This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa File: 3230302e33332e32302e302f32342d3234203d3e203238333939.roa (raw, json) Hash identifier: fjeyyZwPJr0OoJcrpdp9G/0Pi4xs5npDfJXY22w87Mw= Subject key identifier: 82:22:BC:74:8C:45:2F:8C:90:8E:7E:95:8C:E0:26:30:17:67:24:5F Certificate issuer: /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Certificate serial: 126EE250984726D470CCD9B2135A91C11E5AEBCE Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa Signing time: Fri 19 Dec 2025 04:55:22 +0000 ROA not before: Fri 19 Dec 2025 04:50:22 +0000 ROA not after: Fri 18 Dec 2026 04:55:22 +0000 asID: 28399 IP address blocks: 200.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Jan 2026 12:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6e:e2:50:98:47:26:d4:70:cc:d9:b2:13:5a:91:c1:1e:5a:eb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Validity Not Before: Dec 19 04:50:22 2025 GMT Not After : Dec 18 04:55:22 2026 GMT Subject: CN=8222BC748C452F8C908E7E958CE026301767245F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:43:87:f2:d5:42:dd:7d:d2:3e:47:9a:f4: a0:6c:ef:8b:87:14:c0:0c:81:10:5b:3a:35:d3:90: 3f:e4:27:d0:62:14:0e:91:4c:b1:f5:de:c7:0f:25: 2e:a5:48:02:e9:33:ff:7c:5f:f8:67:fd:00:85:65: 22:70:64:c0:b9:7d:97:85:cb:86:6c:7a:31:01:1a: 6c:51:18:6d:c8:6b:c1:73:98:73:f6:1a:24:20:ab: 9f:d2:b4:74:67:08:77:48:46:5d:ce:7e:c7:02:81: 31:8e:4f:ea:43:23:05:25:cb:4b:bb:1a:d5:74:7f: b7:f9:d8:f3:74:33:04:60:d4:30:40:d7:f3:4f:7b: 73:d2:55:b8:02:a9:90:d3:a4:ae:15:a5:fa:e4:75: 08:a6:f0:30:5f:0e:78:79:02:d7:34:c7:c3:9f:7c: d9:bd:51:03:9f:61:19:3c:10:03:3b:58:61:6f:a7: 2c:ab:19:45:1f:5a:bc:4d:60:41:b3:3d:43:d5:ae: fd:3b:0b:63:06:d5:6e:87:12:7c:c5:0b:bc:a6:9c: eb:e7:69:c1:f2:f5:9c:9c:bd:be:76:23:fb:e3:da: d2:06:ce:b1:d7:86:2a:7c:3f:e7:5b:58:50:ff:d7: 91:05:b3:de:56:f3:25:49:98:55:ee:f3:eb:e8:57: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:BC:74:8C:45:2F:8C:90:8E:7E:95:8C:E0:26:30:17:67:24:5F X509v3 Authority Key Identifier: keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.20.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f1:8a:a0:a2:87:0d:3f:e4:c8:c2:8f:d7:f9:71:d8:5d:63: 5f:1f:f2:5e:85:a4:8e:19:d5:9b:18:5a:04:53:8e:d5:37:91: ba:19:1a:08:83:ae:14:a4:fb:ff:2b:5b:b4:dc:4f:a9:a0:75: 20:5a:45:8f:f8:65:c7:04:f8:60:f9:82:d5:c3:85:74:ec:f1: 44:19:ed:b6:45:ac:bb:5c:e1:55:05:a0:35:fb:52:ab:ee:dc: a3:8b:5a:b0:0e:65:bf:08:22:6e:b9:e0:b6:88:4a:36:a4:89: 26:dd:aa:41:53:2f:00:80:c4:e6:8a:e9:2c:aa:c8:ab:54:fc: b7:5f:97:da:1d:d3:29:49:e3:70:29:21:e1:29:ef:94:0b:42: 7b:6c:33:27:fe:db:5c:a3:63:07:81:59:fa:2d:21:ac:4d:9f: 3a:0e:c7:cb:a1:e2:b9:80:d8:80:c8:62:27:f2:b3:88:0a:88: 56:1e:6c:2a:f9:9d:bb:28:36:d0:84:20:94:34:2c:5b:50:bb: 83:84:8d:67:0b:d7:d5:77:5c:6a:6d:f1:e3:ee:54:df:18:64: 51:10:ee:5b:04:81:b1:8a:d9:bd:30:df:0a:a0:7d:6e:cf:2e: 45:be:45:78:38:72:c0:40:10:ca:c4:bf:85:9f:70:91:c5:a4: d1:5f:3e:1f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUEm7iUJhHJtRwzNmyE1qRwR5a684wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5RDE1M0RBQTk5 QTdBOURBQzAeFw0yNTEyMTkwNDUwMjJaFw0yNjEyMTgwNDU1MjJaMDMxMTAvBgNV BAMTKDgyMjJCQzc0OEM0NTJGOEM5MDhFN0U5NThDRTAyNjMwMTc2NzI0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoUOH8tVC3X3SPkea9KBs74uH FMAMgRBbOjXTkD/kJ9BiFA6RTLH13scPJS6lSALpM/98X/hn/QCFZSJwZMC5fZeF y4ZsejEBGmxRGG3Ia8FzmHP2GiQgq5/StHRnCHdIRl3OfscCgTGOT+pDIwUly0u7 GtV0f7f52PN0MwRg1DBA1/NPe3PSVbgCqZDTpK4VpfrkdQim8DBfDnh5Atc0x8Of fNm9UQOfYRk8EAM7WGFvpyyrGUUfWrxNYEGzPUPVrv07C2MG1W6HEnzFC7ymnOvn acHy9Zycvb52I/vj2tIGzrHXhip8P+dbWFD/15EFs95W8yVJmFXu8+voVwMlAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUgiK8dIxFL4yQjn6VjOAmMBdnJF8wHwYDVR0j BBgwFoAUg05KPVs29QPMeZPZ0VPaqZp6nawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2 REFFNkQ5MEE4RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUw M0NDNzk5M0Q5RDE1M0RBQTk5QTdBOURBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzRFNEEzRDVCMzZGNTAzQ0M3 OTkzRDlEMTUzREFBOTlBN0E5REFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3NzY1RkNCQTlFNkRBRTZEOTBB OEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzMyMzAzMDJlMzMzMzJlMzIzMDJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIRQwDQYJ KoZIhvcNAQELBQADggEBAFDxiqCihw0/5MjCj9f5cdhdY18f8l6FpI4Z1ZsYWgRT jtU3kboZGgiDrhSk+/8rW7TcT6mgdSBaRY/4ZccE+GD5gtXDhXTs8UQZ7bZFrLtc 4VUFoDX7Uqvu3KOLWrAOZb8IIm654LaISjakiSbdqkFTLwCAxOaK6SyqyKtU/Ldf l9od0ylJ43ApIeEp75QLQntsMyf+21yjYweBWfotIaxNnzoOx8uh4rmA2IDIYify s4gKiFYebCr5nbsoNtCEIJQ0LFtQu4OEjWcL19V3XGpt8ePuVN8YZFEQ7lsEgbGK 2b0w3wqgfW7PLkW+RXg4csBAEMrEv4WfcJHFpNFfPh8= -----END CERTIFICATE-----Generated at Fri Jan 2 11:32:32 2026 by rpki-client