This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa
File:                     3230302e302e32342e302f32322d3232203d3e203237373235.roa (raw, json)
Hash identifier:          Kkahr6eMHPATzJjbyfjEGFEUr6lTDVfw3MLM+WSgvoU=
Subject key identifier:   86:60:5A:F0:12:A2:F3:1D:75:1D:F8:A8:96:1C:7B:6E:9E:60:B6:71
Certificate issuer:       /CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C
Certificate serial:       680F1AB3BEB01E3F4AA402C26D80C6D96FA542B8
Authority key identifier: 4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa
Signing time:             Tue 06 Jan 2026 19:32:04 +0000
ROA not before:           Tue 06 Jan 2026 19:27:04 +0000
ROA not after:            Tue 05 Jan 2027 19:32:04 +0000
asID:                     27725
IP address blocks:        200.0.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0f:1a:b3:be:b0:1e:3f:4a:a4:02:c2:6d:80:c6:d9:6f:a5:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C
        Validity
            Not Before: Jan  6 19:27:04 2026 GMT
            Not After : Jan  5 19:32:04 2027 GMT
        Subject: CN=86605AF012A2F31D751DF8A8961C7B6E9E60B671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:e2:3e:4f:35:65:94:f3:07:98:ce:56:45:
                    00:f1:f4:92:ad:1c:c9:98:ce:c8:c7:89:0a:ef:bc:
                    a2:27:fc:76:53:d5:ce:61:0a:ec:85:7c:ea:0f:8e:
                    27:f2:b5:57:77:35:12:b0:11:42:cc:bd:81:74:eb:
                    9c:ea:6a:59:f5:5b:1e:13:02:f9:99:f8:85:c9:af:
                    06:80:80:4f:8a:bb:7b:65:5e:38:8a:2e:78:d1:52:
                    d3:bb:95:1a:46:a0:bd:d9:95:f9:96:39:f5:1a:cc:
                    62:ce:03:49:7b:03:ab:3e:6c:f2:ac:98:91:b8:2e:
                    2c:ff:5d:0f:f0:49:cd:f6:fe:02:e7:fd:13:29:2c:
                    7a:d0:16:c1:5a:cb:9f:69:46:56:4d:a2:40:d3:3a:
                    b2:24:48:ab:0b:64:40:af:05:43:77:89:61:6c:8e:
                    61:70:31:4d:36:fa:a0:58:42:56:cb:9a:bb:25:09:
                    5d:06:72:e2:b3:c1:2b:61:91:36:11:d0:ad:c3:06:
                    fc:65:48:96:9e:69:52:cd:53:7f:13:ac:31:b9:c5:
                    b6:ed:5d:1c:11:60:2e:03:ce:aa:6f:d8:be:f4:0b:
                    db:9b:69:2f:06:f5:59:12:c1:f7:ec:26:20:2e:04:
                    dd:1c:60:b6:cc:b9:bf:d4:21:65:4c:f4:32:0e:72:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:60:5A:F0:12:A2:F3:1D:75:1D:F8:A8:96:1C:7B:6E:9E:60:B6:71
            X509v3 Authority Key Identifier:
                keyid:4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:e6:bd:2b:45:2a:e7:8f:a2:0b:3b:04:db:a6:d9:47:a8:
         26:92:01:63:b9:e6:40:c8:a3:fb:a4:6b:48:27:c3:45:39:14:
         8f:b3:b8:7c:60:56:a7:c0:f3:19:e1:76:80:25:38:73:3c:e7:
         ae:b1:26:42:47:c9:13:3a:92:0d:44:92:c9:88:c7:9c:28:9a:
         21:e1:33:4c:4d:e2:59:60:64:9d:f3:c2:e5:62:1e:69:29:ad:
         f6:6a:1e:e7:e4:08:09:79:76:82:07:69:cf:25:7a:75:af:f6:
         26:4b:41:49:52:38:8c:4c:31:ae:4f:36:e4:c1:cf:9c:e4:f4:
         89:a1:70:4b:fb:c4:63:64:82:fb:cf:2d:ee:7e:37:2f:3c:45:
         cc:89:e5:c6:41:48:9e:d3:11:88:bf:07:b8:e0:20:1a:ab:10:
         f3:fb:0c:5a:f4:ae:40:ed:8b:fe:f1:ac:a1:1a:ee:78:07:da:
         69:0d:44:98:53:6d:50:54:b9:ea:ac:71:07:56:b2:fa:ee:bf:
         b5:4d:c5:79:c7:a4:ae:a2:20:5f:99:9f:69:52:26:8d:48:bd:
         9e:14:62:78:ea:0d:4c:21:e9:70:44:c4:7f:2d:89:4c:31:5b:
         89:da:12:0c:73:e4:51:1b:65:fc:a3:37:9b:82:5a:91:4c:8e:
         6a:53:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:27 2026 by rpki-client