This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e2033333536.roa
File:                     3230302e39312e36342e302f31382d3234203d3e2033333536.roa (raw, json)
Hash identifier:          POAG+b6zwuh9/w7vucDd/7W7/+gsEa25zBW/KbczGOg=
Subject key identifier:   CB:79:64:6E:86:2E:46:C1:7F:97:A7:90:7A:91:83:EF:24:9A:26:9B
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       2090860AD2F11AD2927BE2088C8D3705A851E5
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e2033333536.roa
Signing time:             Tue 06 Jan 2026 19:30:36 +0000
ROA not before:           Tue 06 Jan 2026 19:25:36 +0000
ROA not after:            Tue 05 Jan 2027 19:30:36 +0000
asID:                     3356
IP address blocks:        200.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:86:0a:d2:f1:1a:d2:92:7b:e2:08:8c:8d:37:05:a8:51:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:36 2026 GMT
            Not After : Jan  5 19:30:36 2027 GMT
        Subject: CN=CB79646E862E46C17F97A7907A9183EF249A269B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:39:c8:fc:3b:13:cb:92:b8:87:f9:32:e9:
                    52:0b:88:3a:1d:b5:95:b3:7a:0d:6c:75:69:6b:46:
                    83:5b:a4:38:e7:b5:ee:98:f3:6d:8e:43:e1:9d:8f:
                    94:67:cf:d9:17:a8:b0:64:ec:58:2e:47:60:85:8e:
                    2d:82:a8:80:e5:b6:d1:04:e2:c3:d0:8e:e9:70:82:
                    85:75:b0:23:29:65:8e:90:3e:5e:77:21:5c:bd:49:
                    ec:8f:84:9b:72:a9:36:f5:a7:7e:ca:49:7c:59:24:
                    46:e3:cb:8c:c7:d1:3b:24:21:2e:a4:27:6a:54:fd:
                    cd:20:fc:04:2e:70:4d:c0:3f:ae:7b:9b:83:96:c8:
                    25:42:2c:f6:d6:88:05:cd:85:6e:5b:21:2b:81:66:
                    3e:ce:dd:49:22:dd:9c:68:55:0d:cf:76:1d:9f:58:
                    c0:ed:ba:9e:39:c7:08:9a:e9:37:19:b6:18:29:57:
                    46:9e:20:7a:5a:77:e6:9d:bf:3f:84:df:01:93:c3:
                    bc:61:16:e3:0b:06:bb:c0:02:8b:54:c4:f5:95:eb:
                    66:cd:da:6c:fb:26:c7:cb:0c:8c:08:1a:2b:05:e9:
                    92:9c:6d:00:42:88:6c:58:e0:2c:02:cb:cf:ac:45:
                    2c:61:cf:26:c3:31:54:af:66:9c:fc:9b:2d:31:a9:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:64:6E:86:2E:46:C1:7F:97:A7:90:7A:91:83:EF:24:9A:26:9B
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:10:90:6a:42:41:70:55:04:ac:ed:eb:aa:80:cf:9a:bc:
         c1:80:d3:92:9e:4e:d3:0a:30:b9:26:1c:eb:32:e4:54:aa:9f:
         b3:6c:16:5a:82:f8:90:62:a4:56:84:a2:e3:d7:ae:09:f8:47:
         2e:a2:19:dc:e9:b9:fe:5c:cd:50:34:62:b0:99:14:87:9b:f2:
         a8:c7:93:7a:95:7d:5a:09:14:7a:5b:1a:12:6f:4b:6a:cf:00:
         53:6b:4e:21:2e:96:81:b7:f2:47:c6:f1:f9:1c:1c:dd:84:b7:
         76:18:1c:b2:2b:9a:e6:97:16:9f:d0:75:d4:66:5a:fc:23:fb:
         f5:cd:15:9f:8f:ab:ec:65:da:63:ea:ac:a8:13:7d:54:36:8a:
         02:ff:e6:71:e7:1f:61:85:ca:b2:83:6e:44:09:3f:80:47:cc:
         ec:1b:cb:34:95:fc:12:6c:99:17:45:ea:52:b8:ac:f0:8b:73:
         04:d8:70:4e:e9:46:5c:94:f1:c5:db:fc:64:a4:c4:01:ae:7e:
         1d:7c:f3:6c:37:70:27:9d:83:cf:24:84:21:42:c1:98:48:50:
         a0:f1:21:df:65:5c:32:8b:c7:b7:d1:60:9c:9e:32:3c:75:a6:
         23:61:04:1e:e4:e0:e0:94:ff:28:5f:fb:cd:ee:9d:e9:cb:97:
         1e:8c:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:40 2026 by rpki-client