This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3234362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          96fKkdcihe5pSJll3xUNSJjor0EQOgiZsPvUmuubrkA=
Subject key identifier:   CB:DE:66:4A:4A:F8:C7:BF:12:58:96:13:8D:11:A5:F9:9E:47:AF:E2
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       1B2D562732B96032E7B4B6AB18706D91321DE2CE
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:30 +0000
ROA not before:           Tue 06 Jan 2026 20:49:30 +0000
ROA not after:            Tue 05 Jan 2027 20:54:30 +0000
asID:                     4995
IP address blocks:        200.2.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2d:56:27:32:b9:60:32:e7:b4:b6:ab:18:70:6d:91:32:1d:e2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:30 2026 GMT
            Not After : Jan  5 20:54:30 2027 GMT
        Subject: CN=CBDE664A4AF8C7BF125896138D11A5F99E47AFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:e2:09:30:79:d2:9c:aa:f6:77:07:67:40:
                    63:d3:6e:76:36:33:27:d9:85:d1:ff:0d:79:06:08:
                    72:ff:93:10:9b:24:92:7a:24:5e:d0:16:66:dd:8e:
                    0c:cd:02:f9:53:04:3d:63:51:14:9b:dd:94:22:71:
                    e1:b9:94:3a:49:c8:2e:37:b6:38:a0:ba:f6:28:6f:
                    33:9f:33:4e:f3:76:0a:7f:59:ff:0c:09:31:94:ce:
                    ca:8e:43:08:85:4c:5b:9e:d0:07:1a:18:0f:fc:af:
                    51:68:a3:22:a9:d1:5d:28:a7:54:4f:8f:cc:2a:ab:
                    0e:3c:6e:68:84:17:bc:e0:7a:ee:a2:74:53:b1:c7:
                    67:d4:3f:07:99:68:2e:95:ec:aa:b0:c6:4a:4f:4e:
                    29:b0:21:c2:24:f5:ad:25:fe:f4:8f:84:a9:6f:5a:
                    85:e5:f4:1b:2e:b2:b9:52:bd:b7:61:90:65:17:fa:
                    17:32:bf:19:22:8c:6b:e3:51:b5:93:74:45:ac:83:
                    44:0b:02:7f:9d:b9:33:d3:d2:39:60:35:a7:a4:32:
                    4e:47:b5:5f:48:fc:9d:7b:e3:e1:9b:05:4a:fb:b7:
                    04:a1:a2:19:d0:35:8b:a2:2d:b0:b7:9b:04:32:56:
                    a4:35:ef:3d:7c:a8:38:25:f0:26:ac:9a:9a:d2:ea:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:66:4A:4A:F8:C7:BF:12:58:96:13:8D:11:A5:F9:9E:47:AF:E2
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:c4:d1:f7:bf:5f:9b:0a:e4:45:1e:09:f8:1c:4c:18:d4:3b:
         d8:6f:75:96:f7:b2:02:84:4c:ed:ef:0d:93:d0:89:fe:ee:8c:
         4b:87:5f:2e:9d:ed:8a:19:6f:a8:4a:04:90:17:9e:c7:71:5f:
         f0:91:78:26:f9:a2:69:c8:12:91:a1:ab:48:b6:6c:f1:b4:e2:
         00:da:55:26:c5:41:89:5b:e5:7e:01:78:46:f5:86:79:61:38:
         43:1d:b5:f2:76:a3:79:0d:ff:02:61:b2:e0:8b:b6:81:4c:1f:
         ad:c8:c3:66:e8:3d:27:b3:0c:8e:86:a3:14:a1:75:ec:fb:b7:
         9d:e0:3f:90:41:94:78:38:a4:50:e7:23:a5:fe:0b:55:ea:0f:
         be:5c:09:47:21:3d:98:d2:c5:73:0d:8b:b2:3b:0c:87:dc:cb:
         85:a6:2f:a8:8e:a9:e2:ec:3b:34:57:1b:0f:a6:8c:11:a1:ce:
         d0:09:d2:73:da:b4:4f:50:0d:5f:23:b6:f2:fb:8f:62:6e:f3:
         3f:29:30:57:ac:5e:c0:9b:d9:03:6a:ab:02:d4:99:67:96:32:
         9e:80:16:cc:03:cb:bf:d7:78:9c:c9:2a:08:55:30:20:e2:a4:
         bf:01:fa:1c:9f:51:b6:4e:85:71:9b:a2:b6:b2:dd:24:38:98:
         ab:e2:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:21 2026 by rpki-client