This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635383331.roa
File:                     3230302e3131342e38382e302f32312d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          Wk36He9CO56RNE8DakMqDciUh/vvnjy62Juhq/+3ex0=
Subject key identifier:   2C:6E:DF:F3:8A:AC:3C:5C:E4:65:0D:B4:91:99:C1:0D:FC:FD:51:69
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       0F0FEE8203C1C613983D7E1E5045B9BB3134EE65
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635383331.roa
Signing time:             Tue 06 Jan 2026 19:19:07 +0000
ROA not before:           Tue 06 Jan 2026 19:14:07 +0000
ROA not after:            Tue 05 Jan 2027 19:19:07 +0000
asID:                     265831
IP address blocks:        200.114.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0f:ee:82:03:c1:c6:13:98:3d:7e:1e:50:45:b9:bb:31:34:ee:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Jan  6 19:14:07 2026 GMT
            Not After : Jan  5 19:19:07 2027 GMT
        Subject: CN=2C6EDFF38AAC3C5CE4650DB49199C10DFCFD5169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:ae:5c:27:9a:5c:61:a3:04:25:ed:bd:32:
                    be:83:e9:82:ba:e0:aa:a1:e3:7a:5d:4e:c6:e2:02:
                    e3:e1:44:d9:b6:c8:05:b2:9a:15:92:f0:ff:7e:ea:
                    c4:af:6a:70:93:ac:a3:a3:f4:d9:49:dc:28:65:e9:
                    83:ed:6f:ca:77:7b:2d:9d:a9:14:f6:51:b5:c0:e6:
                    34:a8:57:00:d3:0d:c4:28:c3:55:22:7c:40:58:3c:
                    4e:5b:86:23:8b:e5:65:97:e1:c4:a9:f3:ba:d9:13:
                    c6:14:7d:c3:90:fb:73:6e:bd:00:0a:91:9a:e3:d9:
                    fe:b4:9a:14:73:51:02:c7:71:bf:33:3f:4f:07:1f:
                    45:c6:ad:93:bd:d9:e1:d4:7a:e5:e3:c2:72:25:26:
                    9b:f2:98:d5:cf:f8:75:43:c0:27:32:3f:31:1a:44:
                    be:3d:3d:34:d0:af:ba:62:c0:a7:cc:6d:9b:18:b1:
                    d2:cd:d2:71:ed:9c:5e:a7:3a:b6:d0:0b:cf:8a:09:
                    14:47:cf:72:7d:f4:bb:18:fa:59:a6:9a:90:94:75:
                    bc:36:07:86:26:cb:97:ec:97:13:08:0c:95:ec:ea:
                    99:90:cf:ec:39:5e:7d:44:6e:e3:e9:7e:4e:ed:07:
                    f3:30:99:00:97:2b:0c:f2:e6:d4:cd:3c:94:c8:83:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:DF:F3:8A:AC:3C:5C:E4:65:0D:B4:91:99:C1:0D:FC:FD:51:69
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:52:c8:7e:64:c3:4d:9a:92:98:92:96:a2:e2:e2:2b:08:
         02:2b:6f:41:b3:de:0a:80:d5:57:fc:80:80:ea:df:f5:f4:67:
         a0:a8:82:de:ad:08:19:56:41:f4:b5:69:d7:a3:34:3d:b4:a7:
         cd:7c:b6:e3:e3:23:80:48:64:9f:bb:48:f9:47:64:ef:07:88:
         3e:c9:06:35:25:02:bf:38:d2:2a:30:b2:c5:f1:04:3b:15:fd:
         a0:82:19:45:9e:27:00:4e:e3:0a:ee:c7:59:3b:2e:3b:17:50:
         0d:8d:78:64:73:ee:93:ac:89:11:cc:0f:1b:4a:e4:fe:53:17:
         23:98:c5:ff:25:2b:a4:63:9d:16:12:6e:20:bc:e5:99:fa:5e:
         18:1a:61:65:80:0b:f7:b4:91:5c:27:d5:b6:ed:30:2f:a8:d5:
         80:2a:f4:7b:2d:c3:89:69:90:cb:3a:93:fd:ee:bf:02:7e:a7:
         9c:33:70:bb:78:3b:1e:82:75:08:7a:4a:29:b7:02:1e:4f:62:
         8a:1c:08:0a:62:df:47:57:f7:d6:49:fa:10:40:09:1f:17:c4:
         ea:a3:d0:ef:55:d2:29:22:37:43:90:f0:1b:49:ab:19:61:01:
         d4:71:07:bb:81:60:6d:c8:05:df:6c:2c:74:6a:7e:1f:74:2d:
         90:38:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:40 2026 by rpki-client