This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138362e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          5qjlTgS22MKkoWor0zus0rFwByEebaESQSFEaKIcLKU=
Subject key identifier:   6A:6E:CD:4E:19:CB:8F:83:0E:9F:19:9C:0F:DC:AA:57:CE:70:D4:7B
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3B7860C3B027320438F6F2B4538EF8B7B2676349
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:32:34 +0000
ROA not before:           Tue 06 Jan 2026 19:27:34 +0000
ROA not after:            Tue 05 Jan 2027 19:32:34 +0000
asID:                     20299
IP address blocks:        200.30.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:78:60:c3:b0:27:32:04:38:f6:f2:b4:53:8e:f8:b7:b2:67:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:34 2026 GMT
            Not After : Jan  5 19:32:34 2027 GMT
        Subject: CN=6A6ECD4E19CB8F830E9F199C0FDCAA57CE70D47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:bc:c9:d2:26:63:ba:ed:51:fc:6a:4e:08:
                    2a:3e:a5:e5:3c:7d:e7:81:17:61:bf:f0:99:45:5a:
                    52:04:59:fc:83:ee:26:ab:16:c1:51:ad:79:82:ac:
                    82:37:5f:f1:12:cb:41:6d:fd:52:d9:97:72:17:f9:
                    c1:23:07:ca:7a:30:2d:a0:d5:46:9c:b8:b7:68:af:
                    0d:cf:99:bf:67:5e:20:86:88:17:8a:71:48:b7:61:
                    98:1c:99:a3:78:1c:8c:10:e7:fe:7c:97:3b:2e:9b:
                    17:d4:95:b7:21:06:eb:e6:29:80:3d:c1:82:9e:72:
                    97:4e:1b:69:3f:b9:db:f6:37:be:a4:04:3a:c5:b9:
                    ab:16:f4:49:db:e5:35:85:cc:74:fa:6d:1c:b8:f2:
                    26:a7:24:8a:f6:e8:24:a8:04:69:cd:c1:8e:76:b9:
                    8e:be:42:34:c4:e3:0d:50:2e:77:a6:5d:10:94:8a:
                    85:5c:af:8e:5c:be:30:72:17:df:f7:a9:2d:61:eb:
                    61:78:af:5f:ef:d3:55:36:f7:47:16:f8:71:24:47:
                    e4:82:ac:45:be:06:fa:4f:67:aa:ac:39:61:95:a7:
                    d8:44:e7:a1:4e:0c:20:17:c8:b7:2e:c5:86:03:9a:
                    e8:75:88:8d:58:ca:e1:0c:bd:ef:c0:02:1f:d3:17:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:CD:4E:19:CB:8F:83:0E:9F:19:9C:0F:DC:AA:57:CE:70:D4:7B
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:bc:e0:79:c6:d6:77:5c:32:d8:1b:34:49:a8:8c:8c:e9:
         8e:ff:38:14:36:d0:65:b1:b5:84:39:34:88:c8:32:be:a6:01:
         22:3d:1c:8b:f5:31:ca:35:1d:53:8d:8d:77:15:71:5c:ca:93:
         88:84:98:83:94:53:4f:f3:50:8b:e9:99:a8:1d:dd:96:2d:b4:
         4d:21:8b:3d:40:7e:29:70:91:73:11:bf:19:34:49:fb:30:23:
         94:1d:6a:ea:13:e5:1c:db:27:cc:3a:bd:7f:62:5f:20:46:8c:
         74:63:9e:1e:04:83:f9:6c:fb:33:04:a4:0b:fe:cc:17:9d:95:
         60:db:0f:3c:21:8b:4e:78:d5:c6:ee:41:39:e1:b6:b1:0c:1c:
         f5:c0:79:2c:e2:9b:6c:89:14:65:b1:6d:47:9b:57:33:07:2e:
         fb:7b:11:6c:3c:91:68:b0:09:a1:b4:9b:1a:bd:8d:89:68:c9:
         38:3b:86:52:66:f1:6e:9a:5c:6e:bd:78:ca:ce:12:86:33:51:
         75:0f:6f:78:6a:b1:ee:d4:b4:15:5c:16:74:0d:99:fe:8f:50:
         3f:d4:54:da:00:9e:07:a6:7d:af:57:c1:ab:f9:3b:92:f7:4e:
         ad:db:f1:fb:8d:6d:6f:53:75:ea:88:8d:48:2f:7c:10:61:7f:
         13:44:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:20 2026 by rpki-client