This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3139312e302f32342d3234203d3e2036343239.roa
File:                     3230302e32392e3139312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          lLmxjEKN79qTu/r5QnMemIaUzpX7LRqahcKiLu1VqNM=
Subject key identifier:   09:B9:9B:67:A6:07:AB:8A:E1:A4:CD:E8:C7:D9:2E:62:D1:13:F7:68
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       3B7DFFFAB843384CB721F3ECE01C2F90558B61B9
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3139312e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:15 +0000
ROA not before:           Tue 06 Jan 2026 20:49:15 +0000
ROA not after:            Tue 05 Jan 2027 20:54:15 +0000
asID:                     6429
IP address blocks:        200.29.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7d:ff:fa:b8:43:38:4c:b7:21:f3:ec:e0:1c:2f:90:55:8b:61:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:15 2026 GMT
            Not After : Jan  5 20:54:15 2027 GMT
        Subject: CN=09B99B67A607AB8AE1A4CDE8C7D92E62D113F768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3f:b3:e9:03:12:f4:ab:f5:a6:ce:03:fc:4f:
                    36:3f:ba:5d:55:a1:b6:ac:36:0a:f8:1d:fb:4f:58:
                    0e:42:d8:b9:55:0d:14:28:db:9f:0f:db:86:ab:55:
                    6c:67:90:96:07:2e:f3:53:b3:be:bb:ca:75:55:52:
                    08:56:50:7a:b7:b9:9b:ad:8e:a7:4c:6e:71:7d:1b:
                    31:31:4e:10:6e:e5:1f:17:0d:07:fa:52:7c:2b:be:
                    bd:ad:32:d4:1f:d9:0b:61:4b:02:f6:6a:f2:4b:12:
                    52:9c:6b:3e:1b:19:99:1c:fd:4b:3e:f8:55:f5:bd:
                    17:63:aa:75:19:5a:aa:b0:af:50:49:5d:c5:c6:84:
                    fe:50:c1:e0:4c:9a:aa:d5:76:76:c4:ed:7f:f7:c1:
                    5c:b9:fd:df:72:05:1e:71:64:88:cf:1e:e3:77:31:
                    53:f6:c1:85:e6:9c:33:37:ae:c0:d6:5a:14:67:10:
                    b5:19:b6:fc:c2:dc:1a:75:b6:29:1f:50:4e:ab:6d:
                    c2:31:72:43:c3:d2:c2:48:c1:a5:8e:c7:56:06:de:
                    a5:fa:97:94:ec:b4:48:39:eb:2d:91:d8:81:d6:6e:
                    14:bf:f6:db:42:d5:3a:d1:a4:11:0c:cb:07:88:65:
                    1b:7a:58:91:98:7a:72:20:72:a0:78:7c:27:01:42:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:9B:67:A6:07:AB:8A:E1:A4:CD:E8:C7:D9:2E:62:D1:13:F7:68
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3139312e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:56:05:e5:07:39:63:45:86:eb:54:91:44:13:03:e7:43:e0:
         fb:89:5d:83:97:d1:76:10:e1:cd:68:87:65:14:b1:6a:11:c8:
         03:17:8f:c3:8b:0e:43:97:ed:99:45:28:15:7a:16:a0:00:97:
         9a:d9:f5:a8:80:4e:2b:8f:38:c0:40:53:ae:bd:a8:fc:89:30:
         da:c5:b3:e2:7b:8d:6c:8b:eb:fa:f4:af:0a:b8:56:c3:f3:25:
         13:79:53:cb:ef:e9:ff:0e:65:a7:4c:28:85:e5:f8:b1:32:66:
         65:65:04:e7:89:31:8f:f2:00:05:e9:13:29:02:83:a1:30:56:
         7b:a1:56:2d:cb:7e:b8:34:5b:e0:6a:ce:dd:39:df:a6:b9:33:
         c1:59:e7:fe:a2:74:75:26:b2:76:03:24:8a:b5:99:64:c2:78:
         7e:12:08:4d:d0:d4:ec:15:b1:92:3e:63:ff:95:27:8f:e4:d3:
         4b:18:c1:a0:30:1c:71:a1:93:73:a0:f7:b8:61:c3:28:35:eb:
         58:ea:dd:fe:a6:8d:7b:8b:85:4c:3f:24:5c:f7:42:43:5b:77:
         1b:93:a7:99:01:2a:13:ba:a2:ac:a7:ff:b7:3c:0d:81:54:b9:
         70:b3:37:4b:ef:ff:a0:44:9a:e4:41:df:7b:f3:46:8e:6a:6a:
         77:75:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:45 2026 by rpki-client