This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230352e302f32342d3234203d3e203532323333.roa
File:                     3230302e32362e3230352e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          NQuet/4y10zO8Hp2MtWrzvxVByvg+HSY0unCyU3MSo0=
Subject key identifier:   AD:4E:46:49:69:97:EC:A4:DF:52:35:A2:99:6F:3B:9D:28:D7:68:01
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       0830F35253DF307629A3091EFF34DF4811335D73
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230352e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:14 +0000
ROA not before:           Tue 06 Jan 2026 19:38:14 +0000
ROA not after:            Tue 05 Jan 2027 19:43:14 +0000
asID:                     52233
IP address blocks:        200.26.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:30:f3:52:53:df:30:76:29:a3:09:1e:ff:34:df:48:11:33:5d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:14 2026 GMT
            Not After : Jan  5 19:43:14 2027 GMT
        Subject: CN=AD4E46496997ECA4DF5235A2996F3B9D28D76801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:c6:ac:06:87:fb:8f:a7:b8:b2:bf:b0:c1:
                    0c:9e:16:17:64:99:08:33:4f:54:9a:4b:df:25:61:
                    a1:dd:f3:90:69:1d:90:d3:ab:db:7e:12:1a:1e:0b:
                    1a:0c:54:ec:62:2b:8a:de:92:22:7d:be:f9:9c:fb:
                    18:8e:07:b7:92:e5:c1:39:89:7c:fe:f5:c2:5d:e7:
                    5d:e8:ed:68:75:7a:82:b4:42:31:d1:1c:0e:73:aa:
                    fc:51:8a:f2:d7:20:e0:07:0b:59:50:a0:64:d0:1c:
                    f9:9f:eb:2d:6e:1b:92:98:72:52:54:92:44:2f:5d:
                    99:25:d2:ad:b5:52:47:39:f1:e3:86:f1:ca:c7:3e:
                    88:08:3b:0f:43:1b:46:ae:bd:89:44:72:52:25:fc:
                    d6:50:83:97:51:32:64:24:33:73:f8:91:2d:b1:62:
                    83:ce:e7:a8:20:66:aa:59:46:6e:af:1f:83:28:38:
                    61:d5:f4:6b:ff:20:ff:4f:12:c7:0b:5b:a1:e0:87:
                    75:6a:83:18:bc:9f:e0:5f:d6:24:6f:69:60:a7:e4:
                    84:f6:dd:38:77:d6:9c:55:8b:54:15:9f:ea:2e:50:
                    dd:43:5c:00:72:16:98:53:85:12:e2:2c:36:7b:42:
                    95:2f:4e:68:10:3b:c4:ab:69:0b:34:1c:31:6a:a6:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4E:46:49:69:97:EC:A4:DF:52:35:A2:99:6F:3B:9D:28:D7:68:01
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230352e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:07:33:3b:99:38:e5:c5:3d:0d:3c:ee:8c:06:94:db:bd:43:
         0c:d7:ac:09:b1:13:09:4c:c3:5e:a2:47:8c:41:ea:68:d8:73:
         1a:5d:b2:b7:3c:20:6b:ee:d8:90:01:89:c1:b5:91:63:1e:93:
         91:62:be:60:60:3a:00:5a:9d:08:8f:9f:f5:d0:68:62:8a:7c:
         de:1b:40:f7:fe:61:45:ab:cd:0c:e5:d5:35:82:cc:a0:6f:15:
         80:be:f9:02:44:ea:65:46:22:18:de:bb:fe:73:28:ff:a7:db:
         61:77:02:d1:da:2b:f3:6c:4a:b8:cc:f2:55:9d:90:a1:51:89:
         7a:84:14:99:23:11:1a:0a:bf:6e:c7:2f:02:d6:47:ef:85:3d:
         d6:ab:80:69:99:13:e7:ca:64:1d:06:58:cf:ea:58:cf:de:4a:
         c8:7c:9b:e7:74:02:9c:8c:33:ea:ea:d0:19:d9:96:e4:02:37:
         99:67:09:6a:c6:90:16:ba:89:bb:d7:2f:fa:04:58:90:fa:7a:
         59:66:d1:22:05:a7:56:cd:cb:33:05:b5:91:49:ca:67:66:f3:
         17:54:07:7a:bb:a7:6e:8a:94:4d:6b:46:81:ca:52:4e:0c:e3:
         ec:de:7f:65:16:29:cf:44:6f:b9:3a:5c:70:dc:30:53:a1:e5:
         8f:26:f5:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCDDzUlPfMHYpowke/zTfSBEzXXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNjAxMDYxOTM4MTRaFw0yNzAxMDUxOTQzMTRaMDMxMTAvBgNV
BAMTKEFENEU0NjQ5Njk5N0VDQTRERjUyMzVBMjk5NkYzQjlEMjhENzY4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclsasBof7j6e4sr+wwQyeFhdk
mQgzT1SaS98lYaHd85BpHZDTq9t+EhoeCxoMVOxiK4rekiJ9vvmc+xiOB7eS5cE5
iXz+9cJd513o7Wh1eoK0QjHRHA5zqvxRivLXIOAHC1lQoGTQHPmf6y1uG5KYclJU
kkQvXZkl0q21Ukc58eOG8crHPogIOw9DG0auvYlEclIl/NZQg5dRMmQkM3P4kS2x
YoPO56ggZqpZRm6vH4MoOGHV9Gv/IP9PEscLW6Hgh3Vqgxi8n+Bf1iRvaWCn5IT2
3Th31pxVi1QVn+ouUN1DXAByFphThRLiLDZ7QpUvTmgQO8SraQs0HDFqpsknAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrU5GSWmX7KTfUjWimW87nSjXaAEwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMyMzAzMDJlMzIzNjJlMzIzMDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgazTAN
BgkqhkiG9w0BAQsFAAOCAQEAIwczO5k45cU9DTzujAaU271DDNesCbETCUzDXqJH
jEHqaNhzGl2ytzwga+7YkAGJwbWRYx6TkWK+YGA6AFqdCI+f9dBoYop83htA9/5h
RavNDOXVNYLMoG8VgL75AkTqZUYiGN67/nMo/6fbYXcC0dor82xKuMzyVZ2QoVGJ
eoQUmSMRGgq/bscvAtZH74U91quAaZkT58pkHQZYz+pYz95KyHyb53QCnIwz6urQ
GdmW5AI3mWcJasaQFrqJu9cv+gRYkPp6WWbRIgWnVs3LMwW1kUnKZ2bzF1QHerun
boqUTWtGgcpSTgzj7N5/ZRYpz0RvuTpccNwwU6Hljyb1+A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:19 2026 by rpki-client