This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
File:                     3230302e3131302e32382e302f32322d3232203d3e203139313830.roa (raw, json)
Hash identifier:          IxU+knzf//col26n5nchg0zGADufmrvHxqfc74SayTE=
Subject key identifier:   CD:65:93:26:50:C3:B9:A6:3C:D7:47:D4:8D:9C:D0:2A:10:75:5B:CA
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       114CAC089181AC08F1B0238B7484CC2A2A482DF3
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
Signing time:             Tue 06 Jan 2026 19:14:20 +0000
ROA not before:           Tue 06 Jan 2026 19:09:20 +0000
ROA not after:            Tue 05 Jan 2027 19:14:20 +0000
asID:                     19180
IP address blocks:        200.110.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:ac:08:91:81:ac:08:f1:b0:23:8b:74:84:cc:2a:2a:48:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:20 2026 GMT
            Not After : Jan  5 19:14:20 2027 GMT
        Subject: CN=CD65932650C3B9A63CD747D48D9CD02A10755BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:e4:b3:1a:7a:7a:a4:91:8d:77:b6:2a:6f:
                    98:5d:78:5d:97:5d:7f:bd:65:e2:d0:6e:47:c6:5e:
                    c6:f1:fc:28:8b:8d:41:08:05:49:c1:89:9f:39:ab:
                    e5:da:6c:1b:1d:df:5e:24:a3:7d:72:f5:5f:e5:f5:
                    41:24:25:21:e2:9a:b4:ad:e4:b8:85:c3:1b:e1:f4:
                    27:ab:69:fd:40:3d:53:8e:9c:16:be:6c:c7:41:44:
                    5c:1d:7f:8c:7a:2e:a8:3c:ab:74:31:a6:a3:af:04:
                    ed:27:ce:89:d6:03:c0:40:45:46:15:03:6c:b4:eb:
                    e3:18:d8:8a:5e:38:5d:b2:d8:73:a0:96:bc:19:73:
                    f3:e7:32:10:e8:be:dc:e7:fd:12:80:e1:c8:1f:b0:
                    2c:3c:f6:f0:49:f3:ec:c6:df:a6:88:2c:e4:b8:72:
                    c4:96:6f:50:70:a5:65:56:77:83:96:03:aa:c9:40:
                    f2:32:2d:08:ff:f0:df:03:2b:a9:9c:a0:7a:9c:38:
                    b4:24:9a:fa:5f:71:5c:47:4e:fa:16:74:1b:05:66:
                    a3:8e:c8:d8:af:67:3d:54:5b:f3:18:87:27:cf:2b:
                    c9:0d:89:48:cc:e3:56:05:fc:0f:c8:36:b8:07:ee:
                    f3:3e:b8:7c:ff:23:7d:47:36:53:f8:05:26:ff:5e:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:93:26:50:C3:B9:A6:3C:D7:47:D4:8D:9C:D0:2A:10:75:5B:CA
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:67:45:79:96:e0:b2:0a:bf:90:2c:5a:06:da:8e:c6:08:ca:
         80:00:3a:f4:f0:8b:e1:41:61:0b:07:cb:f7:d9:aa:ae:ea:b7:
         9f:58:95:6f:df:ef:04:10:bc:83:e7:6b:55:de:a5:16:55:eb:
         96:2a:e8:87:0c:ac:7e:8f:ed:29:67:76:29:51:da:78:b3:7e:
         a9:e6:3f:0d:8f:07:33:eb:32:34:ea:0f:76:91:7c:8c:48:d7:
         d7:f8:d0:0e:29:92:b5:11:f0:04:11:58:41:4b:1f:c9:cb:86:
         fa:ba:47:b3:2a:b0:2c:4d:9d:00:0f:4f:9e:7b:09:52:ce:e1:
         0e:e0:75:92:03:5a:44:2a:2b:56:1d:08:e8:e9:0f:28:5d:20:
         e6:04:aa:50:f1:62:0c:4f:00:58:c1:5d:55:7e:7f:31:57:5e:
         16:de:37:ca:d3:54:c5:56:e6:10:ab:56:84:ea:3a:10:b6:2c:
         64:9d:ca:e8:da:16:1c:35:bf:4a:6a:25:2a:b1:9d:2c:7e:61:
         d6:7f:f8:66:48:40:96:27:06:a5:4b:5f:1d:3b:98:9d:3d:8b:
         8c:9c:56:2b:02:36:ff:49:e0:fa:ca:b1:82:38:ae:59:9c:88:
         6d:b4:52:d4:1a:4b:c6:3d:1c:45:dd:9e:4c:28:52:16:4e:e1:
         59:7c:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:57 2026 by rpki-client