This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/3230302e362e31342e302f32342d3234203d3e203233303331.roa
File:                     3230302e362e31342e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          uU96Eq6EEcEY2su5sCDqiYJ60JFmhDbfcAz4I4abmJk=
Subject key identifier:   32:93:29:83:A1:75:D1:AA:8E:04:F3:9D:FE:87:A1:F7:EA:12:AB:83
Certificate issuer:       /CN=42C2EB2F76CCFEDEBD3360E325433323BD952F72
Certificate serial:       2E9B8E7CC6457F9397D7C5B78450A456F19CDE9F
Authority key identifier: 42:C2:EB:2F:76:CC:FE:DE:BD:33:60:E3:25:43:33:23:BD:95:2F:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/3230302e362e31342e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 06 Jan 2026 19:27:39 +0000
ROA not before:           Tue 06 Jan 2026 19:22:39 +0000
ROA not after:            Tue 05 Jan 2027 19:27:39 +0000
asID:                     23031
IP address blocks:        200.6.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9b:8e:7c:c6:45:7f:93:97:d7:c5:b7:84:50:a4:56:f1:9c:de:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C2EB2F76CCFEDEBD3360E325433323BD952F72
        Validity
            Not Before: Jan  6 19:22:39 2026 GMT
            Not After : Jan  5 19:27:39 2027 GMT
        Subject: CN=32932983A175D1AA8E04F39DFE87A1F7EA12AB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:20:b6:ac:51:87:76:ff:49:0e:f8:14:9f:
                    a0:c1:17:4c:c0:43:27:74:fd:be:70:d9:8c:c2:69:
                    2b:be:b1:65:1c:3c:40:ab:54:99:0f:22:fc:c8:17:
                    e6:75:ba:08:a7:d1:e0:98:2c:2a:9d:71:a5:14:6d:
                    38:39:b5:a4:d1:15:bf:9c:54:ea:93:dd:77:4d:d3:
                    72:14:16:00:6b:4b:a3:21:3d:99:6e:95:0b:50:99:
                    50:2d:98:3e:14:71:49:6a:84:01:5d:88:3d:f0:d2:
                    6a:47:63:0a:37:d2:4c:e0:cd:f4:5a:9b:13:29:06:
                    dd:a3:df:c3:7e:6d:90:76:32:96:f3:7a:01:8d:65:
                    db:30:7b:c1:36:69:01:00:bd:0b:69:8b:f2:ab:48:
                    5e:2c:f7:ee:70:91:80:d8:70:e7:5f:b8:81:70:af:
                    d0:58:9a:be:2e:c2:f9:39:a9:a7:e0:f2:56:27:2b:
                    3b:35:24:34:68:8f:1c:37:e5:65:89:90:90:63:ee:
                    b6:92:ea:56:ee:e9:d7:c0:e3:a6:a7:9e:26:11:fa:
                    ea:54:5d:cc:52:a4:3f:25:7f:72:16:a0:8b:70:a9:
                    8d:48:0c:5a:ab:9d:65:af:78:9b:fe:ff:a9:1c:57:
                    d2:e9:14:bc:44:78:ff:63:3f:35:e3:33:a5:ea:39:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:29:83:A1:75:D1:AA:8E:04:F3:9D:FE:87:A1:F7:EA:12:AB:83
            X509v3 Authority Key Identifier:
                keyid:42:C2:EB:2F:76:CC:FE:DE:BD:33:60:E3:25:43:33:23:BD:95:2F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42C2EB2F76CCFEDEBD3360E325433323BD952F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ED69613FC5D3AF3F0596A97EFB1C8A58AC3710DA068419A019F213D1E97392A/0/3230302e362e31342e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:87:35:34:76:db:81:c2:08:96:c0:74:95:9d:8d:00:dc:be:
         d2:08:81:a9:30:a9:19:e4:cf:4f:81:a9:b5:1b:ed:62:32:4b:
         93:97:ba:ca:78:e4:44:43:24:79:92:f7:60:12:44:d6:61:ab:
         12:94:01:d5:6d:ca:83:10:11:59:ce:1e:98:0b:c3:74:9f:96:
         df:7b:18:63:14:d8:1d:99:59:08:75:bb:f0:ac:be:00:9e:33:
         78:84:6f:5d:88:6d:d2:65:c4:e8:1c:17:cc:0e:47:75:5d:9f:
         f6:88:c9:1a:ec:95:77:a5:ca:7c:8e:ba:4f:f1:c1:0d:5e:60:
         fd:5b:64:38:6a:3c:ba:37:a2:cf:e7:69:7f:88:c7:c1:91:d2:
         08:42:29:d4:3d:cf:90:de:ad:ac:dd:97:9a:44:1e:a1:8d:33:
         4c:c4:dc:68:66:9d:91:3d:53:01:29:f3:dc:a3:5f:18:5f:11:
         cd:89:f3:34:ec:a4:85:86:92:77:6a:7d:bd:d3:a5:3f:3d:73:
         e2:f8:ea:e8:26:25:ab:29:a2:f9:0a:43:d9:77:80:24:9a:50:
         f9:e5:ee:e6:8e:5d:c6:4f:a4:bf:46:2b:4e:48:c2:4c:be:45:
         cd:b4:5a:77:bc:12:50:54:2a:d5:de:91:1f:c5:7d:de:59:e0:
         cc:fe:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:59 2026 by rpki-client