This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa
File:                     3230302e32392e3134332e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          41jkkmNosBhOeMnSS6P4wmqnO0sMX2Qo7n3OzzAHZBQ=
Subject key identifier:   B5:AB:86:5F:6E:3B:F5:2C:95:54:76:0D:AB:C7:8C:FD:60:DC:7B:46
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       4B6AF4D191BAD14981211D5CC5799A3A0FA91BB9
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:17 +0000
ROA not before:           Tue 06 Jan 2026 20:49:17 +0000
ROA not after:            Tue 05 Jan 2027 20:54:17 +0000
asID:                     6429
IP address blocks:        200.29.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:f4:d1:91:ba:d1:49:81:21:1d:5c:c5:79:9a:3a:0f:a9:1b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:17 2026 GMT
            Not After : Jan  5 20:54:17 2027 GMT
        Subject: CN=B5AB865F6E3BF52C9554760DABC78CFD60DC7B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:e2:0b:7d:c4:f7:a6:46:4b:60:c5:c3:e1:
                    cd:36:f3:0d:95:01:71:ca:67:dc:c2:4d:ff:31:e7:
                    0c:b5:87:b1:9e:db:30:1d:ea:70:19:d2:2d:ef:81:
                    55:e0:93:8d:1c:ab:10:9f:bc:23:e5:f7:d3:fb:79:
                    27:7a:57:c1:1b:82:08:74:76:d7:34:7e:22:2d:29:
                    1c:9f:51:b1:20:ac:d3:2a:5b:11:77:b4:f1:9a:83:
                    37:19:74:e9:29:8e:00:ee:d2:d7:03:02:51:c4:e8:
                    39:b3:5c:0a:28:b5:9a:1c:0c:97:ed:6d:5c:e6:fc:
                    73:02:e9:65:09:b8:dc:97:f4:d0:40:58:22:47:cc:
                    84:32:1c:ce:ba:dd:5c:ce:d9:22:88:d7:05:1c:63:
                    7a:23:9a:0d:f9:29:fe:c8:2f:bd:b8:ec:ab:7d:6c:
                    5e:fb:21:35:4c:6b:8c:2e:a2:be:5a:41:94:12:8d:
                    2e:8e:8c:d2:08:41:7a:0d:9b:8e:83:90:16:e5:4c:
                    b1:b8:3e:af:40:85:c6:a8:54:06:42:fd:c5:8f:d1:
                    e8:59:54:ac:4e:c5:b7:72:9d:9d:57:24:5e:5d:dd:
                    d5:7c:0f:5c:9e:9c:bd:28:08:68:fd:dd:1c:11:3e:
                    8f:93:90:0e:49:a4:68:ff:dc:ab:6e:42:29:12:f8:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AB:86:5F:6E:3B:F5:2C:95:54:76:0D:AB:C7:8C:FD:60:DC:7B:46
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:12:c9:f5:30:5b:96:ba:0d:83:5d:59:db:ab:82:eb:7c:
         c6:94:35:7b:a4:72:21:d4:a0:db:71:af:ec:3e:9f:f8:7e:f0:
         00:19:de:2a:f6:c2:f1:15:7e:0b:7b:e4:cf:e9:a5:24:74:24:
         8e:e6:74:a1:03:3d:44:72:8c:83:79:d0:63:f7:76:7b:ea:36:
         8c:8f:d0:8b:17:6f:39:c0:77:4f:fa:39:d6:46:c4:85:77:b5:
         d6:44:bf:0b:b6:90:a2:46:71:95:43:19:6b:da:1e:31:1e:ac:
         5b:67:c8:80:b6:e8:6b:81:b3:29:5c:1b:45:d3:33:73:4b:10:
         59:b6:e8:87:09:d3:95:d9:77:ea:81:96:e3:dc:03:e7:f3:59:
         59:9c:9f:5d:63:fa:2f:40:25:16:40:52:d9:91:28:f3:7c:aa:
         ed:53:af:a2:b6:42:70:18:ef:5a:da:7c:3c:30:a2:6d:0f:85:
         d7:51:de:85:73:06:ad:96:f8:62:8f:78:19:4f:21:58:9f:6b:
         92:7b:a3:00:5b:85:db:d0:69:73:2a:d9:ee:f0:de:69:38:78:
         87:61:34:76:95:08:c9:ea:35:52:02:b8:cc:65:02:f9:46:71:
         a1:33:3e:c3:be:81:e0:b9:2f:4f:fe:14:92:8a:4d:97:08:43:
         ec:f7:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:43 2026 by rpki-client