This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa
File:                     3230302e34322e3139322e302f31392d3234203d3e203132303636.roa (raw, json)
Hash identifier:          0C4fLIVlHDu4acCI5mLlfxbzMDJV7mpws4E9u4Wn224=
Subject key identifier:   70:0A:CD:5A:CB:39:CE:F8:37:83:EE:79:6F:88:74:C4:EC:D0:16:C9
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       6A14F4289B90E94A1375A5CC7D49F9F82D8A8CEB
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:49 +0000
ROA not before:           Tue 06 Jan 2026 19:34:49 +0000
ROA not after:            Tue 05 Jan 2027 19:39:49 +0000
asID:                     12066
IP address blocks:        200.42.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:14:f4:28:9b:90:e9:4a:13:75:a5:cc:7d:49:f9:f8:2d:8a:8c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:49 2026 GMT
            Not After : Jan  5 19:39:49 2027 GMT
        Subject: CN=700ACD5ACB39CEF83783EE796F8874C4ECD016C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:01:f7:f0:8e:d4:a2:a1:1a:24:4d:91:e7:
                    94:a7:df:b1:d7:c0:9f:bb:16:d9:96:4d:32:7e:c9:
                    c3:14:d8:d4:73:34:2d:d7:41:9f:91:31:ca:9a:86:
                    65:b8:09:f0:fe:ad:12:49:ea:21:6f:09:6e:de:09:
                    eb:32:19:1e:06:dc:17:07:0c:8d:b4:d5:7a:62:20:
                    c2:8e:49:f4:01:a1:7a:c0:ef:a7:3d:92:3d:ca:5f:
                    73:fb:09:8f:7b:1a:34:80:28:28:be:0d:7c:07:eb:
                    62:17:9b:f3:2b:4e:6f:f2:38:21:35:6f:a4:b4:6d:
                    c0:f5:19:f4:be:f1:a1:d5:35:4d:11:7f:68:c9:b2:
                    cd:b8:06:77:01:f1:49:9e:99:d1:f8:59:6e:3f:68:
                    1d:66:e9:25:8a:0b:37:07:45:50:54:06:20:e0:13:
                    f1:78:d5:41:43:21:49:e1:b6:cd:85:97:33:9d:26:
                    b7:9e:34:3a:6a:29:44:8f:84:70:62:13:e4:ff:d8:
                    f6:c7:7d:de:b4:18:a8:80:cb:b0:ac:a4:28:c6:3f:
                    97:c3:3b:22:97:3b:7c:2f:b2:80:dc:7b:b6:b2:53:
                    9f:06:0d:dc:46:4e:42:ab:4c:dd:26:ed:a1:92:a0:
                    17:80:80:10:1e:21:d5:29:79:21:65:78:fd:7e:90:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:CD:5A:CB:39:CE:F8:37:83:EE:79:6F:88:74:C4:EC:D0:16:C9
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:d9:1c:22:c7:4e:4f:bf:a5:d3:ba:16:82:45:ea:50:2a:
         84:86:d7:f0:1b:73:9f:33:a9:8f:37:ac:3a:81:31:90:cf:83:
         7d:f8:f3:a1:32:b3:bd:9f:2d:03:b7:73:41:15:34:c0:8c:52:
         3d:5c:a7:1e:1a:a7:b8:c8:0c:51:6a:6f:31:7e:af:d6:83:d5:
         de:67:af:e5:b8:bc:5f:ce:2e:61:b9:a2:4a:87:57:2e:95:eb:
         78:38:d3:33:02:b4:c8:3c:24:01:75:2a:39:dd:f8:c7:10:eb:
         4b:81:39:fb:06:a4:8e:21:a7:08:c7:74:1d:f6:f4:4e:a2:2f:
         2b:fb:c2:d4:22:3f:5c:63:2f:e9:88:38:eb:11:68:4c:8a:f0:
         83:e5:64:7a:f6:d5:6b:30:80:7c:9a:5c:05:21:dc:10:26:b2:
         91:43:af:b2:be:e2:01:a5:03:1a:5e:63:25:d2:e2:30:0d:17:
         de:8b:71:b6:51:de:f9:99:38:02:8a:92:09:84:70:ec:68:9e:
         40:ce:ef:6c:cb:9c:27:75:e2:2f:ff:4b:9e:15:09:ed:5b:53:
         25:a2:83:9f:f4:6c:cf:24:11:6a:f9:64:35:17:cc:94:39:4d:
         60:5c:98:c0:d8:be:ff:c9:04:10:96:8d:d8:0c:7a:9d:08:ca:
         3b:2f:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:04 2026 by rpki-client