This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230302e302f32332d3234203d3e203237393138.roa
File:                     3136382e3233312e3230302e302f32332d3234203d3e203237393138.roa (raw, json)
Hash identifier:          3t2+TutidgNecrVXp7s6tO5OBV1+bM+V6K1/i2KCYIU=
Subject key identifier:   78:CF:A6:B9:24:30:AE:B5:A0:06:DD:98:F8:93:76:58:C3:8E:B1:BD
Certificate issuer:       /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial:       104C7C38009CC1FDA6B98DA471D56B14251E5E56
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230302e302f32332d3234203d3e203237393138.roa
Signing time:             Mon 29 Dec 2025 18:20:00 +0000
ROA not before:           Mon 29 Dec 2025 18:15:00 +0000
ROA not after:            Mon 28 Dec 2026 18:20:00 +0000
asID:                     27918
IP address blocks:        168.231.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4c:7c:38:00:9c:c1:fd:a6:b9:8d:a4:71:d5:6b:14:25:1e:5e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
        Validity
            Not Before: Dec 29 18:15:00 2025 GMT
            Not After : Dec 28 18:20:00 2026 GMT
        Subject: CN=78CFA6B92430AEB5A006DD98F8937658C38EB1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:b6:a1:e1:3b:74:c0:ee:6d:54:e2:72:13:
                    c1:71:7d:85:e6:0e:0a:60:5f:94:2a:f6:ed:bd:9b:
                    2b:5b:df:54:94:b4:7b:da:2b:cb:bc:60:90:88:72:
                    71:6b:c8:b9:ce:9a:11:94:e8:d7:f5:4a:80:8f:d4:
                    91:3c:0a:97:40:25:9e:87:9e:60:32:fa:d5:64:39:
                    42:81:70:e6:0f:58:e1:f9:e5:45:6a:8d:7f:bc:82:
                    c9:f9:bd:bd:f8:e0:cf:af:1a:1a:5f:5b:3e:55:51:
                    d9:45:39:3f:d5:94:d6:6d:dd:92:5c:3b:ee:ee:9b:
                    8c:14:34:4a:be:c5:c4:f4:8d:17:f7:be:b3:d9:cd:
                    5b:96:45:86:d3:ae:72:e4:10:5f:b0:3d:2b:f5:f7:
                    5a:bf:1b:5b:50:af:cb:a4:3f:b1:fb:8a:cb:41:5d:
                    6a:a8:b6:7c:f5:b6:38:02:24:57:f8:b8:86:bd:5a:
                    12:06:ba:86:2b:28:da:42:56:51:2c:50:30:06:6c:
                    0d:b5:31:cd:73:59:ce:e2:96:47:e7:36:71:61:05:
                    1e:13:01:ce:7f:31:d9:f2:2e:54:46:90:39:cb:c3:
                    cf:28:6f:9d:25:33:db:0b:d9:8f:c7:00:06:a5:63:
                    45:67:ab:7f:08:c1:df:0f:b9:be:72:cd:97:52:c3:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:A6:B9:24:30:AE:B5:A0:06:DD:98:F8:93:76:58:C3:8E:B1:BD
            X509v3 Authority Key Identifier:
                keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230302e302f32332d3234203d3e203237393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:07:31:40:17:41:76:90:3a:13:b4:07:17:12:4a:b6:43:36:
         f2:a2:63:e1:78:95:bf:b9:7f:c2:eb:e8:ef:f6:1d:ab:ab:7b:
         59:a7:46:23:fa:36:c2:92:ec:89:cf:d2:05:df:45:45:7e:22:
         c7:98:90:1e:dd:64:9c:d6:ff:31:e8:f7:10:9c:54:c1:49:39:
         70:36:de:13:85:d9:36:f1:55:de:10:e2:06:05:18:e3:a4:18:
         8b:75:f5:da:d2:8e:5d:eb:28:75:91:19:1b:20:5a:a7:83:72:
         60:9c:cb:a5:61:f6:92:6f:91:8b:a1:74:48:f5:59:a2:9c:f1:
         ad:8e:0d:e8:66:c3:0e:78:fc:53:c1:5f:f4:87:11:eb:89:55:
         d4:49:f7:f7:17:42:82:96:72:fd:9b:45:9b:86:6d:3b:d1:66:
         10:7d:a3:f8:4b:43:14:6f:f9:20:d3:47:f0:a6:e8:2e:af:4b:
         86:23:f6:be:5a:b8:3d:46:72:8d:5b:dd:18:2c:c9:f3:79:3c:
         e3:64:8a:c3:86:4b:f9:27:64:36:ac:29:6a:05:db:1c:4c:c0:
         16:d3:8d:b1:ea:52:2d:ac:cb:f4:6f:20:a8:35:1e:87:c7:47:
         5b:92:cd:07:cc:20:ea:58:e6:d5:59:fd:90:c5:98:f3:de:85:
         12:e3:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:45 2026 by rpki-client