This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa
File:                     3230302e302e32382e302f32322d3234203d3e203237383230.roa (raw, json)
Hash identifier:          yZ3//wimOpUeGyn7TwT/tVtwnDuN2tIGHxnCq3EEpw0=
Subject key identifier:   40:F3:C6:E9:72:94:8A:C7:F6:A3:D1:96:0D:04:9E:4C:5D:7A:B2:1A
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       30895B6DE1D3D465943CAEB043373837F590D00B
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa
Signing time:             Tue 06 Jan 2026 20:53:32 +0000
ROA not before:           Tue 06 Jan 2026 20:48:32 +0000
ROA not after:            Tue 05 Jan 2027 20:53:32 +0000
asID:                     27820
IP address blocks:        200.0.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:89:5b:6d:e1:d3:d4:65:94:3c:ae:b0:43:37:38:37:f5:90:d0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Jan  6 20:48:32 2026 GMT
            Not After : Jan  5 20:53:32 2027 GMT
        Subject: CN=40F3C6E972948AC7F6A3D1960D049E4C5D7AB21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:9d:39:00:50:3c:89:48:a5:a0:ce:6e:d2:
                    fb:2c:8c:62:0a:99:43:e2:f4:de:72:4c:38:91:ae:
                    af:9b:34:c6:ff:d1:ca:92:c5:5b:fd:75:1c:b1:37:
                    56:d9:58:bd:6d:c4:c6:e0:1b:84:23:f6:e0:33:f8:
                    be:b2:d0:60:a2:51:cb:a6:de:84:5b:9d:7b:47:98:
                    d4:28:b7:44:d2:df:f9:e4:2a:08:c8:de:9a:f3:fd:
                    af:46:ac:8a:36:ff:30:99:fb:94:1c:ee:77:b4:a8:
                    0d:42:91:dc:70:86:6b:3f:7a:2d:1a:f1:0e:a1:17:
                    b8:bc:be:7d:fa:18:5d:10:8d:88:83:d4:7b:86:5b:
                    ab:e5:3b:90:30:3f:f0:de:2a:98:23:c3:c1:33:a6:
                    7e:aa:ac:2a:d4:17:ce:92:15:02:b3:5f:d8:42:02:
                    bb:da:8d:7b:76:7a:39:56:ab:f8:af:00:0c:63:aa:
                    12:53:a9:82:a3:dd:67:f6:a4:d9:b9:34:37:9a:99:
                    cd:09:08:02:35:15:6f:a9:9c:d5:e1:55:c1:23:e5:
                    54:cc:de:a3:fe:1a:88:8d:ca:cd:8c:ec:1b:93:3d:
                    a5:61:56:75:48:4e:08:bb:0f:8f:40:24:bd:80:58:
                    78:71:80:ce:88:5d:67:25:4f:c1:fc:08:94:28:c7:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:C6:E9:72:94:8A:C7:F6:A3:D1:96:0D:04:9E:4C:5D:7A:B2:1A
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:89:46:1e:72:dc:66:9c:ae:74:d3:2f:92:23:2b:e1:ee:
         11:ac:13:2d:92:f9:73:ba:e2:ea:34:e3:87:d9:5a:6e:cd:fc:
         e3:c2:6d:76:b9:1a:c9:3c:a1:46:e1:e3:a2:a6:0a:4d:c5:c3:
         44:72:cd:31:ff:29:f4:1b:a0:de:43:92:c4:a9:8a:df:1a:17:
         59:45:ad:78:6d:1e:a9:91:7a:30:ff:ea:02:ce:1a:83:2e:54:
         67:97:60:3a:06:90:00:ec:29:7e:2c:4e:0c:38:14:52:5f:59:
         63:04:6b:c7:08:4e:ac:a3:3a:7b:1c:ac:15:6f:62:7a:5f:b9:
         93:e1:3e:27:fb:c3:c1:67:ff:c9:2e:93:25:41:fe:76:67:ba:
         76:0a:d9:85:ac:ab:95:aa:d2:20:86:65:41:9c:76:f4:de:bf:
         a4:29:9d:73:dc:fc:0b:88:f2:1a:e3:95:42:62:2e:c2:32:28:
         df:97:67:7a:ea:55:64:82:2f:a8:c0:13:08:cf:5a:d3:ef:09:
         9c:6e:9f:7c:d9:d9:8b:1f:45:a1:6f:44:b1:09:06:37:07:62:
         2d:8b:ea:14:83:b3:1f:bc:f6:c6:5c:53:81:c7:0f:25:0e:5e:
         4b:fe:ec:57:05:5a:d6:17:db:a3:65:01:80:a8:b9:da:d7:7b:
         8a:1e:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:57:07 2026 by rpki-client