This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa
File:                     3230302e33302e3139322e302f31382d3234203d3e203232303437.roa (raw, json)
Hash identifier:          3M7D8Iu7SwqMuNN+ePUDHAzSnB9qZ1DgphPTvftiINo=
Subject key identifier:   90:9A:05:1A:31:F3:71:D6:A6:CF:BC:4C:78:55:C1:1A:8C:6B:1F:9E
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       60CBD6624F46392A618D94E720C7BFC9A8FF3F21
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:11 +0000
ROA not before:           Tue 06 Jan 2026 19:10:11 +0000
ROA not after:            Tue 05 Jan 2027 19:15:11 +0000
asID:                     22047
IP address blocks:        200.30.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cb:d6:62:4f:46:39:2a:61:8d:94:e7:20:c7:bf:c9:a8:ff:3f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:11 2026 GMT
            Not After : Jan  5 19:15:11 2027 GMT
        Subject: CN=909A051A31F371D6A6CFBC4C7855C11A8C6B1F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:2d:30:2c:6a:8b:30:2b:3c:0b:58:cd:f6:
                    bc:7e:7d:05:28:c9:2a:18:39:0c:17:34:e1:85:ed:
                    dc:24:d1:ae:27:b3:90:d4:b9:7f:c7:0a:ed:dd:fc:
                    dc:a0:9a:a3:0f:61:b4:1f:cd:34:51:68:2f:1c:22:
                    e1:a3:e4:92:75:a4:e3:5b:ac:9f:09:de:24:30:bb:
                    37:70:1f:9c:69:d6:b7:56:f6:c3:8f:bd:04:3c:a5:
                    4d:a1:0f:10:0f:84:ec:4d:a6:1f:26:d0:61:9a:4b:
                    6b:fe:d5:94:35:39:4c:1f:ba:ff:0f:44:4b:aa:7d:
                    89:0a:6c:e7:12:8b:f6:06:16:65:75:0a:1f:2c:b2:
                    cf:d8:6d:a1:2c:ac:d9:0f:ce:d7:c9:eb:ac:92:10:
                    a1:d9:4b:ac:6a:4d:1a:c4:7f:d2:88:90:79:cb:ff:
                    3b:7a:df:c1:7f:c4:c0:fd:06:06:2e:4c:78:a9:e1:
                    35:c2:90:5f:65:2a:30:8e:86:2c:78:f7:5e:65:ed:
                    7f:c7:b6:2e:5a:a5:65:db:42:d0:63:a9:d8:43:46:
                    29:e0:25:a0:98:ea:1b:35:57:0a:52:0f:7e:d6:32:
                    76:b8:65:ef:03:67:9d:d7:47:d7:78:f1:b9:7b:06:
                    7b:fd:4c:a9:32:2a:cd:4b:60:b4:6e:e0:39:25:47:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:05:1A:31:F3:71:D6:A6:CF:BC:4C:78:55:C1:1A:8C:6B:1F:9E
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:38:d4:44:14:ff:22:5f:2b:23:03:d1:32:9c:e9:22:6e:38:
         77:3b:46:47:a1:ed:ec:36:94:88:41:51:fb:8c:58:68:08:b1:
         5e:78:28:ca:1e:b1:85:b8:c8:81:a8:a9:ff:43:28:78:9c:f2:
         1d:f6:62:b0:2a:b4:21:75:5a:de:47:d1:96:ac:84:17:9e:be:
         dc:0b:13:72:ad:f8:39:b5:5e:69:0b:23:eb:99:0d:07:22:2b:
         d1:7c:15:a9:77:af:f7:46:37:b0:66:b1:73:9f:20:b1:ce:79:
         01:55:e0:c6:ff:4e:0f:ae:25:96:5e:43:13:c4:ad:81:e0:85:
         75:c9:f2:ca:4a:00:1c:7c:2d:33:6d:bc:cf:67:4b:a3:58:3c:
         7b:9c:72:78:43:39:c7:f1:97:0f:6a:94:a2:b2:5b:a7:12:54:
         28:97:95:25:e8:ff:05:81:57:ba:79:47:b0:62:ea:d4:9b:63:
         ff:4b:5a:3f:22:5f:25:59:a3:28:aa:d7:e6:64:08:5c:54:a2:
         da:d5:d0:7f:a5:36:f5:ce:13:aa:44:14:69:2a:00:d0:c8:e5:
         8e:50:f1:24:d6:58:47:1d:6c:10:93:20:b7:d1:57:b1:fc:7d:
         f4:6f:b0:4d:6b:f7:6f:12:4b:34:75:13:9c:e4:24:39:81:12:
         85:1c:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:02 2026 by rpki-client