This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e312e302f32342d3234203d3e203237363830.roa File: 3230302e39312e312e302f32342d3234203d3e203237363830.roa (raw, json) Hash identifier: HZQI6sh2Z1yGvBN3VrCIoCxs0FAIq8ylRzKDC+2dKEg= Subject key identifier: 03:07:A9:54:EE:D2:AB:84:AF:0A:0A:EF:10:00:6B:8B:6E:F1:60:C6 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 0F198A94CFDABE4B91457D13DF41D891C0FF547F Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e312e302f32342d3234203d3e203237363830.roa Signing time: Wed 24 Dec 2025 20:56:03 +0000 ROA not before: Wed 24 Dec 2025 20:51:03 +0000 ROA not after: Wed 23 Dec 2026 20:56:03 +0000 asID: 27680 IP address blocks: 200.91.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 20:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:19:8a:94:cf:da:be:4b:91:45:7d:13:df:41:d8:91:c0:ff:54:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Dec 24 20:51:03 2025 GMT Not After : Dec 23 20:56:03 2026 GMT Subject: CN=0307A954EED2AB84AF0A0AEF10006B8B6EF160C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:f4:3c:30:59:c6:27:96:5a:54:16:d2:31: 8b:35:17:a7:f8:4b:1b:a9:ca:2e:fd:a5:38:fc:b1: 11:4f:93:4b:51:ec:f6:2e:8f:fb:0c:1c:c3:08:31: 94:33:ed:8d:9f:41:7d:09:de:8d:66:61:e1:b7:8a: d9:a6:69:44:38:e1:5c:f1:32:2a:df:3a:ef:da:25: fb:a3:22:1b:a7:58:b7:57:b3:a5:2a:91:18:3b:65: 18:20:a3:55:ed:67:8e:a3:45:1d:cb:8c:34:5d:26: 15:84:5d:32:1c:d0:4c:a0:84:fc:99:41:9e:b0:82: 30:b5:80:71:f3:cc:46:08:29:28:cb:7c:70:42:86: e0:9a:29:35:59:f5:c1:4b:4e:00:02:2a:b6:eb:1d: 1a:f3:bc:b3:cf:72:bf:2d:77:a9:b8:b5:81:ed:59: e8:73:83:13:c7:cf:d0:1c:fd:3b:6c:18:60:5c:2c: 08:99:df:84:87:63:6f:14:38:c7:ec:d9:37:89:3e: 93:a1:80:e1:93:9a:83:86:61:10:59:d8:90:71:4c: 6c:50:d7:0d:17:ea:a3:60:8f:63:c0:d3:de:f8:69: 2f:a3:ac:4b:be:55:4d:9e:b0:86:a8:3c:6a:07:29: 6a:75:8a:98:26:1c:cc:57:3c:3f:5d:5c:c2:46:d2: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:A9:54:EE:D2:AB:84:AF:0A:0A:EF:10:00:6B:8B:6E:F1:60:C6 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e312e302f32342d3234203d3e203237363830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.91.1.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e7:98:d7:bf:13:e9:6d:00:f3:a0:36:68:f2:ca:d7:04:d3: d7:50:ac:ce:30:1f:83:da:c6:cb:6d:68:57:87:68:c9:26:f6: 1c:d7:57:29:62:8f:2b:2d:3d:b1:54:8f:bf:eb:a3:d4:d2:a1: b5:8c:1c:59:0f:31:36:75:53:5a:1b:81:d6:24:98:c2:32:8b: f8:89:f3:a8:c5:97:72:98:5c:15:1e:34:2d:75:a4:d4:65:e6: d9:3a:70:4a:ea:d7:e7:46:8b:7f:67:ef:7e:b9:17:0f:c4:74: 13:03:a8:bf:9a:98:80:c0:5b:11:88:8f:57:a4:72:7b:a0:d0: ae:fd:fc:20:5d:22:cb:1d:66:59:17:39:52:1b:f1:4f:f6:ec: 7e:79:90:d8:6e:bc:77:78:d4:31:df:d9:b9:22:6b:2a:4d:93: 17:8c:79:88:33:5c:04:f4:bb:dc:f4:aa:b9:72:22:2f:c6:2d: ce:40:7d:c5:96:15:7b:89:7e:71:bb:0e:c7:10:04:e6:4a:6c: 8c:1a:09:8d:8c:81:10:be:02:b5:fa:48:88:51:57:36:12:63: b3:79:78:d2:aa:43:a4:6f:63:ad:01:dd:c2:07:41:f2:31:0b: 66:5c:12:08:ab:cc:7b:07:ac:b1:a2:17:b0:45:f2:41:af:a4: f3:46:7a:66 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUDxmKlM/avkuRRX0T30HYkcD/VH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNTEyMjQyMDUxMDNaFw0yNjEyMjMyMDU2MDNaMDMxMTAvBgNV BAMTKDAzMDdBOTU0RUVEMkFCODRBRjBBMEFFRjEwMDA2QjhCNkVGMTYwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmY/Q8MFnGJ5ZaVBbSMYs1F6f4 Sxupyi79pTj8sRFPk0tR7PYuj/sMHMMIMZQz7Y2fQX0J3o1mYeG3itmmaUQ44Vzx MirfOu/aJfujIhunWLdXs6UqkRg7ZRggo1XtZ46jRR3LjDRdJhWEXTIc0EyghPyZ QZ6wgjC1gHHzzEYIKSjLfHBChuCaKTVZ9cFLTgACKrbrHRrzvLPPcr8td6m4tYHt WehzgxPHz9Ac/TtsGGBcLAiZ34SHY28UOMfs2TeJPpOhgOGTmoOGYRBZ2JBxTGxQ 1w0X6qNgj2PA0974aS+jrEu+VU2esIaoPGoHKWp1ipgmHMxXPD9dXMJG0v2dAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUAwepVO7Sq4SvCgrvEABri27xYMYwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMTJlMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFsBMA0GCSqG SIb3DQEBCwUAA4IBAQBj55jXvxPpbQDzoDZo8srXBNPXUKzOMB+D2sbLbWhXh2jJ JvYc11cpYo8rLT2xVI+/66PU0qG1jBxZDzE2dVNaG4HWJJjCMov4ifOoxZdymFwV HjQtdaTUZebZOnBK6tfnRot/Z+9+uRcPxHQTA6i/mpiAwFsRiI9XpHJ7oNCu/fwg XSLLHWZZFzlSG/FP9ux+eZDYbrx3eNQx39m5ImsqTZMXjHmIM1wE9Lvc9Kq5ciIv xi3OQH3FlhV7iX5xuw7HEATmSmyMGgmNjIEQvgK1+kiIUVc2EmOzeXjSqkOkb2Ot Ad3CB0HyMQtmXBIIq8x7B6yxohewRfJBr6TzRnpm -----END CERTIFICATE-----Generated at Tue Jan 13 05:20:17 2026 by rpki-client