This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa
File:                     3230302e392e39362e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=
Subject key identifier:   29:D3:2F:64:EC:45:5D:43:D1:F8:BF:BF:14:43:B7:D4:42:99:F0:8B
Certificate issuer:       /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial:       45283657CCDDCA621C606B14C10EEAB6F5771B02
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:13:19 +0000
ROA not before:           Tue 06 Jan 2026 19:08:19 +0000
ROA not after:            Tue 05 Jan 2027 19:13:19 +0000
asID:                     61468
IP address blocks:        200.9.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:36:57:cc:dd:ca:62:1c:60:6b:14:c1:0e:ea:b6:f5:77:1b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
        Validity
            Not Before: Jan  6 19:08:19 2026 GMT
            Not After : Jan  5 19:13:19 2027 GMT
        Subject: CN=29D32F64EC455D43D1F8BFBF1443B7D44299F08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:10:17:d7:9a:b2:3d:d4:27:1a:26:a6:18:
                    37:89:35:d9:a7:e5:75:9b:f8:d1:d2:c6:6b:d4:4e:
                    82:a6:79:ab:bb:ff:56:e9:d0:97:f3:16:85:01:46:
                    1c:e1:35:f3:c1:9f:93:9e:9c:14:40:7f:46:6f:13:
                    60:a4:18:81:3a:a9:84:b2:80:1b:fc:cb:bc:92:e2:
                    38:f8:a4:6f:04:58:44:cc:f9:46:43:45:84:5f:b9:
                    71:7a:ab:74:11:29:96:3c:f0:5d:ab:29:65:1f:89:
                    11:2b:c8:28:dc:d7:7d:90:26:23:be:da:9f:78:85:
                    f3:5d:bf:f2:df:c7:48:d9:82:8e:c1:42:25:a8:f1:
                    52:cd:19:76:1b:42:61:cc:51:61:4d:52:f2:6a:29:
                    0d:f1:5b:36:8e:87:96:60:e5:e7:66:b1:81:f7:4c:
                    2b:36:38:5b:b8:9c:28:8f:60:4b:3e:62:db:ae:83:
                    e0:5f:26:01:90:b7:7b:00:18:d1:17:0e:fe:8d:a4:
                    10:eb:8a:3f:e1:5e:41:ce:5c:e7:22:79:f4:b5:08:
                    a0:13:bd:05:89:de:8c:d4:d7:c8:80:14:56:19:96:
                    51:00:c9:b2:6f:17:47:84:c7:b1:7c:fb:61:0b:9a:
                    8f:6f:27:d0:7d:5f:db:21:a5:79:0f:6d:2c:26:ba:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:2F:64:EC:45:5D:43:D1:F8:BF:BF:14:43:B7:D4:42:99:F0:8B
            X509v3 Authority Key Identifier:
                keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:08:cc:1d:74:0d:bf:a9:fe:29:0b:41:34:45:a3:15:53:98:
         78:2f:ab:4f:66:37:51:d7:80:52:d1:6e:23:d6:10:a2:6f:89:
         61:72:e8:2a:38:7d:dd:db:5d:9e:43:f4:23:33:33:53:5e:fc:
         ec:91:f3:5f:45:4d:18:ef:4a:a1:0b:c8:b3:b5:cc:09:57:48:
         06:4a:3b:da:47:2c:bd:9b:ed:8a:28:c4:15:54:c7:5b:45:52:
         03:31:db:37:62:79:84:52:eb:4a:0b:ca:15:10:39:7f:b9:d1:
         53:de:50:1d:94:e6:f2:a7:b5:73:f9:c4:b5:25:e7:e8:9b:af:
         3b:d5:6a:60:46:b3:7f:c3:cc:8b:22:c2:a5:7a:bc:07:ab:83:
         fa:fc:b4:db:37:68:d0:90:93:55:9c:15:9c:2f:a0:5a:bc:45:
         8b:5f:3e:4b:d7:2a:15:87:dd:c4:2b:fe:59:d1:1a:1f:b9:b3:
         81:f3:2e:9d:f2:49:8e:b9:07:82:2b:3f:98:cd:5b:8a:45:21:
         d3:7c:c6:02:8c:db:13:78:2f:a7:4f:f9:4d:1d:9d:f0:41:db:
         37:17:11:95:a5:60:fa:20:a2:83:a3:8a:79:bb:4d:cf:18:50:
         b6:e8:98:c5:66:a9:6b:9e:50:ae:24:d9:05:d6:68:f6:ae:2f:
         13:2e:04:f5
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIURSg2V8zdymIcYGsUwQ7qtvV3GwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG
OEE3NzdBQTAeFw0yNjAxMDYxOTA4MTlaFw0yNzAxMDUxOTEzMTlaMDMxMTAvBgNV
BAMTKDI5RDMyRjY0RUM0NTVENDNEMUY4QkZCRjE0NDNCN0Q0NDI5OUYwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhBAX15qyPdQnGiamGDeJNdmn
5XWb+NHSxmvUToKmeau7/1bp0JfzFoUBRhzhNfPBn5OenBRAf0ZvE2CkGIE6qYSy
gBv8y7yS4jj4pG8EWETM+UZDRYRfuXF6q3QRKZY88F2rKWUfiREryCjc132QJiO+
2p94hfNdv/Lfx0jZgo7BQiWo8VLNGXYbQmHMUWFNUvJqKQ3xWzaOh5Zg5edmsYH3
TCs2OFu4nCiPYEs+Ytuug+BfJgGQt3sAGNEXDv6NpBDrij/hXkHOXOciefS1CKAT
vQWJ3ozU18iAFFYZllEAybJvF0eEx7F8+2ELmo9vJ9B9X9shpXkPbSwmug7TAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUKdMvZOxFXUPR+L+/FEO31EKZ8IswHwYDVR0j
BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD
RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC
RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3
NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw
N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wLzMyMzAzMDJlMzkyZTM5MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAlgMA0GCSqG
SIb3DQEBCwUAA4IBAQBLCMwddA2/qf4pC0E0RaMVU5h4L6tPZjdR14BS0W4j1hCi
b4lhcugqOH3d212eQ/QjMzNTXvzskfNfRU0Y70qhC8iztcwJV0gGSjvaRyy9m+2K
KMQVVMdbRVIDMds3YnmEUutKC8oVEDl/udFT3lAdlObyp7Vz+cS1Jefom6871Wpg
RrN/w8yLIsKlerwHq4P6/LTbN2jQkJNVnBWcL6BavEWLXz5L1yoVh93EK/5Z0Rof
ubOB8y6d8kmOuQeCKz+YzVuKRSHTfMYCjNsTeC+nT/lNHZ3wQds3FxGVpWD6IKKD
o4p5u03PGFC26JjFZqlrnlCuJNkF1mj2ri8TLgT1
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:56 2026 by rpki-client