This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/3230302e33332e3137302e302f32342d3234203d3e2037303837.roa
File:                     3230302e33332e3137302e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          06WWTeOemu5katZsG+ompdSbIShLHz/BIesx9BnkTr8=
Subject key identifier:   C7:2B:95:46:93:4F:0C:64:B5:D9:4B:34:E3:F5:44:56:4B:F9:70:A0
Certificate issuer:       /CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
Certificate serial:       7FA9E963D5E7293199D890C7234154A8E9378ABD
Authority key identifier: D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/3230302e33332e3137302e302f32342d3234203d3e2037303837.roa
Signing time:             Wed 14 Jan 2026 12:35:03 +0000
ROA not before:           Wed 14 Jan 2026 12:30:03 +0000
ROA not after:            Wed 13 Jan 2027 12:35:03 +0000
asID:                     7087
IP address blocks:        200.33.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:e9:63:d5:e7:29:31:99:d8:90:c7:23:41:54:a8:e9:37:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
        Validity
            Not Before: Jan 14 12:30:03 2026 GMT
            Not After : Jan 13 12:35:03 2027 GMT
        Subject: CN=C72B9546934F0C64B5D94B34E3F544564BF970A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:65:23:e6:2f:5f:a1:c1:79:9f:cf:8a:77:
                    e8:e6:e8:de:48:0e:7d:b8:91:05:45:ab:8a:39:7b:
                    70:23:b9:36:88:cb:92:5a:de:9e:88:d4:a7:e4:d5:
                    98:dc:cd:59:66:0c:63:f7:4e:bc:3b:78:d4:e3:e9:
                    f5:52:4f:a4:af:56:da:7b:6d:7c:98:29:9b:00:40:
                    80:e9:7c:ca:41:91:be:32:f1:39:2f:0c:ee:08:f4:
                    67:58:8e:67:ce:6a:b3:c8:af:c8:14:c3:42:b5:e3:
                    ea:23:99:c4:d1:6f:29:9a:64:a3:be:a6:8e:5a:d7:
                    64:26:8f:d5:b9:08:6f:df:2c:eb:1b:db:e0:d6:85:
                    c4:bf:44:92:9b:16:92:93:df:3f:e7:10:be:f5:42:
                    be:13:41:77:56:15:60:8b:af:82:c4:6d:86:48:f7:
                    de:b2:b8:43:eb:5a:0f:d3:ee:2f:1b:70:df:d1:16:
                    e7:84:ee:b1:ce:b9:11:73:74:ef:4c:16:c1:13:2e:
                    02:11:92:ea:f4:d9:8e:5b:da:74:cb:04:be:ba:26:
                    ba:6f:63:36:a4:ed:4c:e0:65:3d:a7:b0:c5:a6:f8:
                    c9:50:d3:1c:69:55:27:42:67:e9:99:bc:e7:67:68:
                    3b:a9:2e:5d:03:a1:f8:ec:2c:47:a8:4c:b6:8c:90:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2B:95:46:93:4F:0C:64:B5:D9:4B:34:E3:F5:44:56:4B:F9:70:A0
            X509v3 Authority Key Identifier:
                keyid:D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/3230302e33332e3137302e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:44:7e:21:8c:c4:28:49:a8:70:f2:2d:4f:ab:c3:11:9a:da:
         73:92:c0:30:af:b5:d2:5b:05:9e:17:23:65:68:5f:c8:65:c4:
         c8:81:82:ab:ec:13:dc:a4:dd:f1:87:47:17:40:76:f1:e1:f5:
         82:11:2b:22:e1:dc:ab:2d:03:cb:eb:5c:ef:62:90:83:ae:a4:
         71:cd:2b:fa:58:b9:09:0e:43:6d:40:75:ef:a5:d0:61:bc:5c:
         75:87:33:9f:90:3d:f5:24:b4:01:e8:17:dc:8e:4d:40:86:cd:
         59:d5:dc:54:77:96:72:69:94:df:f6:cd:30:44:4f:b1:c9:22:
         7d:73:40:14:2f:cd:14:85:b4:92:db:df:fb:02:3c:47:78:30:
         69:7a:fe:d6:e9:c4:a1:29:69:1f:11:b0:b8:d0:ab:dd:1e:14:
         40:ef:6d:2d:70:d8:ce:8c:d2:43:9e:c8:6d:b2:7a:30:0b:9e:
         db:25:7d:0c:81:d8:64:ab:66:bb:01:e9:75:3d:30:00:99:1a:
         12:ad:6e:ec:b9:62:2a:fd:b0:8a:90:28:c5:c3:e4:04:90:d1:
         67:1e:6c:de:e7:61:90:57:f5:e3:cf:f8:a7:83:1a:f9:00:0f:
         2e:ae:8f:27:f3:bc:d1:7c:b0:9d:e0:d6:aa:04:e5:30:c7:41:
         79:ac:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:18:55 2026 by rpki-client