This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa
File:                     3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa (raw, json)
Hash identifier:          FA8YlZfV3vGTYi4Gvu/iKU24uuYfr0ADgavKf+R+f+8=
Subject key identifier:   68:C9:8A:4C:D2:EF:47:26:69:25:E4:10:A3:09:AA:C7:EC:D4:87:35
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       77CFC7488730BB03BB908ECB24343041E5BFE41D
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa
Signing time:             Tue 06 Jan 2026 19:06:34 +0000
ROA not before:           Tue 06 Jan 2026 19:01:34 +0000
ROA not after:            Tue 05 Jan 2027 19:06:34 +0000
asID:                     27932
IP address blocks:        200.107.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:c7:48:87:30:bb:03:bb:90:8e:cb:24:34:30:41:e5:bf:e4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Jan  6 19:01:34 2026 GMT
            Not After : Jan  5 19:06:34 2027 GMT
        Subject: CN=68C98A4CD2EF47266925E410A309AAC7ECD48735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:8f:80:f0:72:75:1e:4d:9f:c5:f0:b9:fc:
                    87:78:1a:73:8d:a0:5f:d1:f5:3e:fe:e9:e4:b4:2b:
                    b7:43:51:5c:ff:ea:ad:a6:46:11:25:53:7e:95:97:
                    7a:76:60:33:ef:47:9e:30:96:0a:94:2c:d2:a4:ff:
                    e8:52:2d:27:d2:0b:12:07:f8:20:f6:d6:c8:cd:0f:
                    69:a0:26:06:f8:dd:fb:78:5d:96:82:87:d6:4b:8f:
                    a0:10:09:56:8a:37:dc:f6:e4:fe:d9:7e:05:86:d9:
                    fd:76:83:05:4b:e4:55:17:d5:d7:00:71:f6:5a:d8:
                    ad:72:cb:a0:b1:4b:53:98:bb:f7:96:96:a6:15:23:
                    33:da:a4:63:6b:4f:23:d7:9e:87:40:0c:c7:22:4e:
                    23:0e:ed:b5:48:d4:3f:e3:4d:83:fb:40:5e:00:75:
                    8c:a1:b3:38:cd:0b:63:82:88:38:e9:e8:aa:cd:ff:
                    dc:11:63:a5:b2:18:0a:89:0b:99:39:97:2c:08:30:
                    16:57:78:7f:09:93:b4:f6:4d:b6:d5:12:c3:0c:e5:
                    e7:05:3d:25:7e:06:77:ff:e9:23:89:1f:67:3d:9e:
                    41:81:36:8c:aa:86:72:2b:ec:4e:47:73:8e:23:97:
                    df:4f:b5:bb:e1:36:30:32:79:ce:78:80:44:ef:67:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:8A:4C:D2:EF:47:26:69:25:E4:10:A3:09:AA:C7:EC:D4:87:35
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:f9:f6:62:83:d3:7e:39:ad:9c:4c:06:79:02:06:d5:4a:f5:
         9c:cb:3a:32:fb:46:0e:dd:30:c6:ff:56:5b:0c:c9:af:16:0e:
         8e:71:9d:03:bf:15:68:47:82:59:c1:89:11:56:6b:96:ce:a6:
         08:b1:32:6f:27:be:7b:9b:38:8c:81:17:23:5d:7a:21:73:db:
         c0:8f:9f:e4:09:73:d1:1a:f2:55:8e:63:69:ea:6b:c9:48:75:
         71:1b:ad:49:a4:cf:cd:7c:13:69:dd:98:5f:22:99:96:c5:db:
         b9:17:35:fb:07:08:f3:e8:51:29:b3:be:f1:c3:00:8a:16:17:
         b4:81:27:89:4c:bd:7e:69:91:95:57:b0:3f:5b:72:ff:a6:8b:
         62:84:19:b0:91:f4:8c:16:bc:40:6a:c7:1f:01:c0:3c:71:e8:
         bf:02:a6:aa:eb:46:08:5d:19:67:b4:e9:48:71:f4:82:c0:cb:
         84:54:c2:d3:35:67:cb:ea:70:a6:44:32:96:ed:8f:b0:b1:28:
         dc:84:95:35:8b:48:10:77:22:47:c1:08:7a:2d:3a:b6:9b:6d:
         71:db:eb:54:86:e9:75:cd:e7:04:ce:2c:24:34:b9:7b:d7:54:
         df:d4:79:fa:12:c5:c2:11:67:e1:33:c1:68:c8:f3:87:7d:9e:
         c1:49:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:17 2026 by rpki-client