This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
File: 3230302e39302e3230382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier: Z0MRyTYxAQ5IeW9iaTjLWbIZB5MvUN89ToJI/9FHiJE=
Subject key identifier: DA:A2:09:8E:F4:B3:48:37:39:FE:39:85:52:A5:C1:04:33:4F:1C:4C
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 5CF03C61F79E24CD7DABDE5B1160FB711839C791
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
Signing time: Tue 06 Jan 2026 19:24:40 +0000
ROA not before: Tue 06 Jan 2026 19:19:40 +0000
ROA not after: Tue 05 Jan 2027 19:24:40 +0000
asID: 16629
IP address blocks: 200.90.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f0:3c:61:f7:9e:24:cd:7d:ab:de:5b:11:60:fb:71:18:39:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Jan 6 19:19:40 2026 GMT
Not After : Jan 5 19:24:40 2027 GMT
Subject: CN=DAA2098EF4B3483739FE398552A5C104334F1C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:eb:0c:94:30:50:54:6e:54:62:2b:d2:2b:
05:71:2f:02:28:e8:84:4f:21:0a:14:66:4c:c7:c1:
f8:81:8b:de:53:06:02:d1:5a:57:fc:d0:0c:ee:c6:
42:e1:96:40:e1:d3:bd:c6:45:ea:b6:62:80:ac:a4:
ad:b4:d5:dc:0d:5d:41:ca:3d:d2:57:64:0b:6d:49:
16:d9:07:d9:3c:de:90:6f:f3:46:45:e9:17:dd:ec:
ae:ea:47:28:93:8b:d3:ff:39:38:73:74:5c:ef:39:
60:e8:31:38:df:49:83:ff:95:29:e7:b9:3b:55:60:
e9:6d:de:59:16:31:bb:a6:14:8d:b5:b5:fe:f6:bc:
9e:d8:81:9e:26:61:69:03:e0:37:cf:1a:94:17:b3:
ba:1c:be:fd:fa:fc:46:af:86:c4:53:4f:ea:09:24:
87:98:6e:1c:32:3f:a1:d2:cf:2f:7f:fb:44:86:4c:
dd:1f:25:3b:41:01:93:ff:75:d8:cd:ed:05:dc:2b:
ec:52:98:74:dd:33:3f:81:6d:a0:22:d8:e8:1e:de:
12:4f:5b:79:09:49:76:c9:ea:d4:ec:9b:28:3f:15:
83:ba:21:13:5c:44:23:fa:ef:27:da:23:0d:ff:92:
8a:9b:e9:70:89:d8:a3:84:b0:40:dd:68:f7:4e:0d:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A2:09:8E:F4:B3:48:37:39:FE:39:85:52:A5:C1:04:33:4F:1C:4C
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:1a:1e:bc:27:32:36:c7:df:3c:98:a3:eb:98:6d:e5:a5:d5:
ab:eb:21:d8:ea:87:19:16:f7:0e:b6:a3:d1:3c:4c:4d:a3:92:
e7:ac:b2:fd:71:31:d0:67:9c:52:9d:1e:ba:a6:2c:2b:1b:8f:
76:e4:a0:22:34:d9:05:45:b4:d0:e8:b9:36:3b:9d:d6:cd:75:
1c:72:2f:68:98:62:2c:26:84:f9:82:89:ca:d0:ef:b0:0a:5b:
36:76:49:ec:55:23:b8:e5:15:9b:c4:c4:db:06:f8:5b:93:b5:
90:cc:c5:1c:c9:6b:b5:97:79:0a:9e:fc:30:c4:74:54:74:e3:
7b:cb:1d:37:a7:78:33:9e:06:b3:20:c2:83:2d:fe:91:90:11:
e8:80:4a:f2:ad:21:cb:0e:db:8c:8e:4c:b8:e5:27:93:1f:e6:
df:2c:06:e5:e2:30:8b:a0:5b:f1:ba:5c:81:65:8e:ff:4a:0f:
7a:48:9b:00:5b:15:46:6b:06:97:c3:91:c1:13:17:16:3b:cc:
db:c2:6b:0c:5e:08:91:6f:8e:a1:6f:4f:0e:56:74:0c:e6:ef:
cd:9f:68:ee:9a:e6:8e:df:fc:52:97:fc:6c:c3:52:bb:60:94:
33:40:eb:d7:88:98:1d:13:e1:82:53:d4:6d:bb:a0:33:ea:65:
da:04:98:57
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXPA8YfeeJM19q95bEWD7cRg5x5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNjAxMDYxOTE5NDBaFw0yNzAxMDUxOTI0NDBaMDMxMTAvBgNV
BAMTKERBQTIwOThFRjRCMzQ4MzczOUZFMzk4NTUyQTVDMTA0MzM0RjFDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6+sMlDBQVG5UYivSKwVxLwIo
6IRPIQoUZkzHwfiBi95TBgLRWlf80AzuxkLhlkDh073GReq2YoCspK201dwNXUHK
PdJXZAttSRbZB9k83pBv80ZF6Rfd7K7qRyiTi9P/OThzdFzvOWDoMTjfSYP/lSnn
uTtVYOlt3lkWMbumFI21tf72vJ7YgZ4mYWkD4DfPGpQXs7ocvv36/EavhsRTT+oJ
JIeYbhwyP6HSzy9/+0SGTN0fJTtBAZP/ddjN7QXcK+xSmHTdMz+BbaAi2Oge3hJP
W3kJSXbJ6tTsmyg/FYO6IRNcRCP67yfaIw3/koqb6XCJ2KOEsEDdaPdODY6pAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2qIJjvSzSDc5/jmFUqXBBDNPHEwwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMDJlMzIzMDM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMha0DAN
BgkqhkiG9w0BAQsFAAOCAQEAoBoevCcyNsffPJij65ht5aXVq+sh2OqHGRb3Draj
0TxMTaOS56yy/XEx0GecUp0euqYsKxuPduSgIjTZBUW00Oi5Njud1s11HHIvaJhi
LCaE+YKJytDvsApbNnZJ7FUjuOUVm8TE2wb4W5O1kMzFHMlrtZd5Cp78MMR0VHTj
e8sdN6d4M54GsyDCgy3+kZAR6IBK8q0hyw7bjI5MuOUnkx/m3ywG5eIwi6Bb8bpc
gWWO/0oPekibAFsVRmsGl8ORwRMXFjvM28JrDF4IkW+OoW9PDlZ0DObvzZ9o7prm
jt/8Upf8bMNSu2CUM0Dr14iYHRPhglPUbbugM+pl2gSYVw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 12:38:16 2026 by rpki-client