This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa
File:                     3230302e372e3135322e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          cNsZlvBDybFkXQs/DagpquzHsmRYT9GDMN1fs28vvKY=
Subject key identifier:   D5:6A:C3:60:80:A7:7E:17:FB:A6:67:8D:DD:3F:F1:A8:E8:2F:E4:30
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       3F5A8E254365B849759AB72BA68AB301E7C8E15D
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:30:09 +0000
ROA not before:           Tue 06 Jan 2026 19:25:09 +0000
ROA not after:            Tue 05 Jan 2027 19:30:09 +0000
asID:                     52399
IP address blocks:        200.7.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:8e:25:43:65:b8:49:75:9a:b7:2b:a6:8a:b3:01:e7:c8:e1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Jan  6 19:25:09 2026 GMT
            Not After : Jan  5 19:30:09 2027 GMT
        Subject: CN=D56AC36080A77E17FBA6678DDD3FF1A8E82FE430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:9b:36:4b:f7:13:4f:40:b7:d4:14:21:80:
                    36:4c:4f:04:56:a8:e4:23:84:4f:e6:74:f5:0f:ac:
                    06:98:c8:70:6d:47:90:e5:ab:1a:21:83:15:0f:91:
                    e0:f3:42:4e:b5:98:52:36:7d:9f:93:eb:a0:e8:0a:
                    f2:9e:db:bd:a6:66:ea:62:4d:d8:34:54:ec:1f:ea:
                    6c:13:a0:02:ca:15:47:ea:cf:cb:44:28:ec:3e:14:
                    10:3c:48:37:aa:af:f8:7c:ae:2d:7b:a2:22:c1:a5:
                    6a:42:67:92:fc:db:6d:3b:32:c0:0f:fc:ae:66:81:
                    ed:de:2c:db:8c:25:f9:72:61:08:c9:62:53:e7:f9:
                    35:55:ca:1c:0b:3f:33:d3:15:83:0f:6b:1c:86:fd:
                    4e:14:1c:6c:f1:c5:47:01:9d:e6:c9:25:3a:7e:52:
                    0a:7d:97:f7:aa:86:e2:ee:17:e3:c1:22:bb:c0:3e:
                    d7:52:e2:da:f8:c3:b3:68:c6:87:ff:fe:66:9c:eb:
                    2a:da:5c:e9:8e:65:7f:1b:78:64:4c:45:18:d2:3b:
                    21:6f:79:31:92:ae:14:a9:70:03:35:6c:c3:7a:bf:
                    c8:8a:79:5f:61:40:2d:23:e5:a6:37:54:13:24:d3:
                    1f:82:98:2b:8a:e0:95:e0:3b:77:02:fc:67:e7:b1:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6A:C3:60:80:A7:7E:17:FB:A6:67:8D:DD:3F:F1:A8:E8:2F:E4:30
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:47:7a:08:cf:5e:cb:14:e4:8f:6e:d1:1c:14:63:a6:de:
         a4:ba:7d:e2:ad:d4:a7:d8:ac:7c:18:30:89:d0:35:f5:c2:67:
         68:80:09:3b:ca:bd:ec:30:83:f7:2d:3b:f9:f3:51:f7:db:7b:
         3d:7d:24:df:80:05:9b:bd:b7:fe:d8:d9:3c:3d:0b:00:07:bb:
         d7:38:c7:ec:b1:2d:86:a9:66:59:0c:b5:d1:2e:cc:26:a9:bc:
         45:5a:c6:9f:fc:74:a6:a4:c2:1c:4c:91:29:34:de:5a:71:1b:
         14:ed:f0:de:87:e9:e3:c5:50:9e:54:3e:fa:05:ab:0a:e2:53:
         ea:3c:4b:42:c2:74:d1:ee:92:c1:2f:cc:b2:27:b2:c5:9d:f4:
         c0:0b:f3:0b:57:02:ad:dc:9e:15:96:fe:97:c2:79:0e:0e:2c:
         20:72:85:de:7d:f4:a5:7b:6b:fe:b9:42:02:03:d3:4a:98:0f:
         5f:89:3a:76:77:ff:0a:3a:b9:c5:2b:fd:f3:42:50:a1:63:74:
         df:fa:df:99:cb:f2:a2:84:c5:3b:f3:a6:1d:5f:13:f6:ca:9d:
         97:88:d8:53:f1:42:38:4c:c5:f4:27:19:36:1b:2c:f2:a1:56:
         6c:76:3e:cc:89:51:1b:79:cd:a5:25:07:6d:3c:26:f0:f9:05:
         bc:5e:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:58 2026 by rpki-client