This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203139393035.roa
File:                     3230302e3131302e302e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          xz5UxrL7s3x33VcQpZv0tfTdJcufx4veO9CWhNnxQvY=
Subject key identifier:   B3:22:02:8E:99:32:F2:6C:A5:F2:C8:36:BA:06:8F:F6:F6:19:13:AB
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       654E0F5DE153B569F7236D3D59A162996EA0235B
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:17 +0000
ROA not before:           Tue 06 Jan 2026 19:09:17 +0000
ROA not after:            Tue 05 Jan 2027 19:14:17 +0000
asID:                     19905
IP address blocks:        200.110.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4e:0f:5d:e1:53:b5:69:f7:23:6d:3d:59:a1:62:99:6e:a0:23:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:17 2026 GMT
            Not After : Jan  5 19:14:17 2027 GMT
        Subject: CN=B322028E9932F26CA5F2C836BA068FF6F61913AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:a7:01:02:24:17:ee:84:83:fa:98:b7:2b:
                    f5:8d:ff:d3:51:f5:e5:2e:ce:54:20:61:d2:74:02:
                    93:5c:2e:59:85:fa:b0:ac:92:97:36:da:53:e9:c0:
                    05:55:e1:85:d0:7b:0e:0f:17:25:d2:94:f0:e3:b6:
                    f5:49:1f:44:cb:68:c0:78:06:11:10:d4:d9:f0:1c:
                    9c:19:bc:73:2f:56:b5:fd:40:8f:a2:02:1a:a0:9d:
                    11:c1:b8:61:a6:02:86:99:b1:d8:65:bc:97:26:ee:
                    5c:0e:b7:da:c0:1c:6f:80:2a:f8:ac:12:ff:42:21:
                    db:82:a6:08:d3:77:b0:4e:a1:c7:54:38:51:de:81:
                    82:17:f7:fc:f4:4e:d8:aa:2a:06:a3:81:e6:de:1f:
                    69:03:fe:e3:cf:b4:b9:90:3a:1a:f2:de:da:ae:11:
                    0e:86:80:d5:c2:87:44:19:47:a0:df:7f:06:e0:f0:
                    13:b5:d7:2a:a6:e4:dd:4a:c2:7b:eb:8c:d1:c6:af:
                    44:d9:ce:24:c6:5f:59:5d:d4:d8:1b:99:b0:85:32:
                    0e:a1:4e:e7:1c:4f:36:a8:39:34:31:2a:52:5d:6c:
                    d4:3d:2d:be:22:16:87:58:75:f6:12:f0:fd:9e:7d:
                    20:d0:16:7c:58:88:b4:8c:9e:8e:76:ad:50:d4:ed:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:22:02:8E:99:32:F2:6C:A5:F2:C8:36:BA:06:8F:F6:F6:19:13:AB
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:23:28:92:b9:9b:5b:93:25:6d:a4:84:8d:dd:9d:e2:4e:
         ae:75:28:db:b3:e7:0e:54:43:37:0b:1f:d6:19:0a:90:92:ab:
         69:f6:5d:dc:b2:43:84:4d:30:b5:3a:d5:f3:c6:de:30:79:2d:
         23:37:76:08:3e:92:da:47:5c:c6:ac:60:98:c6:54:8d:e3:62:
         ef:59:64:57:88:43:cd:85:ea:4c:f0:45:a7:18:7e:ce:4b:c1:
         c3:36:1b:e0:e7:f5:55:17:12:34:aa:39:16:35:ca:0c:8a:8e:
         c4:03:59:8a:27:ef:d6:0e:56:a7:90:ae:b9:b8:6c:5c:a3:25:
         83:31:0c:c7:0f:df:de:e7:46:21:88:bb:79:7b:52:1c:c9:8d:
         bb:4a:cb:a6:49:6c:bf:d4:d0:03:d5:97:25:6f:1e:5e:d2:18:
         8f:47:ac:62:d5:c9:6e:64:e4:e9:00:fe:97:4d:2f:18:dd:70:
         6b:60:4d:9f:36:db:26:0a:f8:8b:b7:c5:81:b8:3e:fe:be:59:
         cc:d2:39:05:57:19:b8:6b:f9:70:6e:c8:f2:2f:e2:f3:4d:51:
         58:42:0d:41:84:53:d3:bd:bb:24:9d:c6:9b:72:47:c2:08:33:
         e2:c1:1d:ca:fb:53:ca:91:8c:4a:38:c6:ce:5d:a1:1d:f9:56:
         8c:91:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:23 2026 by rpki-client