This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa
File:                     3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (raw, json)
Hash identifier:          axGTveuf4QHyduVVqOjMtrRvq4XrZ30XYcOiiEz5bn4=
Subject key identifier:   06:98:B4:1F:1F:B8:3F:57:22:B5:3E:73:C5:50:61:99:BF:AB:71:75
Certificate issuer:       /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
Certificate serial:       32CE2FB5D5C387B62A4EA5267254002CCA99B886
Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa
Signing time:             Tue 06 Jan 2026 19:05:10 +0000
ROA not before:           Tue 06 Jan 2026 19:00:10 +0000
ROA not after:            Tue 05 Jan 2027 19:05:10 +0000
asID:                     270028
IP address blocks:        200.11.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ce:2f:b5:d5:c3:87:b6:2a:4e:a5:26:72:54:00:2c:ca:99:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
        Validity
            Not Before: Jan  6 19:00:10 2026 GMT
            Not After : Jan  5 19:05:10 2027 GMT
        Subject: CN=0698B41F1FB83F5722B53E73C5506199BFAB7175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:f9:e9:37:b4:90:08:8e:fb:a7:f7:11:a6:
                    fe:bb:96:87:26:3f:99:70:7d:ca:a2:9d:fb:1c:56:
                    54:1f:23:de:1f:cb:68:59:4b:8f:d8:09:a6:70:93:
                    c5:bd:43:7a:d5:b6:c4:bd:9e:9c:f9:20:47:20:07:
                    f8:27:b0:b3:52:f1:a3:53:1a:4a:20:97:03:6e:72:
                    db:5b:68:40:f5:2d:89:38:07:7e:93:d9:18:f4:f3:
                    77:46:83:32:92:48:d2:d5:c3:57:41:73:b1:e1:9c:
                    37:e3:a0:41:79:cd:af:6e:75:06:de:31:53:ab:0a:
                    1f:5f:c8:6a:fb:d6:8e:f5:70:ab:77:8b:6f:2b:a6:
                    b8:8d:af:c5:cd:ed:e8:b9:c2:6c:62:c2:56:65:35:
                    58:83:f5:6d:23:65:9a:44:1f:dd:47:2e:80:c6:23:
                    a6:c9:0e:ed:07:42:41:6a:f6:8b:82:dd:ed:88:1f:
                    20:8a:39:67:24:f1:c2:e3:fd:dc:93:7b:bc:48:14:
                    15:1f:9a:b0:c4:8a:93:f4:7f:78:fd:5a:6c:87:7d:
                    0d:76:e1:85:2d:e0:2b:41:6e:15:db:93:99:50:a9:
                    d8:35:34:93:c7:91:a3:8f:ae:17:c8:82:a8:35:3d:
                    9d:bc:0d:03:29:9e:4f:93:17:73:f9:68:08:f4:d9:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:B4:1F:1F:B8:3F:57:22:B5:3E:73:C5:50:61:99:BF:AB:71:75
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:50:c1:90:ad:c7:35:e8:09:00:13:dc:31:09:10:96:4b:8b:
         1f:74:cc:a3:6b:b7:b3:8c:a6:2d:60:90:ab:9d:b8:b8:cc:89:
         cf:a9:6a:74:77:0b:4e:c5:70:71:d2:24:fc:08:82:8b:92:52:
         bb:0a:b9:1e:36:e7:f2:40:c3:b9:cb:d9:94:f7:56:4b:6d:87:
         be:ed:5b:4b:b2:27:5b:61:35:58:cd:8b:ee:0a:6f:a8:78:65:
         74:0f:ae:34:e6:17:fb:fe:2b:bd:54:6f:df:5a:69:ff:aa:59:
         51:e3:bb:fd:e2:c8:5c:22:7e:87:d7:ba:f1:18:7c:0f:81:e4:
         fa:82:3b:95:95:f0:ce:1c:b0:4f:96:42:bd:e8:de:1f:05:a4:
         9c:e6:0c:6a:5c:e9:8e:a7:8c:02:3a:6f:be:10:ca:8d:6c:88:
         0c:73:18:4f:d1:f5:ee:35:a9:fe:3d:5f:a7:c4:82:c7:06:78:
         58:57:89:6c:16:1c:45:ec:21:58:96:3e:cb:bd:06:11:44:22:
         1e:21:f3:7a:85:ec:b1:ac:0b:44:a6:34:af:02:36:dd:af:02:
         e0:a0:a6:90:44:ac:28:57:e6:50:61:8f:c6:42:db:6b:6e:d3:
         bc:0b:57:71:ec:c2:c0:63:01:99:8b:9e:0f:65:c1:2c:4f:31:
         d7:1b:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:57 2026 by rpki-client