This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa
File:                     3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa (raw, json)
Hash identifier:          JtsnGBQhgCynFFqjIBi/QuOVwy/3A2ZK7Xd2EAaScJA=
Subject key identifier:   D2:FE:B9:07:ED:D0:01:73:F5:B6:19:55:D8:F2:BD:7C:0B:19:A8:32
Certificate issuer:       /CN=122452530145B6E9E7000BD6632DFA81AB3C70CB
Certificate serial:       707263B8622C0ED79B2C9F15004BDFB810FAD8C3
Authority key identifier: 12:24:52:53:01:45:B6:E9:E7:00:0B:D6:63:2D:FA:81:AB:3C:70:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa
Signing time:             Mon 19 Jan 2026 13:26:05 +0000
ROA not before:           Mon 19 Jan 2026 13:21:05 +0000
ROA not after:            Mon 18 Jan 2027 13:26:05 +0000
asID:                     16921
IP address blocks:        200.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:72:63:b8:62:2c:0e:d7:9b:2c:9f:15:00:4b:df:b8:10:fa:d8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122452530145B6E9E7000BD6632DFA81AB3C70CB
        Validity
            Not Before: Jan 19 13:21:05 2026 GMT
            Not After : Jan 18 13:26:05 2027 GMT
        Subject: CN=D2FEB907EDD00173F5B61955D8F2BD7C0B19A832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:f0:d7:a7:66:a8:69:05:bb:61:a1:7e:aa:
                    f4:f8:10:4c:18:fd:b6:0d:23:c7:7c:04:69:cf:e9:
                    19:d5:bc:ec:97:85:8b:5a:12:84:de:97:21:6f:a6:
                    f6:63:d1:a0:38:98:b2:00:97:d6:32:d7:28:d7:18:
                    28:fe:2c:04:00:7b:2c:8d:ad:27:3e:07:73:75:2c:
                    98:d4:d1:03:fd:00:0e:d7:ae:db:2e:f3:fa:73:09:
                    85:cc:86:d9:d5:43:8f:4a:54:f0:c8:c2:00:05:6d:
                    01:0a:de:57:31:4a:39:72:6a:ba:18:34:49:40:9b:
                    71:73:68:81:62:78:4d:9d:76:8c:76:0d:29:11:09:
                    4d:61:97:1c:d1:ec:a6:7c:75:69:ae:65:1b:0e:17:
                    55:eb:77:99:d3:b5:a6:98:26:ff:bb:d3:14:d5:98:
                    b9:53:dc:3e:ef:11:63:99:c9:78:5f:bc:34:e9:1d:
                    5b:51:ba:66:5d:10:a3:51:7f:b9:50:4e:8f:a7:17:
                    5e:26:78:ea:f7:68:46:6a:10:ea:56:21:88:6f:bf:
                    0d:98:76:af:e0:ae:47:18:6b:dd:27:06:52:32:44:
                    48:a9:20:38:d4:7d:73:9b:95:05:bf:1d:1e:85:50:
                    22:a5:7e:46:3f:5c:56:30:ef:71:e9:f9:6e:dc:68:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:B9:07:ED:D0:01:73:F5:B6:19:55:D8:F2:BD:7C:0B:19:A8:32
            X509v3 Authority Key Identifier:
                keyid:12:24:52:53:01:45:B6:E9:E7:00:0B:D6:63:2D:FA:81:AB:3C:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:23:06:6a:d3:f5:0e:d0:b7:6a:82:4e:20:93:ef:57:e8:
         64:37:8b:ee:04:84:9a:fe:b1:22:58:85:4e:fd:03:1f:b5:a2:
         87:38:1e:b1:e6:67:4d:f4:ec:88:2f:fd:66:a5:f7:f5:78:e8:
         aa:16:c4:87:0a:e1:bd:3a:7c:82:5a:b4:f0:95:32:3c:20:75:
         52:c5:38:34:31:99:98:dd:c4:d3:c3:fb:06:31:37:f4:05:b2:
         29:e1:7f:25:8d:fe:71:a1:4f:4a:98:36:52:2f:fc:19:e4:d5:
         33:d3:6e:b4:5f:2e:f5:03:a7:6c:83:88:f2:2f:e2:d4:e8:c2:
         80:ac:21:18:ce:31:4e:fa:82:0c:3f:ca:b1:68:bc:b5:22:a5:
         07:5c:a8:28:f7:13:f8:ba:b6:d5:2b:b9:56:89:84:66:93:d2:
         ef:93:cc:ff:26:8a:58:d2:c8:25:af:bd:3b:7f:fa:36:52:fc:
         ac:7b:82:36:fb:bd:35:75:2e:52:39:42:dc:cd:03:b3:34:5b:
         49:6e:f3:5c:b1:e1:8f:ad:a6:a5:e2:28:14:59:00:8d:8f:30:
         f2:95:85:e7:fb:32:0d:54:bd:46:56:ae:23:13:53:c3:2f:c3:
         00:38:df:92:1d:25:30:78:bc:a0:5d:4c:81:eb:86:bc:00:1e:
         12:c1:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:54 2026 by rpki-client