This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/3230302e32332e3133372e302f32342d3234203d3e2037303837.roa
File:                     3230302e32332e3133372e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          hvSYX5dbwONM+HdBkvZSmEjMJj704ZuGdtWLwJTGbII=
Subject key identifier:   2C:E4:96:F9:92:BA:2D:E6:64:E3:42:31:B9:E0:AC:A9:1D:80:3C:34
Certificate issuer:       /CN=F3DDD2FA88F38A733660D0B416A80AD945A5FF71
Certificate serial:       145BAF31E8FF077DC65F14E928095E1A57451E96
Authority key identifier: F3:DD:D2:FA:88:F3:8A:73:36:60:D0:B4:16:A8:0A:D9:45:A5:FF:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/3230302e32332e3133372e302f32342d3234203d3e2037303837.roa
Signing time:             Wed 14 Jan 2026 12:35:02 +0000
ROA not before:           Wed 14 Jan 2026 12:30:02 +0000
ROA not after:            Wed 13 Jan 2027 12:35:02 +0000
asID:                     7087
IP address blocks:        200.23.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:af:31:e8:ff:07:7d:c6:5f:14:e9:28:09:5e:1a:57:45:1e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DDD2FA88F38A733660D0B416A80AD945A5FF71
        Validity
            Not Before: Jan 14 12:30:02 2026 GMT
            Not After : Jan 13 12:35:02 2027 GMT
        Subject: CN=2CE496F992BA2DE664E34231B9E0ACA91D803C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:c9:44:ba:ab:5f:75:21:e4:0c:d2:ae:d3:
                    90:af:ed:3e:6a:aa:34:94:61:92:2d:b3:bb:c1:2f:
                    72:7b:bf:9a:9f:58:7d:21:d2:44:a0:26:c8:30:a0:
                    d6:84:78:20:f0:31:87:cf:d0:ba:a5:2e:a4:95:26:
                    9f:62:d6:d5:62:1f:dd:47:59:14:ad:73:d4:e8:7b:
                    8b:ac:94:ca:84:0d:e7:22:cb:6e:48:52:8b:cb:ef:
                    07:01:0a:84:b6:99:34:5a:32:b9:7c:d0:a3:a9:df:
                    00:8a:cc:f7:56:1d:c2:02:f4:6d:a6:97:75:fd:88:
                    37:99:7b:71:fd:46:b4:05:47:29:2a:b5:8e:da:0f:
                    0a:e2:79:f0:e2:57:99:82:a0:1e:52:07:3e:71:4b:
                    a5:a3:c2:07:8d:7c:63:db:77:31:8e:3b:da:0a:23:
                    37:f7:2a:5b:26:7e:0c:bb:05:77:bf:4e:89:dd:c7:
                    9e:21:78:5f:c2:11:ee:92:5e:30:49:af:9c:81:b6:
                    de:d7:3c:5e:5c:08:98:33:fd:f4:5b:22:91:9a:0b:
                    13:f7:5f:10:eb:18:3e:ea:45:f0:bf:97:c3:a9:b7:
                    95:f3:ac:07:40:8e:36:d6:7f:ad:b8:9e:83:58:7d:
                    1d:73:ce:25:7e:6d:5c:e6:4b:60:d3:2a:ce:39:96:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:96:F9:92:BA:2D:E6:64:E3:42:31:B9:E0:AC:A9:1D:80:3C:34
            X509v3 Authority Key Identifier:
                keyid:F3:DD:D2:FA:88:F3:8A:73:36:60:D0:B4:16:A8:0A:D9:45:A5:FF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/3230302e32332e3133372e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:89:21:5d:8d:62:38:8b:41:9a:53:25:89:61:ac:49:d5:
         8d:61:66:fb:3e:01:0a:fd:8b:73:2b:eb:76:40:ed:22:ee:05:
         b4:5a:2a:95:4f:ce:61:4a:0d:10:9f:16:3f:43:a1:7a:a7:5a:
         69:88:e7:c9:be:7a:5e:4f:ef:56:28:6f:56:bc:52:2f:c1:50:
         d3:0f:1c:aa:d7:3f:c9:19:a4:b0:35:a8:10:d0:3f:8d:2b:e1:
         5d:a3:9e:e6:eb:69:37:9c:af:00:81:a2:9a:f3:e2:35:ca:7a:
         35:0c:78:93:96:70:9c:5f:b5:4c:af:df:c5:3a:ba:d7:99:83:
         16:1b:24:be:d9:4f:8a:90:17:3b:b5:7a:1e:0e:ac:d2:f9:ea:
         61:fa:d2:ff:bc:71:00:73:d4:c3:0f:72:9f:83:d9:f3:a1:38:
         e3:4d:f4:e5:03:32:c9:c8:ac:d3:1c:95:e4:67:25:c8:18:28:
         6b:2f:b0:75:35:4f:d0:52:f6:06:db:ab:a5:5b:86:71:09:0b:
         1d:fe:07:66:97:dc:f9:d6:fd:e5:73:6f:84:63:77:d0:57:78:
         e5:bf:b3:a2:25:eb:94:be:93:9d:94:d6:89:ce:1a:7f:8c:46:
         d8:52:3e:ef:a2:3d:dd:53:e5:31:36:b0:a4:5f:8d:dc:94:5b:
         79:f0:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:18 2026 by rpki-client