This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa
File:                     3230302e39312e36342e302f31382d3234203d3e203131383330.roa (raw, json)
Hash identifier:          R5kcQAK48QlahsLta50EGDu553pk7+EN1rri9khNR4I=
Subject key identifier:   92:0D:E3:6A:22:FB:71:09:54:AF:0B:AD:CA:68:63:2F:6B:E6:05:53
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6C9185B51DECC0D217179003D497CBF35FE4618D
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa
Signing time:             Tue 06 Jan 2026 19:30:44 +0000
ROA not before:           Tue 06 Jan 2026 19:25:44 +0000
ROA not after:            Tue 05 Jan 2027 19:30:44 +0000
asID:                     11830
IP address blocks:        200.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:85:b5:1d:ec:c0:d2:17:17:90:03:d4:97:cb:f3:5f:e4:61:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:44 2026 GMT
            Not After : Jan  5 19:30:44 2027 GMT
        Subject: CN=920DE36A22FB710954AF0BADCA68632F6BE60553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:fa:99:39:98:7b:53:77:d8:ec:c3:b8:52:
                    f2:f2:03:0c:6b:07:2b:dc:45:45:ad:41:e0:e9:04:
                    2f:62:65:84:e9:f5:02:59:d6:6c:dd:4b:1a:7c:89:
                    10:d1:65:38:ea:18:e2:78:ec:8e:ea:e1:34:01:44:
                    ab:ff:6d:f1:4c:73:5b:0b:99:20:4e:db:72:ee:e3:
                    39:2a:d8:d9:a6:67:84:d9:b2:6e:57:9b:e3:82:e6:
                    c2:45:f8:9c:d9:eb:ea:85:82:e6:71:16:e4:26:0f:
                    42:c9:d9:b1:dd:84:d1:5e:99:64:0c:c0:50:a8:a8:
                    4a:24:3a:77:1e:4f:14:99:cf:5b:75:2f:92:90:96:
                    2e:d5:c1:88:18:28:f0:00:ea:a7:9d:6e:ba:00:99:
                    13:3d:18:fb:57:06:62:43:f0:36:3f:0b:92:10:41:
                    e9:c4:f6:ce:3a:3b:c9:61:b2:c2:3e:c0:34:82:34:
                    7c:b7:37:75:10:38:4b:e5:84:46:d1:d2:60:b7:c8:
                    1b:c2:5e:dd:de:a2:b0:12:6e:fe:fe:11:f4:ce:ab:
                    d9:39:4f:0d:f4:c9:a9:c2:63:b2:7f:f1:85:62:24:
                    bc:ec:31:7c:82:26:27:be:05:b2:ea:df:3a:06:40:
                    c4:f1:cc:9a:4c:fd:b9:a7:22:15:8d:8b:94:42:b3:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:E3:6A:22:FB:71:09:54:AF:0B:AD:CA:68:63:2F:6B:E6:05:53
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:29:43:32:03:12:2a:70:32:95:21:72:40:f0:63:3d:86:
         50:4c:f4:00:55:0d:12:ca:7e:7c:c4:82:55:b8:e1:3c:ea:13:
         98:b2:14:a8:e4:ff:cb:c8:bc:8a:34:79:d1:74:49:33:07:2e:
         e5:9b:db:42:ff:6d:3f:a0:79:eb:14:46:5f:f9:10:45:79:16:
         04:93:dd:8c:62:9a:17:0d:a4:02:f0:8a:12:80:9a:19:2f:89:
         70:c7:f9:01:63:a0:d5:93:fa:bd:fc:40:a9:f2:46:e7:33:2d:
         18:0f:f6:55:61:d9:78:07:f4:6c:ed:40:d8:f5:a6:af:a5:85:
         0a:ef:63:b9:9f:50:83:02:6e:6d:6f:d1:3b:ee:03:c4:7d:1b:
         41:b5:aa:a4:0c:6b:e0:57:4f:3f:7d:87:2e:8c:30:f9:5b:a6:
         a9:b3:5b:7c:86:13:e1:4b:f2:9f:e9:f8:df:8d:62:98:0d:1e:
         09:44:81:8a:0e:a9:28:9e:77:f3:16:9a:97:f9:51:4d:67:77:
         90:33:1f:f5:35:d4:84:29:08:8e:3f:25:5c:60:d6:7e:67:c0:
         4b:f1:00:0c:49:c8:e2:c9:f6:74:5a:04:43:4b:9d:93:af:21:
         63:e1:af:e1:6e:ab:d5:df:34:63:32:d3:c5:37:e8:54:53:74:
         1e:04:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:26 2026 by rpki-client