This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa
File:                     3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa (raw, json)
Hash identifier:          kUieDg+qLQBlodpQM8hu8aKJPnPUPgllESAMYAXjBp8=
Subject key identifier:   14:74:26:A0:44:76:40:3A:AD:CF:A0:9D:E5:CE:ED:75:0A:15:2A:CA
Certificate issuer:       /CN=8D3790B649EFEF7AC8C909FD315071001F2038EB
Certificate serial:       40B3C8C1B903DC950E636B51752DF41C1AB47300
Authority key identifier: 8D:37:90:B6:49:EF:EF:7A:C8:C9:09:FD:31:50:71:00:1F:20:38:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa
Signing time:             Tue 06 Jan 2026 20:50:44 +0000
ROA not before:           Tue 06 Jan 2026 20:45:44 +0000
ROA not after:            Tue 05 Jan 2027 20:50:44 +0000
asID:                     269907
IP address blocks:        200.26.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b3:c8:c1:b9:03:dc:95:0e:63:6b:51:75:2d:f4:1c:1a:b4:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D3790B649EFEF7AC8C909FD315071001F2038EB
        Validity
            Not Before: Jan  6 20:45:44 2026 GMT
            Not After : Jan  5 20:50:44 2027 GMT
        Subject: CN=147426A04476403AADCFA09DE5CEED750A152ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fe:c0:b1:30:f8:42:b3:e4:c5:b3:a8:f6:56:
                    18:e2:7a:da:8e:bf:ec:57:28:01:6a:d4:44:09:55:
                    2f:c8:d4:30:be:44:3b:db:94:30:db:b6:64:2f:68:
                    4e:65:86:c4:50:54:bc:3e:ea:77:60:86:e7:18:ec:
                    4e:39:b2:21:d1:5b:47:ef:f5:47:f6:00:80:d2:e6:
                    d6:60:78:30:df:59:e8:f5:84:e5:38:75:28:34:02:
                    ad:4d:18:d0:4d:c7:87:30:e1:59:cd:b3:b9:ab:1e:
                    fa:a1:99:85:96:ee:93:f6:a2:78:8d:dc:b6:b6:31:
                    66:fb:9b:bf:16:6a:dd:6a:8d:dc:1c:e6:8c:59:a9:
                    37:f0:85:92:03:2c:c0:34:2a:ee:ab:10:7b:1d:59:
                    de:0c:57:7e:d6:af:3b:dc:c1:20:91:dc:c2:1a:9f:
                    22:3a:b5:4e:71:4e:11:90:2e:0a:1a:ca:4c:28:c4:
                    24:69:d7:5e:2f:e7:71:ed:48:74:b1:36:7a:29:25:
                    ee:15:45:c9:cc:df:c5:7c:4f:fd:1a:cf:05:a6:3e:
                    74:1e:0c:63:e6:5a:07:fd:32:0a:4c:9f:d3:0c:32:
                    f6:62:6d:6a:ef:c4:5b:45:14:9f:aa:40:bd:06:2d:
                    91:b3:9b:97:b8:7e:16:ae:77:08:10:38:6f:58:2d:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:74:26:A0:44:76:40:3A:AD:CF:A0:9D:E5:CE:ED:75:0A:15:2A:CA
            X509v3 Authority Key Identifier:
                keyid:8D:37:90:B6:49:EF:EF:7A:C8:C9:09:FD:31:50:71:00:1F:20:38:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:28:ad:98:40:b5:cb:aa:c1:8c:8a:4e:60:d1:88:d9:d1:
         a3:0c:34:1b:e3:7e:25:9d:e8:48:dd:6a:14:8f:09:d4:39:75:
         40:78:7a:f4:ad:23:1b:ed:d8:08:56:ea:a5:a1:2e:8e:7b:c2:
         5a:5f:4e:58:bc:94:d4:57:18:c8:7b:ed:ad:0d:78:c2:06:e2:
         f4:1b:46:6b:c7:46:a2:b2:e5:9e:41:7e:48:77:21:ee:a2:9e:
         23:30:57:da:b5:1b:d4:bc:5a:c2:08:78:ad:43:45:f4:94:e5:
         fa:9f:5a:a1:56:9a:4a:49:1d:cf:19:0c:87:55:6b:10:9e:43:
         b6:af:84:0b:b9:f9:d2:1a:e1:48:44:c0:b6:e4:86:b5:7f:6c:
         0c:a6:da:2d:84:fe:f0:04:93:68:36:c9:5f:75:3b:82:08:fd:
         5c:e5:48:13:36:fa:b7:7e:8c:3d:36:98:f2:fb:0d:0d:e6:eb:
         c8:93:0d:df:49:5e:7c:1e:7b:0c:0d:00:b3:97:a8:8d:00:7f:
         33:af:1e:92:2c:00:06:66:b1:33:b3:d8:3b:7b:29:63:75:2d:
         10:38:d8:a9:f9:37:9a:de:ba:80:ad:67:42:a1:a9:7e:a9:64:
         2f:48:fb:2c:f1:08:c0:05:af:3c:1b:82:25:20:a3:20:b7:d5:
         41:07:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:28:42 2026 by rpki-client