This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
File:                     3230302e35302e3234302e302f32312d3234203d3e203237393634.roa (raw, json)
Hash identifier:          iM7ufO+E+kS9ZJS1Zda0XvTwq4shRqT5EshlPZOGooQ=
Subject key identifier:   41:6E:97:2E:A8:C1:BA:6D:E7:54:28:84:BD:5A:42:19:E5:48:EF:ED
Certificate issuer:       /CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
Certificate serial:       393A8A38FA28067A4C1D0033F5F5C2846A6C11F6
Authority key identifier: 80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
Signing time:             Tue 06 Jan 2026 19:18:31 +0000
ROA not before:           Tue 06 Jan 2026 19:13:31 +0000
ROA not after:            Tue 05 Jan 2027 19:18:31 +0000
asID:                     27964
IP address blocks:        200.50.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3a:8a:38:fa:28:06:7a:4c:1d:00:33:f5:f5:c2:84:6a:6c:11:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
        Validity
            Not Before: Jan  6 19:13:31 2026 GMT
            Not After : Jan  5 19:18:31 2027 GMT
        Subject: CN=416E972EA8C1BA6DE7542884BD5A4219E548EFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:3e:f7:76:93:ac:e5:f7:18:30:1a:ee:90:
                    b2:1c:31:91:6f:96:fc:de:20:28:1f:08:82:12:9f:
                    b2:e0:e7:50:3e:fe:f3:d4:62:18:07:c2:ba:7b:17:
                    6f:13:1f:58:a1:a5:95:68:1a:89:ae:c4:7d:4c:28:
                    95:79:95:34:fe:de:04:6a:de:97:4f:de:6e:31:cf:
                    b4:26:00:80:5b:5d:22:2b:1d:0a:af:cf:14:07:b6:
                    40:97:c3:72:db:36:a0:41:ae:6f:92:24:3a:f9:04:
                    71:4d:f6:62:db:99:22:5a:50:1d:bf:98:ea:01:40:
                    66:19:13:19:8c:06:d2:74:d1:de:95:84:4e:4d:e8:
                    ae:6c:d3:a0:59:c5:45:64:22:e6:31:44:56:32:65:
                    1e:18:53:40:58:c3:9a:10:eb:5c:42:67:c3:ae:96:
                    bf:65:ff:99:fd:a6:ea:5b:47:36:74:1b:d4:74:8e:
                    3d:77:76:3d:05:02:30:c6:b5:6a:0c:ae:6d:1a:de:
                    41:39:fe:4f:a7:64:7f:52:56:87:35:0a:c1:0d:d7:
                    de:f3:e4:62:c4:6a:90:a1:1a:0a:bd:23:74:00:84:
                    e9:59:25:c7:43:0f:48:de:e3:be:13:b3:f1:7a:1b:
                    bd:5d:ee:cc:6a:53:aa:a7:81:cc:94:13:dd:f7:c3:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:97:2E:A8:C1:BA:6D:E7:54:28:84:BD:5A:42:19:E5:48:EF:ED
            X509v3 Authority Key Identifier:
                keyid:80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:d3:e6:e9:1c:77:1e:1e:1d:61:6b:89:06:86:7c:01:28:
         4a:e1:a7:c2:b6:18:63:07:94:42:bc:1b:3e:94:b8:d5:e2:e6:
         52:63:40:d2:59:b6:fc:15:7c:0c:c8:b7:b4:ea:bf:9e:c1:49:
         54:9e:50:77:e2:76:df:ba:37:ff:38:12:52:9a:6f:d8:96:12:
         d5:27:b3:f3:56:c9:83:aa:d1:ac:71:cf:df:44:71:c6:a8:78:
         27:bd:f6:ee:4b:08:d1:a6:2b:32:c5:f9:22:f8:3b:b9:89:18:
         f6:c4:c7:1d:ee:f6:4f:d1:2b:a1:4c:77:e5:a5:44:05:12:12:
         1b:49:82:00:7c:44:5b:8b:6f:c1:48:2e:2e:00:c0:8a:0d:f3:
         ae:3f:fe:15:f7:17:dc:51:cb:89:c1:5e:f2:b9:dd:ef:30:a2:
         94:a6:96:ac:19:6c:0a:37:2c:74:97:d3:a1:0c:d0:cb:49:2f:
         85:53:50:81:d1:5e:b3:ee:12:05:83:0f:6f:0a:97:08:d3:91:
         64:f7:40:1d:36:0d:e7:d1:5e:d9:06:4f:7b:a1:2d:e6:b3:da:
         da:1f:ad:d9:d4:49:b9:ca:40:55:5c:a1:3c:e5:06:1e:05:bf:
         4a:ef:57:47:6f:2e:cf:28:2d:d7:b2:ea:4b:2f:67:03:b0:de:
         80:56:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:25 2026 by rpki-client