This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa
File:                     3230302e372e3135362e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          NSu3uh0He9RMTTsgw/u3yS1P6z9BZKvfl0+wMSG/vvc=
Subject key identifier:   85:B2:F3:10:80:9A:43:74:1B:DA:B3:B1:C5:8E:26:AB:FD:11:C1:79
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       431A2C42F0F0FD3EA87F90D9DA3E677EB5FF1576
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:30:07 +0000
ROA not before:           Tue 06 Jan 2026 19:25:07 +0000
ROA not after:            Tue 05 Jan 2027 19:30:07 +0000
asID:                     52399
IP address blocks:        200.7.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1a:2c:42:f0:f0:fd:3e:a8:7f:90:d9:da:3e:67:7e:b5:ff:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Jan  6 19:25:07 2026 GMT
            Not After : Jan  5 19:30:07 2027 GMT
        Subject: CN=85B2F310809A43741BDAB3B1C58E26ABFD11C179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:4c:52:cc:91:b5:54:9b:30:eb:f2:38:0b:
                    f9:f3:d9:62:19:83:40:70:1b:c7:c6:60:aa:9d:71:
                    83:23:7c:83:f6:48:a7:ac:56:00:66:bd:3f:df:6b:
                    71:87:e5:37:84:f0:f5:89:8c:b9:c8:19:fa:94:27:
                    7b:ed:da:4e:3d:22:fd:0e:57:c4:9a:30:d1:dd:8d:
                    05:bc:90:e3:e3:94:f4:52:39:3c:dd:85:34:29:d3:
                    d3:5e:b9:88:a9:bd:1c:15:33:72:45:f2:cf:27:35:
                    22:12:fb:92:48:03:b1:1a:18:65:af:d9:33:55:72:
                    ee:65:a1:34:09:48:11:4c:6a:38:48:1e:da:1b:44:
                    fa:af:a2:85:d1:c2:6f:31:05:bc:ab:eb:0d:5c:77:
                    59:e3:be:dd:1f:0d:c5:02:26:21:cc:40:2e:e2:fa:
                    80:46:dd:f7:79:7d:6e:2d:e3:6e:7b:09:6a:a0:12:
                    90:f9:d5:3e:48:77:eb:cc:5b:f0:a9:24:bd:90:00:
                    bb:f4:55:c5:79:b4:11:84:7b:dd:06:c9:08:61:3a:
                    2a:6c:72:20:c3:17:df:b3:75:2f:a9:e0:4c:c7:aa:
                    2c:56:7e:33:b6:10:1f:3c:1b:49:6d:ed:12:bd:f1:
                    b1:c0:8a:4f:aa:e5:d3:57:27:f2:85:2d:ce:bd:c5:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:F3:10:80:9A:43:74:1B:DA:B3:B1:C5:8E:26:AB:FD:11:C1:79
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:dc:02:6b:3f:a4:40:f6:62:a8:bc:3f:ce:3d:6d:79:9f:
         0b:9e:6a:59:67:a2:7d:10:1a:ae:c6:87:5f:44:06:bd:a9:4c:
         bf:3c:46:96:b8:a1:0f:f2:1e:33:8c:ce:08:11:95:f1:58:72:
         a3:9d:72:73:4b:7a:19:52:b5:6f:b2:df:3e:63:6c:e1:63:08:
         a7:5f:2a:bc:8e:2f:73:b4:ff:74:2c:b1:41:3f:2c:bb:80:39:
         58:01:dd:e5:59:be:c4:a1:13:37:f8:6b:50:e3:88:69:db:63:
         33:ff:e9:63:46:91:7b:8f:a5:df:53:00:52:22:0a:07:78:94:
         19:06:33:9d:fe:8a:fe:1f:c4:9e:b7:42:16:e9:ee:9d:a0:7b:
         22:46:e4:14:f5:92:de:75:00:0e:01:5f:28:93:90:22:38:40:
         1a:47:f4:10:1e:30:1d:76:39:d6:2f:ff:62:7a:96:11:8b:c6:
         b5:83:67:d9:5e:92:28:6c:1f:21:0e:b5:c8:98:3e:32:6c:f2:
         d8:84:bf:bc:d7:75:41:df:22:53:7c:8d:0c:1f:be:41:4b:3d:
         45:04:f9:0d:c8:02:61:aa:55:4b:14:62:21:e5:0e:d0:09:24:
         a0:c6:c0:8a:56:5b:66:5a:38:60:75:70:ef:f4:b9:7b:89:07:
         76:a8:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:28:22 2026 by rpki-client