This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e33302e302f32332d3233203d3e2033353439.roa
File:                     3230302e302e33302e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier:          B2mFvqGA1bSMG+6+78CDYyZOakyVBcm9+yB6QrTfzGA=
Subject key identifier:   CD:3E:DF:F9:F2:1A:C9:E5:66:48:01:0D:71:91:AC:97:D6:A7:F9:05
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       6298091FD825E2D2204CAFBC4DFB8C54AB5E700E
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e33302e302f32332d3233203d3e2033353439.roa
Signing time:             Tue 06 Jan 2026 20:53:34 +0000
ROA not before:           Tue 06 Jan 2026 20:48:34 +0000
ROA not after:            Tue 05 Jan 2027 20:53:34 +0000
asID:                     3549
IP address blocks:        200.0.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:98:09:1f:d8:25:e2:d2:20:4c:af:bc:4d:fb:8c:54:ab:5e:70:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Jan  6 20:48:34 2026 GMT
            Not After : Jan  5 20:53:34 2027 GMT
        Subject: CN=CD3EDFF9F21AC9E56648010D7191AC97D6A7F905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:8b:9a:73:20:93:67:42:16:fc:55:ec:79:
                    8a:6b:db:ed:7f:15:b0:72:af:d2:cc:8a:99:78:ea:
                    f8:7c:e3:b5:30:ef:e8:79:a8:83:11:75:1e:62:9c:
                    59:ba:a0:9d:88:5f:5c:cb:11:28:ae:57:db:a8:70:
                    62:22:20:55:0f:05:e9:42:aa:a4:25:94:98:a2:1a:
                    3d:b4:5a:dc:88:cb:ca:8f:bd:d2:0b:21:4e:39:f6:
                    73:90:48:c0:03:5d:ff:f6:71:55:ba:3e:a7:a2:58:
                    98:ad:b9:cf:4d:28:43:39:ea:4b:c5:cf:f8:0f:e0:
                    c4:3c:73:2e:12:e2:ff:10:11:99:83:6c:4e:47:05:
                    8f:24:19:90:24:dc:cb:b3:80:8b:97:4d:82:b6:83:
                    df:42:61:e6:7a:bd:5f:47:04:a1:f5:b1:a7:e3:55:
                    9d:eb:5e:97:77:46:11:b1:ab:1a:1e:a5:52:62:77:
                    e4:bf:5a:08:7f:ac:09:a7:bd:d3:57:51:59:b6:50:
                    3f:29:ef:cb:b8:f0:f0:b0:f1:ed:f7:d7:3d:94:65:
                    cb:c8:9e:d2:7f:fb:71:46:c7:c8:85:5f:64:b6:f1:
                    3f:bd:22:0f:e9:16:82:7e:bc:1f:6b:db:fb:af:79:
                    37:83:43:79:ca:9c:42:29:35:58:1f:3a:6e:b2:a1:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:DF:F9:F2:1A:C9:E5:66:48:01:0D:71:91:AC:97:D6:A7:F9:05
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e33302e302f32332d3233203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:a8:ee:45:9b:1c:ed:b2:9f:4f:c1:f9:ce:f0:0f:f7:f8:c1:
         54:11:94:4d:6e:6c:14:a5:cd:de:c8:be:ef:e3:77:a9:90:f6:
         4c:f6:ea:73:d5:75:9d:76:16:04:d0:d4:fb:44:0c:7f:ba:86:
         b1:2d:00:cd:82:36:d8:3a:0c:8f:ac:17:85:da:dc:51:29:db:
         f3:a2:a2:da:9d:b5:6f:7c:fb:a8:b3:20:77:38:5c:7b:c9:a6:
         4f:41:59:f9:53:6a:5b:36:4e:44:92:a0:77:f6:27:19:ba:f6:
         20:cc:eb:28:86:20:1a:71:c0:df:3c:5f:1c:e6:66:a6:1f:d7:
         8a:a5:88:2d:c2:89:49:5a:77:db:c3:75:c1:25:a3:2d:75:1a:
         83:bf:0f:96:c9:bd:43:41:67:2d:8b:cb:51:31:6d:d5:23:1b:
         63:a5:8e:bf:27:d4:58:4d:c9:d0:90:fd:33:0c:ae:a0:d8:67:
         9f:b6:f9:15:ee:28:08:66:76:10:f5:60:a7:28:68:1b:ec:a9:
         fa:01:1f:e4:54:15:bd:3a:32:83:25:0f:78:b1:b3:fe:2a:92:
         80:bc:1d:1e:35:fc:0f:1e:00:62:50:73:b3:39:77:ee:fd:69:
         7f:6a:71:9e:48:99:c2:f5:fc:04:27:8e:25:ea:7d:6a:36:3f:
         69:a9:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:20 2026 by rpki-client