This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e38322e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          Ls4V86njjRnBRMfpHOmwlKQoYl2uv+/WMKwsJJ+RXBM=
Subject key identifier:   85:9D:54:5C:AA:6A:2F:49:96:18:4A:A0:46:1C:63:6D:FE:B2:0D:A9
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       67783E32CCB69F6AFEC3822B4FC48A8CA8E0BB46
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:33 +0000
ROA not before:           Tue 06 Jan 2026 20:49:33 +0000
ROA not after:            Tue 05 Jan 2027 20:54:33 +0000
asID:                     4995
IP address blocks:        200.29.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:3e:32:cc:b6:9f:6a:fe:c3:82:2b:4f:c4:8a:8c:a8:e0:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:33 2026 GMT
            Not After : Jan  5 20:54:33 2027 GMT
        Subject: CN=859D545CAA6A2F4996184AA0461C636DFEB20DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:69:7c:43:f3:e6:61:b7:8c:d3:7d:e0:d9:
                    78:8a:24:bd:c7:3d:fe:e5:ba:fa:3a:f0:06:53:f7:
                    f9:88:f5:9e:85:50:65:d8:53:9a:27:14:65:bd:ad:
                    3e:9c:49:58:85:f9:f7:9e:ed:ce:3b:95:69:a9:cf:
                    71:8b:b2:d4:01:c3:5e:21:15:6f:c0:0c:46:23:75:
                    6d:e4:a3:f2:6a:be:82:03:59:87:b9:eb:9b:4c:fd:
                    ef:e0:cc:fc:dd:59:f3:30:e2:11:1e:ec:bc:1c:2a:
                    6c:24:ca:bf:05:5c:54:d3:42:a6:96:3e:0f:8e:20:
                    16:13:69:48:e6:c5:95:3a:bb:51:cf:dd:f4:20:39:
                    a4:62:02:36:27:5c:3f:4e:52:15:38:c1:4e:d1:12:
                    21:24:2e:0f:ba:ef:13:60:e7:6d:ff:f7:02:de:11:
                    67:62:d6:e6:94:e6:af:1a:0a:87:e2:26:25:f5:a3:
                    d6:bd:5a:54:1f:44:6a:43:ed:f1:86:62:26:0e:42:
                    80:ea:a3:4b:79:c8:e5:c8:46:e9:c7:64:17:88:70:
                    06:21:72:67:62:61:bb:ec:9e:9b:83:36:4b:6f:2e:
                    45:fe:82:fb:a3:b2:4f:bd:f0:54:dc:9d:a3:d6:59:
                    5d:eb:20:fe:77:f9:cb:6a:fc:75:ba:7c:16:af:3f:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:54:5C:AA:6A:2F:49:96:18:4A:A0:46:1C:63:6D:FE:B2:0D:A9
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:37:ee:29:87:fc:2b:33:f5:81:29:05:75:94:b7:9d:90:0e:
         aa:26:f9:df:51:db:c7:60:94:99:f7:09:27:d3:b0:00:ad:5a:
         40:06:e8:f3:6e:19:ed:4b:4e:a1:ee:d0:dc:51:e9:3c:53:56:
         c3:f3:d3:b1:94:a9:53:6b:36:84:d8:43:38:3c:a5:7c:8b:94:
         74:5d:cf:da:5c:38:d4:51:bc:fc:21:ce:3d:fb:81:ce:32:e3:
         c4:43:ed:d0:45:bf:4f:e2:73:92:d1:89:e7:4b:1f:cc:4f:af:
         9b:50:f7:06:0f:04:02:45:89:e3:66:98:b5:61:73:10:cd:c1:
         c8:58:02:69:c6:58:32:23:e2:93:0e:87:ac:ef:44:b0:0e:a7:
         c4:82:e6:51:a5:24:4b:1a:23:e4:2a:d9:82:5c:50:b9:5e:1f:
         08:81:a3:a2:ec:eb:8b:3c:2b:42:d3:53:b8:f2:29:3e:86:87:
         0a:2c:82:8d:97:86:6b:b4:a7:59:57:b9:2d:3e:54:a3:35:3f:
         03:19:12:bf:bd:68:53:54:8f:a7:c0:48:4e:b2:3f:f6:e8:51:
         72:68:44:01:28:94:f3:2a:26:93:1e:5a:9b:84:2c:c3:26:5c:
         09:81:36:4c:6e:2b:4d:e4:77:74:a4:71:6d:cd:d3:cc:76:08:
         90:e4:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:34 2026 by rpki-client