This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e372e3137362e302f32312d3234203d3e203237393533.roa
File:                     3230302e372e3137362e302f32312d3234203d3e203237393533.roa (raw, json)
Hash identifier:          lSSXztcPsWd2qeeziA4h004H00zMzxWOrYjZOS4P7nI=
Subject key identifier:   23:D8:25:E2:69:93:01:14:1D:08:7C:4F:47:41:BF:7A:4B:FC:16:72
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       6F79DDDE0A1A3F90643B472271077E886AA91A9F
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e372e3137362e302f32312d3234203d3e203237393533.roa
Signing time:             Tue 06 Jan 2026 19:48:09 +0000
ROA not before:           Tue 06 Jan 2026 19:43:09 +0000
ROA not after:            Tue 05 Jan 2027 19:48:09 +0000
asID:                     27953
IP address blocks:        200.7.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:79:dd:de:0a:1a:3f:90:64:3b:47:22:71:07:7e:88:6a:a9:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Jan  6 19:43:09 2026 GMT
            Not After : Jan  5 19:48:09 2027 GMT
        Subject: CN=23D825E2699301141D087C4F4741BF7A4BFC1672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:39:f0:2a:19:d4:05:61:55:78:20:47:0a:
                    8d:fa:07:b3:cc:d4:70:9b:bf:00:d1:33:c7:b4:36:
                    dc:50:97:18:30:0f:17:1f:70:b0:93:34:57:73:06:
                    d3:63:61:c9:5e:30:28:a3:5f:e0:95:59:e1:c4:09:
                    e0:1e:09:eb:e9:c2:62:81:55:27:8f:bb:d8:7d:16:
                    3d:92:18:2e:14:e3:ea:46:eb:f4:b0:73:61:b7:80:
                    c0:16:db:4a:79:8f:a4:c4:3d:07:43:44:d3:87:aa:
                    3f:bd:5f:16:35:74:59:d4:5b:95:82:8b:f4:48:87:
                    11:83:cf:e9:eb:17:e8:68:63:7c:46:68:a8:ca:ce:
                    d7:ee:6a:c3:a7:61:7d:1c:38:15:55:51:da:90:e6:
                    61:19:75:f2:7f:cb:bd:13:67:cb:74:22:ce:02:0a:
                    54:8c:a1:8b:02:b8:84:65:60:e4:db:11:e2:25:c6:
                    1b:99:ad:4c:eb:e1:96:ed:1e:52:9c:ea:86:a0:d7:
                    12:4b:24:cb:1b:5d:86:d3:cb:21:e6:31:e6:70:bf:
                    af:60:14:47:67:d2:b3:87:2e:c2:4f:0f:b1:1b:e1:
                    76:b1:2e:d9:aa:1a:44:10:d5:0a:db:3b:e0:66:ed:
                    ae:02:ed:b2:95:e7:90:65:b8:3d:21:4c:86:b0:53:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:25:E2:69:93:01:14:1D:08:7C:4F:47:41:BF:7A:4B:FC:16:72
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e372e3137362e302f32312d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:f5:70:e4:0a:18:63:0a:62:29:08:24:e5:81:52:db:6f:
         26:1a:22:aa:18:d9:1f:2d:98:fe:e3:cd:71:47:e9:61:4e:b7:
         40:f9:42:51:b0:14:b0:b0:e0:26:bc:99:88:96:b0:4f:bc:4f:
         16:0e:37:6b:22:38:92:10:ba:fe:4b:c1:2f:13:8b:9f:ac:f2:
         ae:e2:1c:7a:5d:5d:39:4c:d7:ab:2f:23:d0:97:2b:5d:55:2e:
         d4:12:38:d8:48:d5:3b:7c:0b:b4:0b:35:d0:e2:c4:a0:06:96:
         13:0a:34:52:92:fd:77:62:7d:8e:d1:78:6a:9a:8b:57:6d:74:
         55:c0:6c:7b:73:0d:25:04:17:14:f4:ef:26:67:44:52:f8:8e:
         0e:8f:28:a1:3e:58:56:00:12:8c:55:2c:33:3d:43:72:c0:6f:
         1e:4f:29:72:77:71:09:e5:ba:81:5e:42:da:7c:12:87:91:73:
         25:8b:f6:83:1f:af:fa:7e:4b:56:85:8a:94:19:a2:90:8b:c9:
         b5:c5:e1:3c:0b:8e:90:50:16:3e:04:ea:9b:29:13:b4:ec:0f:
         1f:02:af:f4:43:5f:99:77:12:34:40:a0:87:fb:a4:77:c5:24:
         e9:0d:f3:cf:f7:44:c0:25:87:84:72:49:34:91:12:f1:e1:a4:
         50:c4:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:31 2026 by rpki-client