This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
File: 3230302e39312e302e302f31392d3234203d3e2037303034.roa (raw, json)
Hash identifier: F3ibYZei+R4Jys1XDaPDq8gzq4ERuRrPkg6XLpSkLYo=
Subject key identifier: C7:E1:58:3E:A6:DF:2C:DC:56:A2:5F:46:60:E1:E3:76:CC:08:2F:CA
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 4451333FB28C9746A3EFD4F5319C7CB14E30E037
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
Signing time: Wed 24 Dec 2025 20:56:04 +0000
ROA not before: Wed 24 Dec 2025 20:51:04 +0000
ROA not after: Wed 23 Dec 2026 20:56:04 +0000
asID: 7004
IP address blocks: 200.91.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:51:33:3f:b2:8c:97:46:a3:ef:d4:f5:31:9c:7c:b1:4e:30:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Dec 24 20:51:04 2025 GMT
Not After : Dec 23 20:56:04 2026 GMT
Subject: CN=C7E1583EA6DF2CDC56A25F4660E1E376CC082FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:f3:de:b0:45:72:61:e5:7f:00:4f:74:54:
69:24:31:d0:98:dc:0d:1c:5e:f4:a6:00:7c:3f:f0:
7d:5a:e9:83:55:62:da:cb:78:b4:05:31:af:a6:93:
5b:53:30:9b:17:5d:1e:ca:a5:b1:63:2f:5b:4b:14:
90:63:c2:28:ed:d4:bd:74:8b:3a:26:3b:63:30:98:
2f:38:f2:68:a7:2a:48:2f:b8:97:8a:cb:d2:d0:1e:
1e:99:c6:56:0d:42:65:a1:af:e2:84:74:d4:93:8c:
8d:0d:e2:eb:ed:02:71:59:df:31:39:9c:9d:8b:dc:
b5:4a:da:e6:61:b0:9b:a5:1b:f3:4b:11:54:37:99:
16:7d:20:d1:64:56:18:28:5b:7a:c9:e9:52:cf:5d:
2a:24:94:cf:4e:56:4e:c5:2a:47:c1:5a:b6:ce:cb:
59:35:e4:94:ef:12:34:d0:db:0e:38:cb:79:03:0a:
6c:ce:1c:d2:bc:65:de:1a:fb:29:a0:18:99:8e:6e:
b7:1a:80:16:f8:95:38:01:c3:c5:10:c7:ef:19:f6:
98:1e:18:8d:3d:f6:f2:d6:a0:34:85:e0:ee:03:f1:
61:5f:4d:bb:25:1c:d6:a6:fe:6d:4e:27:f7:50:02:
87:4d:a2:bb:b1:f6:01:16:5f:44:58:a7:b5:8f:cb:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:58:3E:A6:DF:2C:DC:56:A2:5F:46:60:E1:E3:76:CC:08:2F:CA
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.0.0/19
Signature Algorithm: sha256WithRSAEncryption
48:11:c1:26:af:29:f3:00:ec:68:45:8c:66:59:e0:25:1d:55:
df:3f:f7:ee:6b:2a:65:2e:c5:0a:c1:c7:9b:d1:86:b2:10:18:
fd:d1:70:c2:75:72:a4:7a:46:ef:a8:7e:b2:34:0d:5a:0d:f0:
35:bb:5d:89:c4:7f:81:77:63:c4:78:e0:7d:8c:53:eb:3d:71:
bd:dd:11:02:79:75:80:f9:57:7f:25:dd:25:3b:69:97:31:c9:
a1:75:85:19:22:e5:d9:00:51:59:55:48:80:27:7c:12:14:81:
36:75:81:c6:6b:07:ec:b5:1a:39:29:80:c1:32:53:04:27:9e:
ea:6b:cf:0a:0c:ae:2e:d4:bc:f2:a1:4f:b3:9d:8e:0e:cb:7e:
0e:23:3d:25:9d:b5:a1:a9:c5:3e:b5:9d:32:09:b8:31:c6:74:
94:45:ed:81:ec:df:df:1b:b6:ea:c7:b5:10:a6:68:2a:7d:03:
5a:3b:77:07:e5:fa:12:c8:51:3e:f1:85:73:d9:d1:4d:ea:3e:
99:87:43:cd:00:a0:21:ce:5c:a7:54:cc:dc:72:2c:e7:3c:5c:
59:12:7f:8b:89:e1:c0:a2:58:d3:2a:bd:03:a0:ce:68:04:23:
46:84:2c:b1:4f:74:5e:18:1a:2b:00:82:0c:d8:42:49:8e:8c:
fb:bd:10:04
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIURFEzP7KMl0aj79T1MZx8sU4w4DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTEyMjQyMDUxMDRaFw0yNjEyMjMyMDU2MDRaMDMxMTAvBgNV
BAMTKEM3RTE1ODNFQTZERjJDREM1NkEyNUY0NjYwRTFFMzc2Q0MwODJGQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpfPesEVyYeV/AE90VGkkMdCY
3A0cXvSmAHw/8H1a6YNVYtrLeLQFMa+mk1tTMJsXXR7KpbFjL1tLFJBjwijt1L10
izomO2MwmC848minKkgvuJeKy9LQHh6ZxlYNQmWhr+KEdNSTjI0N4uvtAnFZ3zE5
nJ2L3LVK2uZhsJulG/NLEVQ3mRZ9INFkVhgoW3rJ6VLPXSoklM9OVk7FKkfBWrbO
y1k15JTvEjTQ2w44y3kDCmzOHNK8Zd4a+ymgGJmObrcagBb4lTgBw8UQx+8Z9pge
GI099vLWoDSF4O4D8WFfTbslHNam/m1OJ/dQAodNorux9gEWX0RYp7WPyw4jAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUx+FYPqbfLNxWol9GYOHjdswIL8owHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMTJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchbADANBgkqhkiG
9w0BAQsFAAOCAQEASBHBJq8p8wDsaEWMZlngJR1V3z/37msqZS7FCsHHm9GGshAY
/dFwwnVypHpG76h+sjQNWg3wNbtdicR/gXdjxHjgfYxT6z1xvd0RAnl1gPlXfyXd
JTtplzHJoXWFGSLl2QBRWVVIgCd8EhSBNnWBxmsH7LUaOSmAwTJTBCee6mvPCgyu
LtS88qFPs52ODst+DiM9JZ21oanFPrWdMgm4McZ0lEXtgezf3xu26se1EKZoKn0D
Wjt3B+X6EshRPvGFc9nRTeo+mYdDzQCgIc5cp1TM3HIs5zxcWRJ/i4nhwKJY0yq9
A6DOaAQjRoQssU90XhgaKwCCDNhCSY6M+70QBA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:21 2026 by rpki-client