This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          m57WMiMN1C0KGpoNjbjSds7w+YZu5J7x37jr1G3qxG0=
Subject key identifier:   50:16:37:B4:EC:63:BA:B9:9E:F2:C0:99:D8:74:DC:D7:1E:60:51:77
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       0953BDE32D7B44EFEA2C89ED85E135C483D7C0C4
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:37 +0000
ROA not before:           Tue 06 Jan 2026 20:49:37 +0000
ROA not after:            Tue 05 Jan 2027 20:54:37 +0000
asID:                     4995
IP address blocks:        200.2.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:53:bd:e3:2d:7b:44:ef:ea:2c:89:ed:85:e1:35:c4:83:d7:c0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:37 2026 GMT
            Not After : Jan  5 20:54:37 2027 GMT
        Subject: CN=501637B4EC63BAB99EF2C099D874DCD71E605177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:f1:92:6e:6a:02:bc:42:a8:17:a9:6a:8b:
                    2b:00:9f:3a:2e:5b:c7:4d:d2:dd:74:ab:64:74:54:
                    d2:dc:35:7d:d8:0b:0e:09:50:a4:87:3e:59:ed:c9:
                    fc:15:7c:97:b2:3d:f4:71:d5:d6:d2:73:cf:83:59:
                    51:9b:cd:bc:f7:57:19:25:2a:10:47:36:2b:3f:32:
                    cf:51:61:0b:7e:e7:56:7d:ee:58:77:71:bc:ca:85:
                    99:91:2b:31:3d:17:5a:88:d6:74:87:8b:b4:77:52:
                    27:21:d7:bb:e9:90:95:db:8e:9e:35:ff:20:6d:6d:
                    db:76:04:82:70:38:b8:67:50:46:3e:9a:d4:02:e2:
                    36:02:1c:9e:01:d0:37:4d:9c:f6:db:2f:91:e2:d3:
                    1f:1c:f5:17:ec:03:41:a7:fe:27:35:ed:71:1c:40:
                    7b:22:1a:c7:98:6c:91:67:6a:e5:67:18:24:87:72:
                    5e:83:a7:c2:fb:ec:79:db:5d:34:5a:95:62:da:11:
                    41:05:c3:86:0e:f0:e2:40:d8:cd:01:44:70:e6:c4:
                    13:4d:d1:fc:15:06:6d:1e:3a:7c:09:f7:b7:b7:48:
                    0c:c9:cc:ed:f1:a2:c1:53:2f:42:ee:67:bd:77:9f:
                    3d:be:5d:86:a8:01:19:fa:8e:0a:a1:d7:fd:00:ce:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:37:B4:EC:63:BA:B9:9E:F2:C0:99:D8:74:DC:D7:1E:60:51:77
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:60:f2:7f:39:4e:13:8d:34:ce:37:36:db:af:81:6b:b9:e1:
         0a:65:e0:03:a8:0c:d9:c9:8e:17:68:da:08:1a:cc:3f:a2:b5:
         e4:a9:7c:95:62:09:75:91:3a:e5:93:23:fe:63:37:7c:0b:15:
         4a:b6:fe:a5:98:ae:22:1a:d2:e9:03:5d:16:0e:76:28:7e:b4:
         63:89:63:ac:b4:4e:c3:06:e5:02:70:73:43:20:63:f0:b4:0c:
         bb:5c:80:d9:62:f8:34:e8:f1:16:19:ef:a7:2f:bd:c6:aa:2c:
         e0:c7:4d:22:41:cb:81:00:95:fb:54:35:f3:0b:cc:a6:2c:51:
         9b:e1:ce:26:fe:37:52:9b:07:93:34:01:71:51:c9:e4:da:26:
         9a:fd:b6:13:01:34:a3:1b:9e:db:c6:95:f2:07:1c:9f:48:82:
         8c:c6:dd:eb:29:09:59:db:96:a7:e2:db:03:23:1a:10:5a:b2:
         f2:6b:a8:92:20:3d:c5:c0:fb:e6:15:b5:c2:29:f5:27:ae:c9:
         9c:43:ef:47:b3:ec:de:a3:22:0d:8e:46:39:1c:62:2f:ce:2b:
         d7:08:34:83:30:be:4e:d1:3d:df:74:ad:88:b7:9b:98:0c:7d:
         c4:9e:2b:4d:b4:86:9b:63:ce:ce:12:f3:31:f0:e8:1a:57:55:
         16:67:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:13 2026 by rpki-client