This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
File:                     3230302e32342e31362e302f32302d3230203d3e20323733303237.roa (raw, json)
Hash identifier:          BkGdV/150W1TILaleQFz88YUE9Ay12y2ss8LKtZCzJE=
Subject key identifier:   B3:32:65:2B:F1:23:9E:93:A6:24:55:54:71:00:9C:5B:2C:D9:27:38
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       2A02AC02E7A56A1F2C5A6FADF58292E970667425
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
Signing time:             Tue 06 Jan 2026 19:42:56 +0000
ROA not before:           Tue 06 Jan 2026 19:37:56 +0000
ROA not after:            Tue 05 Jan 2027 19:42:56 +0000
asID:                     273027
IP address blocks:        200.24.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:ac:02:e7:a5:6a:1f:2c:5a:6f:ad:f5:82:92:e9:70:66:74:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Jan  6 19:37:56 2026 GMT
            Not After : Jan  5 19:42:56 2027 GMT
        Subject: CN=B332652BF1239E93A624555471009C5B2CD92738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:a7:6f:1a:27:99:7d:ff:11:5c:d3:d0:c5:
                    6a:d4:69:1a:1a:99:ba:4e:2d:06:43:50:2c:85:d7:
                    1a:3d:fb:34:1a:7f:2a:01:fd:b2:72:53:ed:c7:cf:
                    94:77:cb:24:5d:23:38:c9:8f:43:40:5e:4f:c4:fe:
                    0e:a5:34:e2:4b:f3:a8:5d:11:14:2d:60:b4:99:7f:
                    50:96:6d:b3:5a:e8:98:61:70:78:5f:7a:ad:ba:53:
                    9d:a1:18:e8:b7:ff:c7:7e:48:f5:c0:75:fc:9c:81:
                    3b:a5:50:9e:a4:77:a4:61:06:9c:fd:5d:17:a9:56:
                    0c:4b:9b:36:e2:78:57:53:45:c5:9d:d3:ce:74:a3:
                    37:fb:e9:84:c2:1e:5e:6d:df:21:a8:b7:53:94:ff:
                    e9:dc:10:75:d3:76:9c:fd:c4:16:c3:58:5d:72:7c:
                    d0:c6:c8:73:c0:4d:f3:2d:25:c3:ed:1b:68:ea:19:
                    fe:f9:ee:6f:b2:7a:56:cd:d6:0d:bf:c9:12:4f:82:
                    35:4d:c4:0c:62:98:69:8e:2a:bb:89:3f:42:19:db:
                    8d:90:40:14:85:81:de:e4:1e:61:01:fd:af:6e:34:
                    d1:fe:3a:c4:64:f6:4e:cd:ca:69:c0:d6:36:0a:10:
                    b4:0a:e9:95:6c:94:fb:72:d3:b7:59:7e:86:93:0b:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:32:65:2B:F1:23:9E:93:A6:24:55:54:71:00:9C:5B:2C:D9:27:38
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:62:5b:bc:bb:c3:c6:58:d9:07:9b:8e:79:09:0f:b0:16:
         3e:18:e6:63:cb:34:b3:12:22:9c:49:8a:88:60:25:20:bb:bb:
         72:84:9d:ed:a7:72:49:9a:96:d0:77:f6:3b:ef:17:56:61:57:
         41:41:bc:45:d3:74:bd:33:6e:6b:7f:ec:8a:45:db:39:8c:95:
         ea:a4:f4:f4:e1:55:98:b0:28:7a:4a:51:13:ba:e0:c6:fb:80:
         60:cf:b2:f0:71:97:52:d7:e4:09:68:e1:25:a1:3e:d6:05:98:
         57:53:63:94:3d:7b:b0:bc:ce:47:4c:b8:96:54:c7:a5:80:a0:
         02:53:e3:31:90:5c:30:7b:5c:17:36:26:c3:e0:84:3d:af:27:
         13:31:f8:2f:ad:11:75:08:61:f1:1a:1a:22:c1:07:bb:ef:c7:
         64:4e:12:66:3f:ba:bf:df:ac:63:c7:c0:9f:71:30:ab:41:4a:
         68:b9:57:59:4d:3e:b4:c1:b7:04:b4:9d:b5:18:1d:bc:d0:3a:
         35:46:6f:6f:a1:92:0e:b6:e0:70:cf:cd:c6:bb:ac:2b:6d:d1:
         38:5b:d5:51:a0:e1:24:b7:16:fd:1b:89:4f:c3:d7:2a:3c:c0:
         22:7f:c1:8f:0f:6b:87:31:8c:bb:96:4c:d7:a3:8d:42:f8:c0:
         d1:a4:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:54 2026 by rpki-client