This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
File: 3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (raw, json)
Hash identifier: jXdKpKpA4VVqVKy9CzMtyV7yz4vaud6xY0rkj7g/MrY=
Subject key identifier: 08:34:69:D9:0B:FD:BD:FD:53:C8:D4:67:E8:6B:0E:2D:67:80:1B:9D
Certificate issuer: /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial: 08D65EE61A6C9B75246A198225FDCA41253014B9
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
Signing time: Tue 06 Jan 2026 19:18:19 +0000
ROA not before: Tue 06 Jan 2026 19:13:19 +0000
ROA not after: Tue 05 Jan 2027 19:18:19 +0000
asID: 52419
IP address blocks: 200.31.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d6:5e:e6:1a:6c:9b:75:24:6a:19:82:25:fd:ca:41:25:30:14:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Validity
Not Before: Jan 6 19:13:19 2026 GMT
Not After : Jan 5 19:18:19 2027 GMT
Subject: CN=083469D90BFDBDFD53C8D467E86B0E2D67801B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:5d:1b:2b:a8:be:96:e1:29:bc:9d:7e:87:
0c:c3:ac:30:9e:ab:c2:fb:be:6d:3a:a7:a2:ea:17:
cc:80:b7:3a:d4:af:31:bc:52:40:48:0c:f8:d2:92:
ae:8a:af:7a:f0:9b:54:17:e9:60:cd:f5:52:43:7e:
44:98:21:6a:9e:a3:6a:19:3d:8f:01:36:2f:f0:c3:
61:43:83:1d:c9:0d:87:b0:cc:f2:fa:8a:c8:69:99:
bb:7d:ad:65:56:e6:33:3a:19:7e:64:61:d6:3a:cc:
e5:05:c1:54:aa:e1:56:12:1d:fb:89:a2:29:cd:ff:
1f:e0:c3:f5:26:67:de:fd:ed:65:85:87:da:b3:6a:
c3:c8:1d:6c:5b:9c:20:87:6c:06:6d:93:61:d4:1e:
32:9c:2f:55:e8:27:52:e5:b2:99:a5:51:eb:67:76:
4f:15:0f:d7:96:a8:da:c9:54:31:d1:02:64:98:a7:
78:f8:7e:4e:15:84:15:f3:44:f6:da:2d:66:d3:78:
92:75:e6:f1:27:fb:93:e3:75:7b:9b:f7:75:2e:cf:
0a:ad:0d:09:3d:01:38:8b:43:fb:55:03:88:45:fb:
da:1f:c9:01:4b:5e:8b:2d:a2:8d:ab:b8:5f:4c:71:
ec:2e:2b:3d:8d:f4:49:02:a8:a5:56:70:61:7e:ff:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:69:D9:0B:FD:BD:FD:53:C8:D4:67:E8:6B:0E:2D:67:80:1B:9D
X509v3 Authority Key Identifier:
keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.240.0/20
Signature Algorithm: sha256WithRSAEncryption
13:8e:7f:d2:fe:fc:d0:d5:ad:29:73:4d:8d:4e:e9:2f:a3:3a:
29:b7:59:cf:06:e1:8a:da:9c:1c:85:73:d9:44:6b:7a:ff:1a:
c7:a3:2b:a8:61:96:a3:05:81:e4:9e:0f:77:c8:d3:19:07:bb:
df:0d:9f:e8:0a:c0:79:ed:3e:18:b2:57:43:53:1f:02:f3:85:
c7:6c:58:42:17:7b:b9:11:96:a0:55:7a:2f:67:cf:d2:4f:54:
01:83:41:58:3a:fc:a3:5e:23:05:47:3d:c6:ac:d8:ac:1c:13:
5d:48:df:67:56:db:ca:dd:ad:3d:7f:ae:b5:bd:a7:a9:59:2e:
8f:ce:72:57:7d:33:da:82:74:0c:1b:ba:16:be:ba:ad:13:63:
bb:5f:85:23:fd:56:fb:fa:3b:84:d9:f2:9d:72:99:9a:d9:8f:
28:1a:36:f3:05:4a:b3:d7:05:2c:4c:c0:d3:2b:27:21:be:e4:
d0:6e:a9:bb:b5:9d:d6:55:b8:d5:bf:f1:a8:a1:b5:54:75:bd:
a5:94:d1:56:dc:43:56:65:b6:71:08:24:d2:f7:20:ab:d5:a6:
54:e3:c2:35:f5:a1:3a:39:ce:b8:7d:a5:9b:a2:49:5e:73:4d:
07:3b:44:fd:e0:0c:bd:f2:e4:b8:8e:01:b9:13:98:d6:21:9c:
2e:47:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:11 2026 by rpki-client