This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203230333132.roa
File:                     3230302e302e36352e302f32342d3332203d3e203230333132.roa (raw, json)
Hash identifier:          iQrBc44bSdojdMXmm4W7PMgBroQYK3JWgDCyHm6zjDA=
Subject key identifier:   2B:02:E5:C1:02:02:E8:57:C4:8F:70:75:72:68:A7:B6:03:8E:38:8A
Certificate issuer:       /CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
Certificate serial:       3D71ABF42FF8320CFF3C36A0785EE0B778E5351E
Authority key identifier: 01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203230333132.roa
Signing time:             Tue 06 Jan 2026 19:20:09 +0000
ROA not before:           Tue 06 Jan 2026 19:15:09 +0000
ROA not after:            Tue 05 Jan 2027 19:20:09 +0000
asID:                     20312
IP address blocks:        200.0.65.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:71:ab:f4:2f:f8:32:0c:ff:3c:36:a0:78:5e:e0:b7:78:e5:35:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
        Validity
            Not Before: Jan  6 19:15:09 2026 GMT
            Not After : Jan  5 19:20:09 2027 GMT
        Subject: CN=2B02E5C10202E857C48F70757268A7B6038E388A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:26:da:09:32:23:d8:41:6e:e1:91:23:13:
                    a7:0c:1c:f3:8f:49:b4:1e:71:4f:d1:1e:98:63:d7:
                    b8:c2:0a:22:c4:eb:63:d0:ba:f5:f3:21:2e:a7:40:
                    fc:9b:3d:cf:1f:a4:ca:a0:ed:06:5e:be:c2:5c:37:
                    9b:cb:3c:9b:d8:48:f7:58:e8:a3:2b:bf:4e:a2:76:
                    63:43:26:8d:e6:76:9f:cd:29:3a:7f:f1:4d:33:2c:
                    d9:14:16:b7:a8:3f:b5:a4:e6:1b:24:bb:5c:01:8d:
                    f5:a5:36:67:ed:e3:d7:5d:a0:83:aa:db:d8:37:79:
                    43:f2:a2:6f:20:56:53:e6:d8:8f:b2:cb:de:a2:bf:
                    2d:e7:e2:de:c0:e4:c6:0c:3a:d7:e5:c9:d5:3c:95:
                    c3:e0:85:52:18:9a:0e:12:b8:17:83:bb:22:99:a6:
                    31:dd:29:de:0e:7b:0a:40:a0:ad:cf:db:0a:c6:eb:
                    f7:7e:03:30:33:ce:29:9f:fa:06:bc:4b:1e:69:64:
                    ce:11:6e:34:1a:04:49:14:d3:62:d7:eb:ad:90:5b:
                    bf:ab:0a:bc:b9:cf:69:7b:c4:71:39:7f:a4:3f:71:
                    f6:26:96:0e:25:7b:ab:35:de:b6:ac:a3:7d:0c:90:
                    d9:a4:04:37:02:47:ed:db:31:d1:41:59:e2:e8:60:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:E5:C1:02:02:E8:57:C4:8F:70:75:72:68:A7:B6:03:8E:38:8A
            X509v3 Authority Key Identifier:
                keyid:01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:bb:06:51:6d:d3:04:e8:3c:78:68:88:84:fd:89:ab:2a:
         b9:1a:e1:7a:50:39:e7:02:ad:bf:b7:24:d4:85:64:8e:86:79:
         2a:4b:cb:52:9c:62:38:c7:11:5b:d4:66:2f:cb:56:be:47:d6:
         63:cf:f2:67:71:9d:86:06:ac:ab:3a:ba:18:27:d0:f1:ee:30:
         dc:38:51:3b:c3:07:c4:7a:ec:c3:8a:42:1b:1b:04:e3:5c:2c:
         f6:63:28:17:6a:88:c2:1a:25:1a:3c:6e:a6:99:9c:0a:34:80:
         2c:b2:32:32:45:51:a7:53:f9:4e:f3:26:70:7a:46:99:e7:5e:
         d9:3c:96:50:6a:21:65:f6:40:18:b6:c1:2e:69:3d:da:86:6d:
         be:38:db:e6:fc:d5:b4:0d:72:23:0d:70:56:fb:59:06:dd:22:
         ab:77:e5:2c:9f:9d:c1:85:d7:66:f3:51:df:93:b5:ca:3e:68:
         e8:0e:8e:e7:9e:71:cf:97:e7:08:6f:84:69:ce:76:14:db:b5:
         5e:38:29:03:90:17:90:10:a4:73:ed:ab:ab:20:a8:74:62:cf:
         2f:b3:c7:4a:1d:e2:a2:8b:70:38:44:40:ae:49:e9:63:8c:9c:
         e3:ec:36:b2:eb:1c:d6:61:66:c9:cb:7d:57:04:d3:54:ab:cc:
         5f:6a:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:48:41 2026 by rpki-client