This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
File:                     3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          s2FzURYdB7usJFIvw+inMROARenMdsIcARumJzayp6g=
Subject key identifier:   69:6C:12:B5:0A:AA:19:C3:DA:57:19:88:FE:A4:78:B6:E2:B5:F4:88
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       25C6387A9A77AFBCD4684F683890BCEF67CC0506
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 06 Jan 2026 20:50:15 +0000
ROA not before:           Tue 06 Jan 2026 20:45:15 +0000
ROA not after:            Tue 05 Jan 2027 20:50:15 +0000
asID:                     26505
IP address blocks:        200.124.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:38:7a:9a:77:af:bc:d4:68:4f:68:38:90:bc:ef:67:cc:05:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Jan  6 20:45:15 2026 GMT
            Not After : Jan  5 20:50:15 2027 GMT
        Subject: CN=696C12B50AAA19C3DA571988FEA478B6E2B5F488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:d2:76:1b:da:b3:08:5a:9c:24:83:90:96:
                    6f:c9:36:1b:32:41:19:d5:c0:1b:ba:55:3c:ac:7b:
                    dc:3d:90:08:d8:a4:5b:b3:31:38:ee:31:86:9b:6c:
                    c5:49:a6:54:13:fb:ce:79:6b:cd:44:27:cd:48:b1:
                    b2:42:46:a2:f6:f3:a0:42:26:05:6a:c2:24:31:a0:
                    a0:5c:42:1c:63:94:db:59:fc:de:35:ad:0a:5e:98:
                    dc:d9:c3:02:79:68:c2:a1:05:66:22:6a:9b:b0:13:
                    25:8e:28:83:0a:74:d0:42:8d:52:5b:b3:f8:c4:0d:
                    ba:0e:30:24:ef:9e:18:88:61:33:d0:e1:7e:43:b6:
                    3b:f6:e1:e7:d0:04:69:98:37:ae:50:45:a3:d8:2c:
                    25:5a:13:3d:74:34:e4:29:bf:29:7f:28:40:ee:5c:
                    53:2f:e5:34:40:cd:f4:76:a2:67:38:d8:dc:9d:05:
                    27:f1:92:d9:20:ce:4b:06:06:a3:bd:bb:cc:75:f8:
                    77:86:bd:ae:d9:34:2d:89:0e:da:18:7d:a7:ef:98:
                    4c:4a:72:62:db:8b:8a:dc:bc:db:b3:6c:2f:ef:ac:
                    be:b7:4e:31:23:17:f4:41:93:e6:76:a4:de:8c:36:
                    ef:38:a9:0c:fc:06:35:14:65:21:af:05:4a:38:0c:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:12:B5:0A:AA:19:C3:DA:57:19:88:FE:A4:78:B6:E2:B5:F4:88
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:4a:08:66:0a:46:16:cb:7d:77:01:50:34:7a:5a:f0:1c:00:
         bb:11:1f:af:59:73:d0:d8:74:86:3f:14:4a:d0:b6:90:03:f9:
         e6:8e:55:87:38:1f:7d:8d:49:02:2d:19:a3:26:26:d2:f4:9d:
         18:ab:ec:0e:c2:be:2b:68:58:44:d4:14:7c:20:d8:2c:5a:7d:
         4b:37:75:c1:50:67:71:8b:c4:ac:b7:b3:99:3d:02:a6:85:a4:
         11:3c:3c:52:d2:a9:96:9d:5c:2a:67:0a:cc:1c:0f:f5:37:c4:
         5e:fd:bf:88:7f:60:26:4b:06:e9:36:d3:0d:12:4d:1b:0b:14:
         8f:04:60:7a:a4:2e:a9:b0:63:09:d9:33:db:fa:56:39:ec:ee:
         8f:68:70:5b:e0:c3:8e:5d:b7:cb:6f:c8:48:82:40:0e:d3:8e:
         d7:01:8a:77:27:84:70:6b:41:5b:01:6c:08:86:2a:7e:05:da:
         66:ed:c4:c4:94:22:1f:6a:78:5f:bb:cb:73:69:0d:1d:73:b0:
         2b:96:49:34:7b:a1:67:d4:42:34:09:bb:e1:b2:aa:e1:f3:ec:
         78:3e:bb:4b:f2:be:39:b0:d2:ef:2f:b8:a9:14:8a:a6:5e:f2:
         09:ca:a6:ab:83:42:e1:be:88:61:79:fe:c0:67:17:f2:d0:cb:
         f0:93:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:41:28 2026 by rpki-client