This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa
File:                     3230302e3131302e33322e302f32302d3234203d3e203231353735.roa (raw, json)
Hash identifier:          bZJb7bZ6YF4Ar0s4WoRkQlzA8Fr3N7/UFTpzpcAqJUg=
Subject key identifier:   F0:CA:24:6B:97:85:27:7A:D4:16:AD:64:2B:63:1D:D2:0C:41:4C:B1
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       7D8F0B0DCC9EB6117CD444E872976E14EC43CB7B
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:14:15 +0000
ROA not before:           Tue 06 Jan 2026 19:09:15 +0000
ROA not after:            Tue 05 Jan 2027 19:14:15 +0000
asID:                     21575
IP address blocks:        200.110.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8f:0b:0d:cc:9e:b6:11:7c:d4:44:e8:72:97:6e:14:ec:43:cb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:15 2026 GMT
            Not After : Jan  5 19:14:15 2027 GMT
        Subject: CN=F0CA246B9785277AD416AD642B631DD20C414CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:d6:3d:52:e2:1d:9c:4d:5f:88:2a:ca:df:
                    0c:35:2e:8d:c2:8b:78:78:6e:fa:fc:24:bc:c0:f8:
                    08:bb:af:8b:90:85:02:16:98:93:37:26:60:99:48:
                    f0:bf:0a:c0:27:be:46:38:a5:45:0c:35:db:b4:fe:
                    17:d5:da:87:4b:ba:ab:f5:18:60:d8:c5:2d:8d:35:
                    ed:81:c9:a5:42:91:7c:72:87:a6:90:ea:07:76:c2:
                    74:89:0f:e1:8a:b9:b5:18:e3:f0:a7:30:98:ee:3d:
                    8a:2c:71:0a:b8:6e:bc:f6:91:0a:25:e8:64:2e:2d:
                    5e:83:3e:6c:36:0f:31:52:0a:49:07:66:8a:75:d2:
                    75:ac:4e:11:85:75:4e:41:b6:8b:a8:d7:1b:f1:79:
                    18:5b:9a:f9:ae:68:cf:fd:4a:49:20:94:eb:6a:d2:
                    ba:31:d4:9f:90:1e:b3:af:6e:ce:60:6e:14:1c:d8:
                    73:78:d1:f8:ee:06:f0:23:b8:7a:d4:ba:f5:18:ca:
                    eb:2f:a2:72:29:6a:15:8f:2f:ef:04:73:a0:9c:0f:
                    f5:ac:1e:e0:4f:9d:4c:be:13:e9:2b:34:98:4c:77:
                    f9:5e:59:6a:44:e5:af:94:03:39:91:b8:ab:00:21:
                    ca:2a:43:c0:bb:9b:97:e1:a3:4b:08:a9:dd:86:88:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:24:6B:97:85:27:7A:D4:16:AD:64:2B:63:1D:D2:0C:41:4C:B1
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:93:b8:d0:f8:7c:4b:2a:00:6a:17:a2:df:dd:a2:64:18:8e:
         0f:7a:da:0e:ab:7a:9d:73:49:61:7c:83:ce:c7:f5:8d:3b:8c:
         fd:db:7a:2c:df:06:33:60:26:9c:6d:2a:ac:85:f6:ab:c4:55:
         88:61:e8:1b:7d:d4:6e:0c:8d:c8:be:ea:4f:fa:eb:31:b0:e2:
         44:88:34:26:47:56:ff:3a:b1:fe:0e:1a:20:bb:f9:e1:3e:ba:
         81:d2:8d:83:fd:51:84:58:76:6d:86:bc:1f:59:43:e3:35:96:
         7b:48:1a:54:e9:67:24:9b:a5:e5:65:f3:66:4b:7d:f1:8a:1c:
         df:ce:40:1b:30:24:e0:1a:d1:bf:dd:a5:30:40:9b:f1:f6:35:
         bb:2b:3f:79:04:3b:05:51:d6:72:5b:d9:9e:11:11:ad:50:fb:
         a2:25:42:58:ab:e6:d1:78:6b:8a:52:fb:a2:9a:fa:91:60:63:
         f5:27:ad:a9:c3:6b:84:0e:40:e0:6e:73:ef:9e:91:aa:c0:da:
         e3:e7:cb:91:43:92:0b:06:2c:f7:fb:fd:23:35:ed:25:5a:16:
         c9:fb:69:55:16:41:90:d7:53:f7:7b:5e:7b:6c:68:6e:e1:22:
         c0:0a:e7:79:38:79:a7:d2:76:d5:e4:e7:31:e0:c6:2c:97:81:
         3d:ea:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:57 2026 by rpki-client