This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          hRNsy2177TDVA5Oc/j/Uk0hI5qbboGRiesdZjxoImhQ=
Subject key identifier:   67:32:86:B1:7C:B1:E4:32:77:B7:41:70:4B:AD:58:C2:2D:0E:BB:FE
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       39DC05C35160D5CFEDCB5F3E429E3074B7AF3D04
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 06 Jan 2026 19:27:17 +0000
ROA not before:           Tue 06 Jan 2026 19:22:17 +0000
ROA not after:            Tue 05 Jan 2027 19:27:17 +0000
asID:                     28050
IP address blocks:        200.74.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dc:05:c3:51:60:d5:cf:ed:cb:5f:3e:42:9e:30:74:b7:af:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Jan  6 19:22:17 2026 GMT
            Not After : Jan  5 19:27:17 2027 GMT
        Subject: CN=673286B17CB1E43277B741704BAD58C22D0EBBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:5b:e5:19:56:8d:8e:4e:d8:42:ee:8e:e2:
                    67:e0:07:87:dc:4c:70:be:07:f1:20:85:f9:77:f7:
                    55:ed:f4:46:c7:78:4b:a9:3f:f2:25:bd:af:54:ea:
                    c6:ac:52:70:4a:61:02:85:06:b3:ce:9c:2a:f2:58:
                    96:7f:33:72:1d:b3:f1:fa:fc:0d:12:bd:ae:d7:2a:
                    b2:66:0e:5f:9f:62:1e:08:24:4f:d5:f3:06:f3:46:
                    3f:af:64:4b:69:10:5d:b0:2c:a2:fd:9d:a1:ac:a4:
                    4d:9d:3c:5b:5c:fd:7f:44:7b:11:b5:aa:bb:1c:e5:
                    05:a1:13:03:55:58:1e:b2:75:85:61:07:94:f1:3f:
                    22:6f:d4:4f:41:ad:89:c6:d4:db:ef:c9:80:15:4d:
                    be:05:36:49:a7:bc:a6:32:55:02:36:15:aa:40:fd:
                    8e:63:02:41:00:b0:b9:fa:43:26:de:50:e7:fd:53:
                    2c:77:94:95:03:2a:95:57:d2:f2:49:d7:ec:56:dd:
                    09:48:df:db:82:fd:8d:f7:f4:b5:08:b6:ba:13:d0:
                    39:48:cb:22:f9:a2:f6:39:24:bc:8d:80:40:87:ee:
                    f0:e3:4a:bb:d7:9b:6b:0e:49:5e:90:9e:75:48:82:
                    59:20:b7:25:3b:fa:ff:c4:da:2c:82:82:de:6e:01:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:32:86:B1:7C:B1:E4:32:77:B7:41:70:4B:AD:58:C2:2D:0E:BB:FE
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:48:d1:76:f2:ae:38:c4:d3:91:85:a1:cb:7e:d6:19:93:
         03:da:53:cc:6b:5a:80:97:37:a0:86:cd:b2:59:16:7f:5f:cc:
         5a:5c:f0:ee:57:5a:3b:b0:17:f0:53:26:9c:6d:22:58:4c:88:
         db:59:5c:2d:85:0f:4e:3a:7d:53:2a:09:1b:f0:d2:33:91:6f:
         dd:af:fe:3f:a9:ff:28:9e:c7:70:cc:3c:c2:33:42:85:1f:09:
         3b:22:e0:db:d7:1c:e3:a5:d4:f1:4a:ba:51:51:52:46:e4:31:
         81:1f:57:dd:b4:bf:c0:11:75:8b:08:46:01:57:29:3a:e6:d6:
         bc:46:ad:8d:9b:6f:5e:3e:b9:40:76:95:d1:ac:5f:9e:fa:11:
         95:f0:dd:9e:22:12:02:9a:b1:f2:e7:79:55:15:15:17:e3:3a:
         06:cf:20:6e:96:2d:a5:24:ff:9a:c8:2c:00:19:89:8c:34:7b:
         eb:e7:a6:8e:ad:c3:84:4a:9e:d9:fd:78:4c:d8:32:d7:f4:e8:
         4e:c6:b7:d1:40:d9:7a:7e:a9:75:78:e8:2d:5e:8e:6a:fe:58:
         6b:6f:f7:90:3c:df:3d:4c:90:41:e2:1a:bd:fa:f9:84:9c:83:
         00:a0:37:3d:4c:19:98:c6:b2:29:4b:37:57:c4:e7:06:76:4f:
         f5:16:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:11 2026 by rpki-client