This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
File:                     3230302e31302e33322e302f32302d3230203d3e20323634383530.roa (raw, json)
Hash identifier:          iDsnVvQMsiwX3xGptqLcKQd+e+FDYGgZ2lqbbLgwtgU=
Subject key identifier:   7E:C3:64:8F:E7:49:8B:10:D6:DC:B4:7A:49:56:83:68:9C:6B:EC:07
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       6489091A534574CE81AED647D3F69D6AF5542320
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
Signing time:             Tue 06 Jan 2026 19:33:06 +0000
ROA not before:           Tue 06 Jan 2026 19:28:06 +0000
ROA not after:            Tue 05 Jan 2027 19:33:06 +0000
asID:                     264850
IP address blocks:        200.10.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:89:09:1a:53:45:74:ce:81:ae:d6:47:d3:f6:9d:6a:f5:54:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Jan  6 19:28:06 2026 GMT
            Not After : Jan  5 19:33:06 2027 GMT
        Subject: CN=7EC3648FE7498B10D6DCB47A495683689C6BEC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:1d:4a:9d:18:3a:20:fd:7f:85:dd:59:48:
                    69:b5:19:e8:ab:2e:81:c7:8a:b2:be:26:90:56:07:
                    6e:19:66:a5:78:25:35:a6:3e:ef:3a:77:8e:12:39:
                    04:2c:7f:38:8c:f3:3c:18:31:ad:3d:24:ce:c2:e0:
                    e0:33:24:14:d5:49:d1:65:0d:f3:9a:27:8e:75:98:
                    71:bc:2d:33:19:36:49:89:ce:38:87:8f:ac:a3:f7:
                    c2:e4:aa:65:0a:0a:79:94:7c:20:7a:1b:ad:07:15:
                    8c:cc:6d:e0:a1:3c:93:63:8c:0a:54:87:f2:e9:32:
                    6d:34:1f:ac:c4:c5:44:d1:7e:ac:49:4d:3e:1c:bc:
                    50:0d:58:4c:03:63:bb:6b:c8:54:e2:c3:ac:ee:89:
                    ac:87:2c:e3:b6:0f:20:dc:22:29:14:53:45:e6:ad:
                    aa:22:55:97:69:4b:7d:cc:56:2c:16:07:86:3b:61:
                    e7:ea:ea:03:6f:a9:8a:45:6c:9c:e6:0a:a8:aa:02:
                    4c:a3:81:b6:54:98:04:6f:30:83:03:2a:2e:32:3c:
                    86:c0:8d:58:b7:cb:73:ff:6c:19:f9:1e:97:90:34:
                    85:37:49:19:45:bc:07:05:32:f6:47:de:b2:bf:19:
                    7b:a7:af:ce:77:bf:48:f0:b3:c4:66:ce:3f:d1:8e:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C3:64:8F:E7:49:8B:10:D6:DC:B4:7A:49:56:83:68:9C:6B:EC:07
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:f3:5e:73:e7:4d:2c:51:e7:b1:e7:eb:ef:68:da:e2:71:
         4d:ad:d5:78:35:64:73:9b:17:17:cc:fb:14:ac:87:51:8d:6f:
         53:b3:a8:eb:46:0d:c6:9c:12:bd:15:2a:48:b7:42:a2:4e:ca:
         78:1d:54:a3:5b:6d:33:38:a0:14:9a:01:c5:b4:b6:9a:a7:04:
         d0:19:5b:2a:f1:2f:af:d1:df:ce:98:13:1f:4a:e4:b6:e4:f4:
         76:36:b5:4e:e1:d7:5f:86:17:dc:95:fa:13:2b:fd:d0:99:c7:
         d2:59:10:51:3c:47:b2:91:f4:09:e5:cb:8d:58:92:d9:81:e1:
         8e:b1:22:7f:b7:73:b3:a2:d2:5e:d0:61:fe:54:90:82:79:29:
         5a:96:f2:19:76:f2:bc:fc:d5:0b:b6:a0:9f:d6:55:86:25:6b:
         4e:fe:74:7a:cf:c8:94:6e:2e:14:44:44:e3:54:1f:f9:c5:9a:
         e9:ca:8d:4b:4c:41:27:66:c5:9d:79:c1:ac:ef:0f:e6:ea:8c:
         e7:04:cd:2c:f6:25:e3:5f:11:a3:ac:64:05:49:62:0a:70:db:
         07:b9:56:5f:74:d4:bc:d2:62:a6:be:f0:82:ab:4d:67:11:aa:
         ed:b1:56:33:c4:04:95:0d:33:a7:48:b3:8a:d6:08:06:ab:a7:
         25:9c:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:24 2026 by rpki-client