This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa
File:                     3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          ESuTyk3c7hfcbymlECRCj4iaCw46x9LV4c1vfRqyc9I=
Subject key identifier:   94:64:18:09:1D:E1:2E:36:15:EE:04:25:69:30:3D:47:F6:48:FA:E5
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       2A7C7A0D01B74603201B08921CBB09FF64FAA88F
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:27:42 +0000
ROA not before:           Tue 06 Jan 2026 19:22:42 +0000
ROA not after:            Tue 05 Jan 2027 19:27:42 +0000
asID:                     27947
IP address blocks:        200.125.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:7a:0d:01:b7:46:03:20:1b:08:92:1c:bb:09:ff:64:fa:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Jan  6 19:22:42 2026 GMT
            Not After : Jan  5 19:27:42 2027 GMT
        Subject: CN=946418091DE12E3615EE042569303D47F648FAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:de:ea:58:e8:fa:92:e0:c5:14:0c:83:64:
                    51:47:b9:69:69:ae:30:47:73:31:ab:1d:76:0c:12:
                    41:3f:90:d2:ae:6a:0c:6f:fa:18:dc:5e:95:45:fc:
                    ca:5f:3b:d3:ad:91:5a:b5:d2:e4:d5:51:6f:b7:a6:
                    f1:bf:b6:d0:f2:b8:f3:f7:04:91:7e:28:2d:49:ed:
                    e2:be:bf:f0:c2:9a:b0:a4:dd:f5:3d:4f:2c:2d:ab:
                    ba:83:79:48:23:6c:06:95:05:7d:5f:13:e6:da:4d:
                    47:7b:01:fe:b8:31:63:a2:50:26:b8:e4:08:97:de:
                    43:5a:ad:a8:37:61:89:0e:d7:d7:f9:88:e9:59:34:
                    84:09:92:22:b0:8b:6e:6e:52:3d:19:5b:09:4e:2e:
                    c8:86:78:7e:52:da:3d:72:41:90:7e:5e:3b:6d:a2:
                    fd:78:7b:6c:36:ec:6a:21:91:25:eb:7b:57:0e:8f:
                    bb:7c:38:ca:d8:ab:34:ac:04:a2:77:86:dd:1a:28:
                    cc:be:dc:36:68:03:7a:ca:f4:5a:15:e8:fa:ae:16:
                    93:d1:65:ab:cc:01:2f:c1:0a:91:34:c2:77:a4:b0:
                    3c:58:7c:d1:73:5f:9e:a7:56:4e:f8:50:24:38:74:
                    b1:d9:3d:d8:7c:bb:6d:12:cd:3c:68:8b:9c:71:f4:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:18:09:1D:E1:2E:36:15:EE:04:25:69:30:3D:47:F6:48:FA:E5
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:29:a7:73:f2:b3:1f:bf:16:10:f7:0a:cc:93:e4:54:6a:
         e8:ef:5b:98:0b:2e:73:4b:45:c7:1d:fa:21:25:0d:cd:09:ae:
         f8:44:65:ea:04:66:54:ae:0b:4a:8e:b6:f3:a8:aa:d0:73:9f:
         2c:cd:33:7c:20:15:72:5b:45:d8:fd:c2:d2:14:a8:5e:92:77:
         1a:50:4e:4e:a7:aa:55:6e:94:f3:35:77:3d:dd:fd:e8:e7:3f:
         8b:70:79:69:24:92:fa:4d:76:7c:c3:7a:1d:66:65:2e:8a:a2:
         0f:85:1b:fe:01:eb:89:9e:4e:b9:74:9b:11:c8:05:00:a7:84:
         e1:60:c8:2e:6c:10:7e:62:52:b6:b9:b8:22:e6:ba:e8:b4:23:
         a6:5d:cd:9c:34:00:0c:d3:ad:73:fc:e1:93:10:00:da:6a:2a:
         22:ac:30:14:73:ff:7e:41:91:05:24:32:3b:97:ae:a9:a1:86:
         86:9e:e8:d7:94:43:2f:45:0c:92:db:8c:05:72:d3:3e:9f:f0:
         b3:0c:e7:d7:74:60:ff:b9:52:2a:4c:81:1d:12:16:85:56:59:
         28:34:6b:82:3b:9c:55:f6:cc:ab:96:a4:bb:f4:2c:42:2f:21:
         f2:0b:a8:dc:a1:bd:90:e2:5c:98:b2:bb:df:9f:ab:ef:26:c4:
         95:f0:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:24 2026 by rpki-client