This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
File:                     3230302e312e372e302f32342d3234203d3e203237393830.roa (raw, json)
Hash identifier:          JxgL7RmoFq89ifQcU6763+y8wicreZdFk/dcHrbnf+s=
Subject key identifier:   22:4D:E1:45:4A:62:86:49:44:D1:F2:1C:B9:D4:CC:96:EF:AF:4E:F2
Certificate issuer:       /CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
Certificate serial:       05FB7D803A746917B873768CFE73E51A43FE3C2A
Authority key identifier: 9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
Signing time:             Tue 06 Jan 2026 19:02:36 +0000
ROA not before:           Tue 06 Jan 2026 18:57:36 +0000
ROA not after:            Tue 05 Jan 2027 19:02:36 +0000
asID:                     27980
IP address blocks:        200.1.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fb:7d:80:3a:74:69:17:b8:73:76:8c:fe:73:e5:1a:43:fe:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
        Validity
            Not Before: Jan  6 18:57:36 2026 GMT
            Not After : Jan  5 19:02:36 2027 GMT
        Subject: CN=224DE1454A62864944D1F21CB9D4CC96EFAF4EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:ed:2c:6c:d7:b9:57:fb:5b:5a:1e:8c:0b:
                    ba:23:fb:62:b7:1f:c2:b2:18:50:5b:dc:43:15:e9:
                    47:93:e6:11:b8:ce:d0:a3:8e:09:b4:f9:af:07:16:
                    85:4f:50:b3:4a:15:80:67:9f:04:73:8d:51:3a:37:
                    22:1e:ff:d9:00:39:ce:c5:87:ff:13:53:76:21:e9:
                    c6:c3:31:77:97:60:b9:b7:57:b5:3f:3b:2c:ad:10:
                    0d:42:78:ee:c4:c9:7a:03:9e:11:85:27:d6:c8:bb:
                    4f:b3:95:5c:88:97:e6:3c:a8:bf:3b:67:d1:c7:3a:
                    a4:04:9a:fd:bf:4b:d0:3c:da:91:1f:08:f6:90:38:
                    fb:17:b8:0c:33:2a:c5:86:0a:03:d5:b4:be:6c:be:
                    b8:0f:20:14:4d:bf:de:85:19:38:23:75:be:fd:ab:
                    44:79:a7:4c:fb:a5:d9:14:93:88:ef:45:e0:a2:0f:
                    5d:59:7c:de:cc:47:91:53:df:a9:b0:d1:ff:95:56:
                    d0:74:ca:6b:c3:db:35:c9:36:3c:87:54:74:33:b5:
                    ab:b4:10:6e:5b:e9:ce:27:87:01:aa:f8:bc:7d:d1:
                    62:65:dc:35:05:e0:ff:8b:44:61:fe:55:39:15:8f:
                    71:6b:d5:01:56:08:f3:23:62:41:2b:f8:29:47:ca:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:E1:45:4A:62:86:49:44:D1:F2:1C:B9:D4:CC:96:EF:AF:4E:F2
            X509v3 Authority Key Identifier:
                keyid:9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:34:fc:18:cd:51:c0:93:5d:46:23:ce:38:c4:15:d2:66:
         0d:09:17:6f:c2:54:52:55:0c:70:aa:25:0c:61:c5:f8:90:de:
         a5:56:7a:dd:51:d9:77:77:89:ae:81:9a:6e:8f:0c:8d:4b:1d:
         d9:b8:02:3a:c4:9b:2a:c5:19:83:45:64:b9:8b:b5:b3:53:84:
         31:e2:d9:03:86:5d:0e:79:27:df:f0:65:e8:20:0a:da:8f:fc:
         29:13:72:ae:d9:0d:12:5f:11:78:50:73:b3:3e:52:06:15:57:
         82:92:88:f2:45:2d:fc:08:48:78:5d:d7:94:e1:84:2e:81:92:
         a7:16:90:93:a8:9d:52:23:0a:43:06:5e:d9:ea:28:59:65:d1:
         64:ab:38:d4:64:a2:28:23:83:de:3b:90:e1:95:e6:c3:9f:dd:
         23:fd:9d:f8:9d:11:43:cc:a2:d3:db:99:73:cd:cf:15:2d:15:
         9b:80:c9:d3:81:48:51:67:94:a2:b7:58:51:0b:a1:46:1e:ba:
         5a:eb:95:f8:06:a8:3d:23:ec:35:fb:f7:a5:0d:2d:e5:85:81:
         13:16:a7:03:43:7f:ab:84:f8:ba:2a:fa:c5:6b:a5:67:e5:2c:
         2f:05:09:6c:f4:eb:70:ee:b9:05:75:0a:28:ed:ca:be:60:6e:
         38:0a:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:26 2026 by rpki-client