026 19:01:09 +0000
ROA not after: Tue 05 Jan 2027 19:06:09 +0000
asID: 263230
IP address blocks: 200.123.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl
rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:49:2e:0a:be:12:e4:09:f5:fd:e2:b1:0d:3a:60:98:1d:e7:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Validity
Not Before: Jan 6 19:01:09 2026 GMT
Not After : Jan 5 19:06:09 2027 GMT
Subject: CN=A469C66651B663221C7DDE877660E5D04E041A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:12:58:2d:aa:29:2d:8b:e2:03:67:d7:62:
ca:f3:a5:88:67:6b:db:ac:25:bd:85:79:43:84:0d:
62:a3:dc:89:04:e7:45:f6:9b:ab:20:3b:ff:ab:55:
be:ac:04:45:34:9e:76:67:53:94:90:9c:3c:56:4f:
a2:90:b5:01:6a:d5:26:b6:6c:cd:a9:74:58:2e:35:
17:71:7f:6b:b2:bb:a8:55:60:72:c2:00:42:11:dd:
75:f2:8d:52:24:e8:c0:a1:48:9c:cb:69:22:9f:66:
80:67:ad:f3:17:d3:6a:de:0d:e1:27:ab:1e:e2:ed:
89:6e:61:82:cf:62:d6:39:03:40:53:12:c8:8e:12:
f8:9e:ea:4f:5f:b3:9c:c9:cb:ea:10:20:44:ef:a1:
af:09:06:83:1f:31:ae:e5:33:a8:b8:eb:a3:36:b8:
6a:d1:33:db:46:3c:d4:f6:9a:45:7f:7b:f9:4e:d8:
f2:1e:ef:cd:e9:01:00:d5:6f:05:b2:88:2c:17:cf:
96:82:86:75:42:bc:79:19:d0:ca:92:10:43:4a:cf:
d4:26:36:ac:bd:e5:a9:62:ca:18:9d:69:13:85:86:
79:ba:3a:7b:a2:8f:28:06:da:ec:61:33:1e:97:b4:
46:e0:8f:75:4f:c9:36:a4:ef:22:f0:d8:8e:1c:0a:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:69:C6:66:51:B6:63:22:1C:7D:DE:87:76:60:E5:D0:4E:04:1A:99
X509v3 Authority Key Identifier:
keyid:4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/3230302e3132332e3231362e302f32312d3234203d3e20323633323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.216.0/21
Signature Algorithm: sha256WithRSAEncryption
02:8a:fe:a9:e0:06:3c:5d:04:26:31:2c:8f:75:14:1b:1a:5a:
1e:5e:80:46:8a:e4:0d:27:a8:b1:0c:14:0b:a0:30:61:15:e9:
86:2a:50:d2:a9:2f:f9:9e:4a:cd:ff:4a:54:6c:b3:52:31:0d:
65:ab:5c:d9:22:06:8d:23:4b:f1:4d:bd:44:9c:16:a5:5b:c5:
ef:f6:89:27:a8:6b:65:3a:22:77:de:18:7b:46:19:7e:56:78:
ac:be:ec:82:cb:7c:30:4e:34:14:eb:75:70:68:dc:b0:58:ab:
9c:39:3a:7c:19:e4:e4:01:d1:72:a9:4b:c8:59:c7:d3:37:ed:
3d:3b:a6:ed:69:9d:18:7c:df:b1:6c:e0:e0:d1:76:af:d8:4a:
18:56:4d:66:1b:68:29:40:1a:9b:54:a0:9a:0b:de:c1:f0:88:
c3:bf:f9:1c:08:eb:f3:a9:69:32:06:b5:94:bd:88:8f:cc:32:
62:23:48:5c:90:21:26:f9:78:43:cc:50:4d:57:c5:e3:d2:82:
8a:80:60:19:42:cb:ff:66:58:54:54:92:16:ae:1e:78:e6:18:
71:2b:e3:12:9c:93:bd:4a:49:aa:84:f1:c6:dc:ec:8a:0e:f6:
6c:4c:37:e5:01:81:e2:38:18:b0:9e:19:d6:a2:ae:72:1e:40:
71:f1:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:51:33 2026 by rpki-client