This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3231342e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          gubfuzvfvmGgXGvZ5t8du4tae+Nilogr5ZpCh2kf7hs=
Subject key identifier:   6D:54:08:EA:1A:03:12:39:51:28:9B:3B:AF:E4:19:B8:3E:00:AD:2A
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       0F445E08643F0E58CDE4BD2B47525822C502D8FF
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:34 +0000
ROA not before:           Tue 06 Jan 2026 20:49:34 +0000
ROA not after:            Tue 05 Jan 2027 20:54:34 +0000
asID:                     4995
IP address blocks:        200.2.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:44:5e:08:64:3f:0e:58:cd:e4:bd:2b:47:52:58:22:c5:02:d8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:34 2026 GMT
            Not After : Jan  5 20:54:34 2027 GMT
        Subject: CN=6D5408EA1A03123951289B3BAFE419B83E00AD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:aa:4d:a7:f5:72:db:8c:a6:88:3d:22:93:
                    ae:db:74:93:af:4c:aa:8f:3b:86:3b:2c:58:7c:0b:
                    85:d7:c2:7d:44:d2:02:e5:42:97:9b:8e:a3:ab:a1:
                    b9:35:34:23:df:40:38:4c:e9:51:3e:cd:fd:5e:89:
                    ef:05:23:52:f2:25:5e:02:dd:d3:6a:e2:9a:63:3c:
                    8c:b6:d8:43:73:8d:5c:9f:e3:03:2e:13:03:23:f4:
                    0a:c0:15:62:84:a8:74:c6:96:99:4b:9f:46:97:2d:
                    9b:80:de:64:20:d1:44:91:22:32:13:1b:d8:97:cb:
                    69:25:28:1e:00:a0:ad:01:f7:81:50:2c:a4:0a:05:
                    ea:98:ff:2a:75:0c:f2:ca:0b:46:90:76:e2:b2:8b:
                    1d:f3:fc:4c:a4:6f:81:af:c7:c8:f9:bd:ae:ad:25:
                    e1:90:9e:a3:85:19:d1:23:36:b4:09:d4:29:2c:b1:
                    23:8a:d8:07:24:15:8d:51:0f:5e:ce:ac:d6:47:33:
                    92:ae:e8:d5:e6:94:15:b7:02:1a:b5:a4:63:99:6a:
                    c1:02:27:0e:54:d8:37:23:bb:18:c1:92:dc:7c:2a:
                    d6:52:4e:71:f9:58:a3:41:95:c3:0e:d6:99:24:c0:
                    ea:4a:9b:f6:5b:94:9a:44:ff:ec:05:b9:e0:2b:1f:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:08:EA:1A:03:12:39:51:28:9B:3B:AF:E4:19:B8:3E:00:AD:2A
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a2:01:6b:ef:dc:11:67:81:da:df:64:5a:31:60:c3:35:ca:
         aa:7f:5a:02:3c:58:f6:c7:b2:45:98:19:a0:83:20:d1:9c:56:
         ab:7f:8a:42:48:c9:21:39:c2:1d:ed:8f:e7:f7:eb:f8:eb:60:
         0c:f6:2d:2e:6d:e3:11:ca:1b:c8:fe:e0:5a:cc:35:46:2b:e1:
         cc:63:42:8f:52:32:01:83:ca:34:18:e1:db:97:27:09:ef:0f:
         b2:ce:fa:2b:98:65:1e:64:47:14:7b:d0:bb:12:7d:d4:bc:90:
         dd:a8:e5:71:07:fb:21:56:5d:dc:99:98:da:3d:3b:84:07:41:
         a0:ad:97:9f:6f:d6:12:b6:a0:71:4b:3b:de:97:17:6c:b7:27:
         75:55:4b:03:20:f2:b4:55:e4:cf:31:3d:b8:de:ca:ba:01:02:
         7f:21:c8:e8:5a:9b:e9:df:9f:7f:92:dd:54:bd:66:33:37:c8:
         68:27:63:d0:36:2d:3b:ad:4e:d6:b6:5e:2a:22:3d:ad:c8:c4:
         5a:4e:75:20:9e:cb:28:f4:ac:ab:e6:b2:71:79:51:3f:31:b0:
         c0:a9:50:78:e8:51:ef:cf:ff:59:1a:94:11:db:c4:fc:5e:5c:
         27:69:37:d7:a1:9c:17:45:28:15:01:13:3d:80:83:a8:5e:51:
         8a:6b:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:55 2026 by rpki-client