This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
File:                     3230302e34322e3139322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          cuZIzq5816JAaDybic4lEvHeww4BYX8KJ0Ncrss53e8=
Subject key identifier:   7E:BC:B5:E9:16:EC:59:77:BE:1C:3B:8D:73:3A:B7:8B:02:0E:09:44
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       66790EAADE8A27E3B5CEECF84A179F87C4382D39
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:55 +0000
ROA not before:           Tue 06 Jan 2026 19:34:55 +0000
ROA not after:            Tue 05 Jan 2027 19:39:55 +0000
asID:                     28118
IP address blocks:        200.42.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:0e:aa:de:8a:27:e3:b5:ce:ec:f8:4a:17:9f:87:c4:38:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:55 2026 GMT
            Not After : Jan  5 19:39:55 2027 GMT
        Subject: CN=7EBCB5E916EC5977BE1C3B8D733AB78B020E0944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:18:d6:d0:fd:b0:d8:cf:c7:7f:d8:23:c2:
                    60:96:e7:9f:90:e5:37:f5:23:7e:0a:58:35:af:4f:
                    8d:cf:d6:fd:da:5e:9d:23:cd:28:74:31:bb:53:8b:
                    1e:7f:1a:27:3b:3f:0b:5a:ff:39:e3:e4:88:97:ad:
                    a1:7f:c4:62:0c:22:08:fd:ff:ee:78:13:5e:af:3e:
                    c7:c0:37:de:dd:84:b8:20:ed:99:31:0a:49:3e:19:
                    64:58:78:00:d2:66:6c:09:56:15:52:39:97:00:60:
                    98:8c:7d:97:25:84:4b:22:ef:74:aa:17:dd:e2:b0:
                    64:ef:17:ff:fc:11:21:39:01:ef:e3:62:6d:87:ef:
                    6b:70:8b:35:b1:55:94:f4:8c:dc:66:52:43:bb:22:
                    df:54:46:33:5c:0d:8c:6d:4e:ab:da:fb:85:99:39:
                    8d:fa:fa:20:0c:32:3f:3b:57:cb:f7:68:dc:53:2b:
                    22:95:39:5d:8d:66:f3:d1:00:d4:32:49:be:bf:e2:
                    d3:05:9d:33:7f:4e:2d:93:45:cd:47:85:e2:15:8c:
                    5d:6c:01:e8:8b:3d:9c:8a:73:f2:2d:b6:80:e8:d4:
                    0b:11:44:4f:af:f2:e8:07:3d:b1:6c:4a:39:84:fe:
                    9c:39:41:33:30:15:dd:c2:d7:1a:3a:ae:86:9c:ff:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:B5:E9:16:EC:59:77:BE:1C:3B:8D:73:3A:B7:8B:02:0E:09:44
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:51:53:98:09:97:51:41:38:5b:43:a9:9f:02:c2:3f:b3:8e:
         8b:c6:3e:49:fc:6a:3d:5d:a1:50:ab:09:47:cf:eb:c6:8e:26:
         21:aa:6c:53:b3:62:6e:90:5d:5c:89:30:59:ad:cf:a1:b4:50:
         9f:a0:e7:98:13:fe:95:96:15:d6:3d:d2:80:1d:07:7f:a0:19:
         d7:6b:e3:fd:3d:4c:30:2a:49:f8:ff:5c:4e:88:ee:5b:4a:13:
         85:49:42:2a:19:ed:49:98:6d:2a:e8:5d:6e:6b:ec:fa:f1:06:
         39:ae:30:86:ed:af:69:16:d1:2d:0a:31:78:7f:8d:a6:17:00:
         b8:b8:70:ad:39:25:d8:ae:76:0e:08:b4:47:c2:aa:e2:76:f6:
         01:99:55:ea:ca:3f:4e:ab:ca:ad:20:66:c3:e6:f0:fa:40:90:
         a9:d8:57:3b:2f:e0:52:d6:31:9b:45:06:c0:a4:ea:cb:03:17:
         6c:13:0e:f4:c9:84:80:cc:35:d1:03:90:cf:73:ce:70:be:c3:
         6d:3b:6a:3e:fd:18:e3:70:42:6a:ff:52:42:65:e1:63:d1:f1:
         0e:f7:15:3d:22:91:7b:e3:e0:47:89:f0:1e:ac:e0:15:ba:97:
         ec:2b:d3:09:e6:15:4e:1d:07:9e:ee:b3:71:5a:1c:03:6d:ff:
         0f:6c:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:41 2026 by rpki-client