This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa
File:                     3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa (raw, json)
Hash identifier:          43Mv1SYOsyQ5h00iIWNdr55NcEsRwQrcponYZgCaLyY=
Subject key identifier:   A3:E3:6D:C8:CC:33:59:FC:0D:89:61:27:91:76:45:B9:A2:32:49:27
Certificate issuer:       /CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Certificate serial:       7BF57C695869C3CD6AA1BD71DFC23044769835D6
Authority key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa
Signing time:             Tue 06 Jan 2026 19:28:30 +0000
ROA not before:           Tue 06 Jan 2026 19:23:30 +0000
ROA not after:            Tue 05 Jan 2027 19:28:30 +0000
asID:                     271867
IP address blocks:        200.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f5:7c:69:58:69:c3:cd:6a:a1:bd:71:df:c2:30:44:76:98:35:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
        Validity
            Not Before: Jan  6 19:23:30 2026 GMT
            Not After : Jan  5 19:28:30 2027 GMT
        Subject: CN=A3E36DC8CC3359FC0D896127917645B9A2324927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:ad:45:15:3d:19:91:1e:00:26:9a:8c:7f:
                    dc:50:77:2b:31:8b:55:59:93:51:85:f5:70:01:e4:
                    8e:2a:79:4e:7e:e0:71:b6:74:f0:b8:ae:1d:5d:10:
                    21:ea:df:c9:52:f4:16:c8:a3:de:7b:21:7d:26:26:
                    78:48:ff:2c:5a:0d:e5:bb:1c:4d:2f:77:da:e4:3a:
                    32:4d:3a:eb:46:fc:9e:1c:44:89:da:e6:5b:68:4e:
                    7a:77:19:2b:5c:dd:63:1f:78:5b:4f:4d:4c:4a:30:
                    1a:23:02:fe:13:f3:d1:ac:70:34:ae:ef:04:75:09:
                    28:f6:e6:d5:38:58:8e:1e:aa:ef:34:01:a4:1b:57:
                    54:06:59:46:ca:2b:ff:36:92:4a:8e:b3:6a:24:0c:
                    c3:c3:5c:f5:5f:36:9d:59:1c:63:d7:c9:8c:2a:b7:
                    79:b4:5a:b7:47:2b:88:c1:43:9d:71:51:63:06:f1:
                    9f:48:01:59:2b:fa:9f:a1:c5:79:85:44:11:60:6c:
                    e8:b4:f7:6e:a6:6b:98:a1:9d:e2:d3:ec:aa:93:3e:
                    11:eb:ef:20:60:73:8a:61:69:36:b1:ea:4d:5b:9e:
                    63:9b:c4:ca:57:26:ab:13:bf:1b:ac:ce:b5:b6:0f:
                    09:24:69:a0:09:ee:19:03:82:5e:cc:5a:58:35:4e:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:6D:C8:CC:33:59:FC:0D:89:61:27:91:76:45:B9:A2:32:49:27
            X509v3 Authority Key Identifier:
                keyid:44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:9a:0d:f8:01:25:5b:e7:72:ab:4e:18:ca:44:7c:ec:49:
         2b:ea:ea:76:b1:47:e8:4c:9e:51:31:60:d5:c6:1c:c9:ff:15:
         d3:7a:fe:ec:79:f5:92:b6:24:a8:97:f4:8f:54:9b:93:c9:ed:
         03:69:4c:66:fe:96:0e:c6:91:04:58:60:db:57:20:f7:1e:a8:
         c4:fc:32:c5:7d:e1:ae:a7:66:e4:8a:5f:8b:84:9c:fc:37:6f:
         7c:2f:70:45:7d:25:4c:55:89:9c:0f:8e:b1:12:c0:93:4d:a0:
         6a:6b:d1:22:a0:29:20:41:f8:8c:64:f2:f1:88:ba:01:8c:14:
         bc:73:f0:dd:8f:c9:c2:f8:9e:0b:d6:04:66:61:7d:72:8a:9d:
         da:d0:da:33:2e:c1:b5:e4:98:c7:4d:0f:28:fc:53:d4:10:10:
         77:e9:2c:91:36:a6:38:93:82:11:6b:52:db:2e:e0:1d:49:de:
         58:ad:85:3b:88:17:de:2f:6c:b0:73:ba:6c:68:83:83:aa:c9:
         1b:18:88:76:6f:d6:d4:aa:e6:0f:04:e5:7b:84:5c:df:3e:88:
         19:11:a8:a4:96:66:bf:54:9f:38:6a:27:4a:73:f2:24:be:f2:
         5d:7f:c8:03:dc:7e:ff:61:96:6c:a6:35:6b:ed:0c:5c:56:18:
         c2:28:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:43 2026 by rpki-client