This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa
File:                     3230302e3131302e382e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          kmE4BRANRzTPWdl4l9Njlu1jOtpLRmEbE9w/enH8Lhk=
Subject key identifier:   C4:13:E5:42:BA:E0:2B:30:4F:0E:B5:67:94:7C:86:91:82:1D:19:B0
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       2C2C12C7F96F78AF34F4D33642DAF5419407558F
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 06 Jan 2026 19:14:10 +0000
ROA not before:           Tue 06 Jan 2026 19:09:10 +0000
ROA not after:            Tue 05 Jan 2027 19:14:10 +0000
asID:                     19180
IP address blocks:        200.110.8.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:12:c7:f9:6f:78:af:34:f4:d3:36:42:da:f5:41:94:07:55:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:10 2026 GMT
            Not After : Jan  5 19:14:10 2027 GMT
        Subject: CN=C413E542BAE02B304F0EB567947C8691821D19B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:a9:65:05:e3:2d:b7:48:66:6a:34:b2:2a:
                    5a:48:50:1c:1b:7d:d1:d2:8c:1c:ea:e2:01:2e:3a:
                    e8:2a:dd:42:4c:ef:53:c3:78:71:de:f4:44:62:85:
                    34:9f:6c:b6:1b:76:81:d6:3b:1b:ac:59:5c:6c:d5:
                    41:cb:48:1e:12:42:76:dd:6e:0a:4e:ab:0c:3f:75:
                    5d:7e:d2:54:4c:88:fc:c5:1f:b7:ab:7b:c1:f1:bf:
                    34:a8:2c:f2:8b:52:ad:e5:79:90:1e:d0:86:74:e0:
                    17:cc:b1:b0:b9:10:da:41:01:7c:81:4d:5d:b5:3d:
                    99:eb:27:b8:ce:e3:37:2b:cb:e8:39:e0:56:af:f1:
                    2f:e5:e1:4c:0e:8a:ae:59:0d:cd:1a:ce:bc:34:c9:
                    32:73:22:89:01:cf:a6:f0:ac:a3:9d:a4:35:7b:60:
                    a9:3e:e5:7d:c1:25:93:ae:7f:9b:aa:f1:d5:87:e7:
                    00:1f:0f:e5:88:08:2e:b7:ac:9c:4e:0d:51:b8:67:
                    e3:cc:b0:aa:35:73:26:ae:ac:d8:78:16:f1:58:95:
                    56:b9:77:50:d0:a1:80:8f:6f:b3:0a:80:d2:29:6e:
                    80:0b:ae:7a:99:2f:ba:53:8f:2e:99:99:62:8e:62:
                    fb:a5:73:28:2f:a5:55:14:c8:3e:e7:f4:74:04:0f:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:E5:42:BA:E0:2B:30:4F:0E:B5:67:94:7C:86:91:82:1D:19:B0
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:78:fd:00:44:a7:49:35:5b:f8:9e:0d:68:7e:31:c0:fa:95:
         ab:8a:01:48:ad:9a:59:c1:65:07:bb:ed:cf:36:73:e6:7a:d0:
         6b:a5:47:60:f3:66:65:ba:81:1e:65:da:f8:6d:06:ef:d0:ed:
         21:30:09:a9:a9:1c:66:aa:01:a4:06:4d:d5:a8:7f:e5:e3:28:
         1e:80:83:3f:fe:c2:4d:f4:41:ae:70:43:68:4d:d9:ad:37:85:
         1b:13:4e:b0:d1:24:46:ad:05:bd:70:b8:61:70:24:6f:74:4f:
         af:59:17:02:aa:e1:02:99:cc:67:29:f2:6e:a4:44:13:33:92:
         08:68:50:44:6d:9e:ca:4e:49:aa:39:c6:c9:1a:ea:fc:eb:eb:
         ff:a2:b0:8e:ea:45:d8:04:28:d5:98:dc:a4:ab:4d:c7:e5:c8:
         8a:8d:c8:93:ce:49:84:40:de:8b:09:40:39:14:54:f4:00:31:
         25:c5:7f:ca:2c:c0:6b:51:ed:b0:8f:b6:7b:9b:8c:33:95:ce:
         49:43:97:ab:d0:fe:40:78:37:6d:ac:9c:cf:a6:8f:31:98:11:
         85:b8:ec:06:69:83:8a:5c:d8:84:08:57:71:09:68:0f:1e:f4:
         f6:94:28:f1:c4:c1:10:ec:72:44:81:8a:b4:a4:8d:3a:ad:dd:
         23:02:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:25 2026 by rpki-client