This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e37362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          6O4dUvuzevmUrl3EizVAnF9rzuYP+SnE78Meonwq5DY=
Subject key identifier:   79:AF:83:31:70:F6:09:66:57:60:29:02:E5:B3:FB:A0:F1:C1:5D:89
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       13189DFCB011242EF032C7A03C0583BE1DBAD477
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:28 +0000
ROA not before:           Tue 06 Jan 2026 20:49:28 +0000
ROA not after:            Tue 05 Jan 2027 20:54:28 +0000
asID:                     4995
IP address blocks:        200.29.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:18:9d:fc:b0:11:24:2e:f0:32:c7:a0:3c:05:83:be:1d:ba:d4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:28 2026 GMT
            Not After : Jan  5 20:54:28 2027 GMT
        Subject: CN=79AF833170F6096657602902E5B3FBA0F1C15D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:d1:1e:a9:0d:51:4a:d3:36:22:d1:f8:70:
                    78:bc:53:9f:16:4d:68:ef:af:36:a5:b8:4f:d6:63:
                    8d:c9:f3:fc:b0:63:3c:65:ba:1a:6d:09:12:05:a9:
                    e9:e2:78:92:da:e6:6d:b4:7f:d4:eb:3f:85:b1:50:
                    d9:66:1e:5d:5a:62:04:68:6a:90:cf:e1:97:ee:4c:
                    da:ce:35:cd:38:98:2e:4f:cc:3c:02:57:30:ad:19:
                    13:7d:e6:37:14:cb:06:25:de:20:aa:e1:09:c4:c2:
                    6f:1f:1c:fd:ce:8f:34:61:f3:ff:2f:48:c2:c4:6c:
                    be:23:75:6b:fe:81:07:da:17:9a:b9:98:d4:26:07:
                    d6:c9:da:93:29:a9:32:e3:12:6b:cd:b3:7e:d9:c5:
                    77:74:5b:68:b6:b8:57:06:f9:49:3c:8d:7d:87:fe:
                    70:93:11:a3:94:00:88:14:96:9c:96:f3:3a:e1:51:
                    e1:ac:2f:61:77:f7:ce:27:df:98:1c:08:cb:e7:a6:
                    db:49:e7:b0:ab:72:e2:a0:80:1e:99:02:af:79:0d:
                    02:6e:c6:04:65:ae:d4:f9:ea:81:55:4e:09:9e:7d:
                    23:1f:77:cd:02:67:76:14:56:f1:50:fc:ea:47:3a:
                    11:1d:2f:b9:46:58:76:0f:82:e7:95:8d:fc:5f:8d:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:83:31:70:F6:09:66:57:60:29:02:E5:B3:FB:A0:F1:C1:5D:89
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:26:48:bc:b9:8c:b8:4d:11:79:69:33:e5:84:cb:e1:68:0d:
         12:1a:7f:17:6c:a6:c3:9c:1e:7e:25:c9:c6:05:05:36:0c:dc:
         bf:10:8e:36:e3:cb:ea:e8:24:da:45:09:93:7d:87:36:6a:06:
         c3:71:7e:97:74:c1:26:27:8f:fa:d9:10:a2:04:c9:4a:cd:8c:
         38:98:47:66:33:59:7b:55:21:78:39:bb:df:55:53:21:9e:fe:
         8b:7e:54:26:7a:9a:c7:d9:ee:83:21:7a:be:78:ca:77:44:d9:
         db:35:5f:fb:89:a6:f6:48:8e:5f:df:44:fd:8a:f4:d9:51:75:
         24:95:c5:9c:2c:9a:99:9e:66:b6:4f:49:24:8a:b1:6a:22:19:
         f0:bd:d3:cb:c0:30:45:c2:c6:60:13:82:49:80:9e:77:87:a1:
         d7:a5:c5:2e:87:ee:5c:4f:d7:dd:b4:6b:54:36:b4:5d:95:df:
         fa:4c:8c:02:c0:aa:80:3d:e4:1a:1a:8e:39:02:69:82:9b:30:
         00:11:dd:b8:31:bb:30:02:e3:ff:37:b5:b0:04:ea:5a:bf:6b:
         d1:28:2e:f8:e6:a0:b8:85:0d:b1:22:57:3f:52:0e:4c:d5:7d:
         59:a9:3d:3d:e3:fc:cd:64:36:b0:2d:fa:ac:38:fc:ae:1a:1f:
         41:94:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:25 2026 by rpki-client