This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
File:                     3230302e34322e3232342e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          Kv8VGxrZB/9qVB398hzqRIIfF6OhaMmYI/xoQisV7Qc=
Subject key identifier:   CF:DB:3A:F1:AC:5C:09:AE:9D:DA:47:23:CA:FB:A5:B5:29:4E:B1:F4
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       0763ACBC61F7CE89D9C5B194EF41D34C12C37490
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:50 +0000
ROA not before:           Tue 06 Jan 2026 19:34:50 +0000
ROA not after:            Tue 05 Jan 2027 19:39:50 +0000
asID:                     12066
IP address blocks:        200.42.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:63:ac:bc:61:f7:ce:89:d9:c5:b1:94:ef:41:d3:4c:12:c3:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:50 2026 GMT
            Not After : Jan  5 19:39:50 2027 GMT
        Subject: CN=CFDB3AF1AC5C09AE9DDA4723CAFBA5B5294EB1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:d2:67:66:95:b8:4e:59:46:d3:54:17:bf:
                    b5:3e:26:ba:9d:84:0b:94:60:82:da:bf:1c:4f:f5:
                    ae:88:55:39:bb:03:4d:17:a8:e3:3f:1c:21:12:80:
                    d7:3c:3e:7f:95:1c:ef:92:54:30:c9:3c:59:e4:80:
                    41:f0:e5:e3:58:d8:b2:8c:c5:dd:05:e8:e9:0c:5f:
                    03:26:24:b8:1f:2c:94:30:54:de:0b:62:2e:6a:da:
                    93:5f:bf:59:b2:67:e9:0d:45:9d:e2:10:c4:a9:5e:
                    94:6b:3a:ad:49:58:d4:2c:b8:69:bd:b5:09:1f:e7:
                    86:03:6c:8f:4a:b6:43:1a:5f:31:f4:1d:37:d7:ff:
                    5b:9d:5e:4f:60:32:59:07:b3:55:bb:18:dc:31:95:
                    de:60:c2:09:eb:7f:92:bc:eb:fc:6d:ef:93:0a:64:
                    5c:1a:da:04:09:a7:5c:a2:7a:e5:56:ab:4e:7b:f4:
                    1e:b3:41:b8:e4:68:73:99:4d:43:05:f8:82:f7:f0:
                    aa:d6:0f:4f:c4:79:62:ee:f8:7e:5d:40:ab:d3:d4:
                    f6:00:c1:bf:d7:b2:1a:64:96:7c:fe:87:75:86:cd:
                    25:37:ef:92:67:b7:e3:00:53:fb:05:ea:90:95:40:
                    36:2a:6e:7a:34:06:dd:18:1f:72:57:bb:b3:22:b9:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DB:3A:F1:AC:5C:09:AE:9D:DA:47:23:CA:FB:A5:B5:29:4E:B1:F4
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:de:a9:1f:d7:d0:74:32:d5:c9:f2:e9:51:cc:5c:d9:25:
         2f:e8:18:c4:52:e6:39:3f:10:76:aa:23:99:44:1f:25:f2:19:
         14:2f:b8:78:70:57:bd:ab:99:a6:c8:62:5d:7b:3f:0b:47:77:
         05:53:1d:d2:0f:bc:a3:3c:fe:ea:2a:2f:3c:15:a7:bb:a2:a0:
         9e:9a:8a:31:89:ff:54:7b:44:a7:59:e4:0d:2f:ed:72:5d:f8:
         17:68:86:8b:d2:4c:2c:6b:89:f8:40:8d:56:f0:34:98:a7:db:
         78:6b:55:8b:a3:19:96:4b:ba:b1:59:8f:56:7e:44:5c:51:12:
         a9:b8:01:1f:54:e2:14:d6:d9:50:5f:8f:39:01:3c:4c:67:8a:
         bf:99:f6:2c:2a:6d:12:e5:23:0b:da:0a:8d:fa:ae:bc:03:aa:
         29:04:26:88:6d:68:91:0e:be:64:96:07:5a:3d:2e:76:31:a0:
         59:40:d4:fd:9a:8b:6f:f9:32:02:2b:cc:af:29:9c:dd:45:c4:
         96:e5:94:f9:e2:de:24:5f:ae:18:5c:5b:ea:d3:8a:ac:e7:19:
         a8:66:05:35:8e:b1:52:53:79:4f:1a:40:5b:b3:d5:62:c2:ec:
         3e:dd:4e:00:3b:fa:18:fe:de:0e:5b:8b:10:90:c8:7a:8d:7d:
         2e:7a:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:26 2026 by rpki-client