This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34332e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34332e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          WlPX4wslaMmIYwPuAyw3XX6PPDA3XjWjzSb8cY3lgp4=
Subject key identifier:   CD:97:F8:F0:1A:06:67:61:F8:FC:6B:45:F2:58:24:9E:D9:B5:8E:71
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       404C32BC447F1B5D4BB260CF5E3E08DC1C2F81AD
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34332e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 06 Jan 2026 19:15:38 +0000
ROA not before:           Tue 06 Jan 2026 19:10:38 +0000
ROA not after:            Tue 05 Jan 2027 19:15:38 +0000
asID:                     27810
IP address blocks:        200.14.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:32:bc:44:7f:1b:5d:4b:b2:60:cf:5e:3e:08:dc:1c:2f:81:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Jan  6 19:10:38 2026 GMT
            Not After : Jan  5 19:15:38 2027 GMT
        Subject: CN=CD97F8F01A066761F8FC6B45F258249ED9B58E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:92:53:22:dd:1a:d5:c4:5c:5f:4c:f3:30:
                    7f:83:0f:85:e4:73:03:bc:45:bb:01:ff:94:d2:61:
                    89:5f:10:d5:38:51:64:dc:43:b5:27:dc:6b:b4:42:
                    19:78:73:d9:b9:5f:71:7c:38:90:ae:c8:11:56:56:
                    67:e0:4f:1c:4b:69:1d:5a:08:c6:81:1b:6d:19:9a:
                    65:a7:95:bd:8b:96:c3:58:6a:8d:a8:d6:eb:00:0b:
                    a6:1b:03:10:fc:08:b1:de:fe:10:f3:c4:69:fe:a6:
                    6d:a6:37:20:e1:fe:48:24:e7:d8:a5:66:69:8d:bb:
                    7d:3b:56:32:c0:66:3f:46:58:0e:da:b4:89:70:a0:
                    68:71:de:e2:dc:f2:cc:2f:d5:67:3b:e9:c4:66:c7:
                    29:3c:8e:5f:3a:1c:d7:f9:81:c3:55:59:60:09:1f:
                    70:71:85:bf:47:c5:62:46:9e:6b:8b:c2:db:d1:de:
                    28:cf:79:1e:e0:4c:74:00:5b:d2:86:27:e7:68:07:
                    97:07:d1:a0:ce:0c:10:26:bf:83:ca:b6:83:41:4d:
                    02:b7:12:08:b6:b1:fa:eb:9d:4e:08:47:aa:88:94:
                    f4:57:8e:a1:86:ba:ab:2c:f8:1c:26:eb:db:58:2f:
                    50:46:64:b2:b9:20:9e:50:3b:f0:30:1c:90:1e:df:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:F8:F0:1A:06:67:61:F8:FC:6B:45:F2:58:24:9E:D9:B5:8E:71
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34332e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:c6:e5:3a:9d:55:0f:78:ce:64:00:0f:05:73:2a:c2:64:
         ee:3f:c4:d7:16:19:7f:74:f8:3a:46:98:df:c0:06:5e:6d:0a:
         cd:5b:b5:d6:fe:b6:76:d1:74:31:b9:4a:ef:ca:e6:71:ab:65:
         37:21:a9:38:df:e2:44:90:1c:a0:9f:6f:af:10:7d:d7:67:9c:
         de:ea:41:54:06:a1:d6:91:eb:4f:cc:73:dd:1e:49:46:2a:0d:
         e4:8f:d1:f0:20:8c:bd:64:8e:82:a0:be:4e:64:80:46:19:69:
         4a:75:83:e4:97:17:1f:69:27:80:2a:22:d1:91:50:ff:2d:6a:
         84:82:ba:a0:98:3c:70:16:4f:61:51:d3:c5:d2:17:1c:ba:9a:
         0d:be:90:1f:30:0b:53:cf:6d:f1:1d:08:a4:ea:78:40:84:03:
         e5:cb:dc:64:ee:fc:1d:e9:b8:00:93:2f:6f:0b:cf:6b:db:2b:
         bd:6e:5d:b7:af:00:f4:26:52:a7:8d:de:94:20:9a:08:1f:e7:
         a4:c4:80:d2:d7:00:c1:e6:94:a7:2f:c2:53:9d:dd:72:c3:35:
         d7:04:0f:3b:ec:98:c2:fa:e2:28:b3:cb:84:49:7f:3c:af:49:
         6f:47:64:90:4b:cd:b3:a6:f3:d0:42:e4:ef:8b:d7:b6:c2:21:
         b6:7c:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:07:05 2026 by rpki-client