This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          T5NHlDZvhuitj/AQpConzzs4IhvM0I1uNVFBgoR8Ii8=
Subject key identifier:   FC:51:48:D5:26:93:2C:4A:82:38:11:D7:F2:AF:D9:6A:B1:42:C3:DF
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       705814E6FEF1A319161B22EC940675322FA00A14
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:32 +0000
ROA not before:           Tue 06 Jan 2026 20:49:32 +0000
ROA not after:            Tue 05 Jan 2027 20:54:32 +0000
asID:                     4995
IP address blocks:        200.2.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:58:14:e6:fe:f1:a3:19:16:1b:22:ec:94:06:75:32:2f:a0:0a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:32 2026 GMT
            Not After : Jan  5 20:54:32 2027 GMT
        Subject: CN=FC5148D526932C4A823811D7F2AFD96AB142C3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:5d:f7:d4:9c:a9:0e:4e:3a:09:60:93:93:
                    c4:36:62:a2:54:43:6b:2c:19:c1:0b:89:41:f7:51:
                    7a:ff:76:ea:04:73:4c:62:71:8c:6b:dc:2a:37:11:
                    2c:b7:ac:93:a8:b8:15:e3:06:ee:d9:ce:ad:67:f1:
                    24:a6:35:b3:a2:c4:ba:88:82:f4:ad:11:1f:14:7f:
                    e1:82:8e:52:b1:1f:14:ac:42:17:33:b8:6e:c4:a7:
                    12:8e:36:ff:8d:8d:a2:f2:70:1e:26:64:44:a5:da:
                    61:25:be:91:b0:ca:a5:b2:5f:9b:f3:f6:22:13:ee:
                    a6:9b:b4:9f:04:bf:1f:53:9a:17:3f:05:30:8b:15:
                    04:35:cc:d8:2e:54:3a:52:9f:84:7c:f9:0f:db:38:
                    f7:e5:4f:c8:46:7b:46:23:cb:26:aa:da:f0:de:68:
                    55:c1:bc:45:4c:4a:c4:7e:78:6d:9a:15:8f:e7:cc:
                    ee:c1:d0:84:68:bf:a3:44:cd:f9:13:5d:3e:e6:10:
                    93:57:ad:7d:7d:c6:b3:20:23:8d:f3:27:6b:02:e1:
                    52:1e:5b:3c:0b:d0:56:da:9c:23:61:a1:8a:33:e2:
                    7f:49:76:bf:2d:e1:f0:59:d9:ad:ed:0b:bb:26:6a:
                    3b:cb:b2:6f:ba:74:05:58:9b:09:30:18:c6:6a:49:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:48:D5:26:93:2C:4A:82:38:11:D7:F2:AF:D9:6A:B1:42:C3:DF
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:c2:e8:72:f6:cb:12:17:3d:23:6f:82:0e:8c:24:ed:7d:
         f5:53:4d:a2:40:d7:14:80:50:85:60:c4:d9:e3:d1:a7:4b:b3:
         e2:30:6a:9d:be:3d:98:7d:b3:bb:cc:ac:d1:f8:49:86:ed:f2:
         7f:72:5f:30:33:18:2a:ec:77:21:30:8f:e2:65:45:61:0b:61:
         25:70:43:49:92:0c:51:d6:aa:18:ae:36:cf:ff:88:95:c5:4d:
         81:d1:fb:11:ff:79:d5:07:b0:04:c9:0a:33:60:52:b9:fa:99:
         19:b3:f5:45:21:72:30:ce:b7:56:11:73:b9:ab:47:11:1d:b5:
         8a:d2:5a:0f:0a:01:7b:17:6a:7e:cc:ec:55:62:db:4c:83:26:
         13:55:c1:98:63:7d:13:fc:15:e3:3b:94:ab:6b:24:6a:a0:0f:
         d1:89:b2:39:91:81:6e:d1:cf:eb:31:be:8b:31:a8:4e:2d:bb:
         fd:5a:e9:2a:08:fc:44:b9:78:cf:50:27:29:34:18:a3:92:33:
         b1:cf:e0:2d:6c:95:00:0f:12:e0:ac:74:ed:ce:2b:3c:6f:33:
         14:73:c0:d4:1e:cf:73:a2:62:d8:58:e0:00:78:bf:e0:45:6b:
         e6:5a:70:c0:a0:a7:83:bc:3f:21:96:b5:23:82:e1:34:63:2b:
         2f:aa:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:36 2026 by rpki-client