This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa
File: 3230302e32392e34332e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier: t3SgITKKEnUdG/i6uV5wkP0/JfSxe4+DOV3AqP0SNiA=
Subject key identifier: ED:CE:51:81:98:8A:36:D5:9A:C1:6F:09:45:D7:C8:EC:79:BC:DC:1A
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 4B433B5ADCF3232E204F6FE005FACF14CBB62C63
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa
Signing time: Tue 06 Jan 2026 19:24:40 +0000
ROA not before: Tue 06 Jan 2026 19:19:40 +0000
ROA not after: Tue 05 Jan 2027 19:24:40 +0000
asID: 7418
IP address blocks: 200.29.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:43:3b:5a:dc:f3:23:2e:20:4f:6f:e0:05:fa:cf:14:cb:b6:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Jan 6 19:19:40 2026 GMT
Not After : Jan 5 19:24:40 2027 GMT
Subject: CN=EDCE5181988A36D59AC16F0945D7C8EC79BCDC1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:22:10:93:1b:78:9e:d4:f3:f5:56:a8:38:
29:d0:60:a8:43:06:2c:7a:60:af:c8:bc:77:7c:1f:
38:fa:98:46:7c:ca:8f:f1:75:10:2d:44:e7:cb:a5:
16:b9:dd:f1:26:58:a6:68:4e:26:4a:3a:fb:97:d0:
f8:c5:26:b6:c8:be:28:f3:7d:7b:af:eb:4f:1e:3f:
15:70:5d:ed:46:36:97:51:86:e1:98:a9:5f:9f:67:
23:c9:92:df:9f:d2:08:be:f2:47:da:46:10:2a:c5:
dd:da:88:a9:ef:ba:49:b1:bb:82:ba:82:85:03:b4:
ed:34:e5:1b:f9:23:c9:cf:0a:b9:95:0c:d1:a9:ae:
ba:a8:24:57:3e:2b:1e:70:e8:72:88:ee:c0:b6:1d:
48:6a:ac:c8:b7:c2:7c:dd:37:a2:b0:3c:bf:7c:d7:
0c:c0:68:88:bc:6b:a4:cd:93:77:90:82:1e:5b:bb:
1f:04:f4:87:14:0e:75:19:b2:4f:e9:3b:57:1d:f0:
0d:e9:6b:d9:e6:df:d9:72:83:ec:da:c9:02:8f:37:
b7:52:9d:77:db:c1:2e:48:e5:33:7e:98:e5:83:9e:
d4:55:07:69:1b:a2:51:6a:2e:32:e2:bd:7b:1a:b5:
09:dc:f7:ac:90:05:53:8e:d4:0c:1e:d3:40:cc:04:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:51:81:98:8A:36:D5:9A:C1:6F:09:45:D7:C8:EC:79:BC:DC:1A
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ad:e6:37:0f:87:b0:39:79:c9:93:49:c0:8b:8b:b3:84:3c:
bd:cd:8a:c9:c8:21:35:97:bd:7b:9e:4b:e9:18:0e:aa:b8:aa:
e6:90:20:27:ef:e7:28:d6:49:cb:a8:18:84:a5:80:29:71:86:
af:12:7b:80:5d:33:3d:78:2b:6e:19:58:69:ce:56:b0:83:28:
ff:89:50:f4:40:01:d0:fb:b2:e6:f8:c9:e5:31:c4:5e:c3:f9:
60:d0:40:20:25:c6:eb:3e:47:86:bd:07:b4:9d:52:4c:c1:4f:
c7:94:a3:90:0f:51:3a:62:d2:0b:ab:da:eb:0d:75:87:e1:d8:
d1:12:12:71:cb:f1:6b:a2:66:39:80:a3:d8:be:79:a2:c9:81:
95:74:2f:22:32:39:cb:f4:f5:9d:50:d1:c1:d9:d1:98:89:d5:
c8:ab:e8:51:04:20:e3:36:41:78:f6:26:1d:94:04:37:27:8a:
3b:41:4d:3a:28:f9:70:bc:d6:65:02:a7:25:bd:f0:75:02:3f:
62:19:a8:43:57:a2:46:7d:3e:f9:ea:d7:c1:e3:02:84:a3:69:
77:11:a9:16:c1:e0:57:40:21:9a:3b:03:2a:b2:ba:39:b5:8c:
ca:0a:ef:a5:90:e1:10:63:66:09:e0:18:18:0e:6b:6f:2f:38:
fe:b8:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:54:45 2026 by rpki-client