This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa
File:                     3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa (raw, json)
Hash identifier:          FkG5V+UueTuKxO2FbEbdKWt2SSEV5Vi7kvFRUuBAzKA=
Subject key identifier:   5A:37:41:49:0A:03:DF:C7:37:71:78:7A:00:4F:D9:82:F6:F0:97:F8
Certificate issuer:       /CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
Certificate serial:       28D4E32F539A0517E742EB9F3B87DE513F952362
Authority key identifier: 09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa
Signing time:             Tue 06 Jan 2026 20:49:43 +0000
ROA not before:           Tue 06 Jan 2026 20:44:43 +0000
ROA not after:            Tue 05 Jan 2027 20:49:43 +0000
asID:                     266749
IP address blocks:        200.26.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d4:e3:2f:53:9a:05:17:e7:42:eb:9f:3b:87:de:51:3f:95:23:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
        Validity
            Not Before: Jan  6 20:44:43 2026 GMT
            Not After : Jan  5 20:49:43 2027 GMT
        Subject: CN=5A3741490A03DFC73771787A004FD982F6F097F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:f9:3b:36:50:0b:0f:1c:31:69:59:db:7d:
                    3d:b8:47:16:d1:07:57:3b:d6:fc:4b:b7:4e:5f:71:
                    65:03:46:ff:a2:5f:1c:8f:00:a0:ac:1d:0a:60:b7:
                    8e:f9:65:b2:02:e1:00:a8:65:31:0d:5c:1e:88:92:
                    5a:ce:37:48:61:55:b1:31:22:61:71:e4:27:da:29:
                    ac:27:98:72:21:83:a6:e4:aa:f2:c6:e2:cd:95:f4:
                    05:87:c4:cf:7f:85:0a:f2:92:4c:47:ea:42:40:2e:
                    e0:94:a4:63:de:31:6a:0c:08:05:f6:4e:f4:7c:53:
                    f3:3a:ea:f7:2d:c5:5b:40:10:99:5b:7e:dc:bd:e7:
                    2f:a5:f8:c5:91:da:b0:ff:14:9c:fd:a2:19:60:27:
                    3e:8c:9b:c7:9a:bc:5e:84:72:97:95:31:38:a0:b6:
                    eb:01:c6:c6:15:fb:8d:e8:e5:91:28:66:d4:47:80:
                    37:84:51:31:3d:45:a0:1e:ed:33:c9:c3:63:45:e9:
                    63:a0:33:1c:77:95:a3:08:15:2c:90:52:84:d2:4d:
                    5f:5c:94:c5:63:cd:d1:84:01:52:00:4e:f2:8f:97:
                    ed:ad:e9:68:77:8c:df:71:7c:cc:31:0b:15:e5:4d:
                    0a:f0:76:dd:f8:47:4e:a6:99:1c:34:0a:d3:a7:da:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:41:49:0A:03:DF:C7:37:71:78:7A:00:4F:D9:82:F6:F0:97:F8
            X509v3 Authority Key Identifier:
                keyid:09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:45:d9:f2:11:33:85:71:04:c7:42:0b:5e:c9:85:da:80:
         33:1d:9b:b8:e7:7d:e5:48:d3:c2:b0:2b:ef:f5:1c:74:f5:f0:
         08:5a:2a:7b:10:c8:0d:bb:60:58:aa:c7:b0:78:e1:da:5d:b4:
         b0:a8:a3:69:25:a0:14:92:72:7c:71:6e:14:19:3e:d9:ec:5b:
         f9:de:88:4c:23:08:ac:61:22:2e:4b:d3:e9:6e:77:9b:8d:8f:
         d9:b9:56:c9:30:7b:05:6b:57:50:aa:2e:c0:d1:c1:7f:7c:d9:
         2a:31:4f:0f:d9:da:6a:58:34:64:01:f7:be:8a:78:26:b1:84:
         83:93:1a:c1:fe:2f:84:6c:96:e5:a3:b7:ff:7b:1c:22:e4:9e:
         f8:ea:87:b0:53:0d:c1:b9:19:95:47:83:09:2e:bf:c1:99:4f:
         ae:62:c5:dd:a6:24:e6:0c:34:f7:7e:bc:31:51:90:63:1a:54:
         bf:e8:9d:ab:9f:45:df:33:4d:ce:f4:1e:17:53:a9:0c:c2:3a:
         31:51:8d:7a:25:29:c7:51:cd:6c:22:e0:0f:3a:52:ff:6a:5a:
         0c:b2:a7:bc:cd:92:72:80:5d:7b:31:cc:c7:a0:05:50:11:2d:
         61:6f:3b:02:c9:af:24:f4:53:2d:ae:86:94:aa:e3:54:c4:2b:
         0a:fa:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:11 2026 by rpki-client