This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa
File:                     3230302e3131302e32352e302f32342d3234203d3e203139313830.roa (raw, json)
Hash identifier:          ZXz6Tajw8QFa9Shddu7LMSDx2r0aN2IwK/Lu+qt5qL4=
Subject key identifier:   3A:C0:E5:FD:29:7D:CA:3D:13:D4:F8:7F:B4:A3:21:D0:42:AE:A9:70
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       065C266FB92965D97E53D1F7F15D29F117A62111
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa
Signing time:             Tue 06 Jan 2026 19:14:13 +0000
ROA not before:           Tue 06 Jan 2026 19:09:13 +0000
ROA not after:            Tue 05 Jan 2027 19:14:13 +0000
asID:                     19180
IP address blocks:        200.110.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:26:6f:b9:29:65:d9:7e:53:d1:f7:f1:5d:29:f1:17:a6:21:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:13 2026 GMT
            Not After : Jan  5 19:14:13 2027 GMT
        Subject: CN=3AC0E5FD297DCA3D13D4F87FB4A321D042AEA970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:17:79:68:ca:30:64:68:34:5e:86:0a:71:
                    ee:b9:a6:3f:1e:b5:16:97:da:cd:72:33:49:1b:89:
                    af:5d:00:16:94:06:f3:3e:23:de:09:5e:b9:c1:aa:
                    ed:9f:76:8a:e5:68:5c:7a:1d:f6:ef:21:a3:66:6f:
                    70:5d:8f:b6:b2:0f:79:3a:d2:fc:d7:4e:e6:e9:b9:
                    ad:a1:6a:db:98:75:b2:29:9e:ac:61:f4:9e:90:bf:
                    37:3c:0c:3c:22:3f:40:c9:56:bf:df:76:3e:06:e8:
                    dc:96:d9:72:ff:14:06:b1:09:5f:c9:5e:5a:25:26:
                    4c:19:68:84:9b:db:00:4a:67:93:ce:52:35:39:cf:
                    ff:ad:33:f4:7b:7f:b8:41:b2:06:a6:c7:cd:6a:04:
                    1e:f2:9e:fe:df:da:dc:50:0f:24:1e:4d:48:5e:76:
                    7f:bf:35:8c:0d:d0:d2:5f:b0:c0:01:23:29:6e:2d:
                    46:a8:96:24:06:9a:2f:37:f2:e0:fb:23:d4:70:f9:
                    57:2a:f1:c1:62:3c:04:54:29:07:ab:26:db:2c:a6:
                    47:c2:17:35:4b:39:dc:a9:a8:a9:59:7c:52:7d:00:
                    1b:37:da:55:c7:1d:a1:b0:be:79:84:5f:b1:8b:0c:
                    4d:04:3d:e9:82:65:97:a9:37:75:9d:01:c3:31:9c:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C0:E5:FD:29:7D:CA:3D:13:D4:F8:7F:B4:A3:21:D0:42:AE:A9:70
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:61:e6:19:eb:c1:c0:db:fe:b3:fb:27:b3:3d:f6:91:9d:53:
         1a:68:61:ac:17:db:be:eb:7a:60:b8:a3:26:da:f8:7e:2c:11:
         a1:dd:ea:4f:af:98:e2:fe:93:2f:b4:a4:f6:0a:3f:51:d6:d8:
         70:2c:6d:da:04:d8:5c:86:2e:15:b6:0a:0f:8c:a6:b4:48:0a:
         9e:2a:09:58:25:36:fc:93:cb:89:7e:ec:c1:4b:e5:8e:0f:8d:
         77:be:1f:ba:ed:56:aa:ae:f6:9b:9e:ca:13:c9:67:2e:90:24:
         2b:a5:59:c1:ba:99:7b:16:c9:90:c2:30:2f:39:58:25:4e:c2:
         03:21:cb:17:9e:a8:9d:cd:36:33:16:b1:c2:89:5b:34:2d:8d:
         a4:69:f7:a8:5d:01:48:fe:51:0b:b5:04:c6:d0:0b:fb:0f:89:
         76:66:a4:db:74:42:32:34:2d:89:73:6b:70:2e:bc:7d:d1:7c:
         57:2a:7c:9d:e0:7f:20:8c:49:75:cf:4e:9b:ef:12:e8:f7:a2:
         62:7c:f4:3e:fd:6c:1b:e2:d8:33:15:d8:c2:89:48:18:9c:ca:
         d8:95:f4:8b:41:86:79:a3:cc:1a:0c:9c:36:25:1e:d7:f2:b6:
         6a:ea:ab:cf:30:08:d7:c2:41:52:ca:42:18:6b:57:2d:92:8b:
         be:49:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:39 2026 by rpki-client