This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa
File:                     3230302e32352e302e302f31372d3234203d3e2037313935.roa (raw, json)
Hash identifier:          6ZH9STxldYirfwRm+pVhBT2ZPDIMiGDILn7PQz6n5d4=
Subject key identifier:   D3:86:93:27:B4:5F:4B:90:E9:A5:F3:40:02:FC:13:1B:06:5E:33:A9
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       0F6705B56EDBBE1B1B5ABD765F26D8350093F00B
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa
Signing time:             Tue 06 Jan 2026 19:25:14 +0000
ROA not before:           Tue 06 Jan 2026 19:20:14 +0000
ROA not after:            Tue 05 Jan 2027 19:25:14 +0000
asID:                     7195
IP address blocks:        200.25.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:05:b5:6e:db:be:1b:1b:5a:bd:76:5f:26:d8:35:00:93:f0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jan  6 19:20:14 2026 GMT
            Not After : Jan  5 19:25:14 2027 GMT
        Subject: CN=D3869327B45F4B90E9A5F34002FC131B065E33A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:00:59:2d:fa:a6:5e:28:01:fe:9f:31:e9:
                    3a:aa:c7:c5:66:cb:35:53:a5:d0:4f:79:f2:b9:d1:
                    03:a8:d1:7e:90:67:fc:d0:be:2e:27:07:e4:77:95:
                    7b:32:e8:06:12:81:41:62:08:3a:47:4b:d7:dd:9c:
                    42:16:bb:35:7a:af:12:55:6a:22:fb:11:32:c7:5c:
                    5b:f3:a6:ca:e8:ec:a4:36:95:ea:7e:7d:6b:67:b7:
                    f6:26:e7:7e:d2:04:36:9d:f4:e7:cc:13:a8:bd:58:
                    81:00:13:29:ac:04:8d:c1:29:93:18:db:6b:b5:9e:
                    8c:8e:88:e9:ef:dd:63:0a:5d:b9:fe:bd:15:09:01:
                    1c:64:49:bb:63:50:6c:ad:e2:14:cf:46:6f:a0:d1:
                    37:cd:40:a9:ef:c5:ce:d5:cf:e7:dc:63:fa:c5:45:
                    dc:61:95:06:8d:8b:88:de:9a:7f:22:78:a2:b2:39:
                    09:7d:26:ee:47:fd:0b:a3:ac:b8:90:93:4c:de:88:
                    43:c5:45:6d:fb:15:7b:f6:56:0f:70:97:ef:e9:3c:
                    40:ab:22:94:e8:bd:b1:a0:09:63:35:c4:85:26:0a:
                    6e:ad:af:4e:38:64:49:cd:10:67:32:a6:d6:c9:3e:
                    19:84:f3:00:ec:9e:ef:22:f3:89:3a:6f:90:cd:a2:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:93:27:B4:5F:4B:90:E9:A5:F3:40:02:FC:13:1B:06:5E:33:A9
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:17:95:37:cb:66:22:2c:ab:61:d0:29:70:5a:c4:b6:be:df:
         3f:d0:6b:5d:0f:9a:4c:27:40:e0:d3:c7:57:fd:09:c7:56:26:
         45:2b:3f:7e:8f:5f:60:71:63:f7:36:fa:5e:e7:27:81:e8:68:
         75:f9:40:6e:26:c4:0a:44:fb:f1:0d:4a:89:f7:8e:46:2a:23:
         bb:7f:2b:12:eb:ec:aa:d3:06:90:94:8d:51:0b:0a:63:fd:46:
         7a:6f:85:e2:cb:5b:08:ed:7b:ba:30:30:62:ce:8b:c9:48:b2:
         b0:55:bc:76:c9:3b:2a:ff:17:fb:b7:aa:4a:ef:74:cb:58:fe:
         94:9c:eb:ad:45:15:cf:78:18:56:38:ac:a7:32:4b:b7:f1:5c:
         c5:37:fb:2d:7e:9c:25:1e:6e:34:74:76:d7:02:f6:2e:91:09:
         fb:31:1f:5d:2a:43:ec:7d:54:e6:e0:42:10:15:3c:be:bd:65:
         39:5a:f1:04:fc:e5:b6:1f:95:51:40:e5:b5:a5:65:97:43:eb:
         ca:db:11:6c:21:05:a1:60:9c:2f:35:aa:03:ad:51:73:1a:fa:
         8d:fa:b6:e2:8e:85:b6:9d:56:33:13:f7:3a:9d:03:54:db:60:
         a5:2d:5a:c3:cf:9a:7a:0d:29:ef:3c:82:35:68:df:0e:02:f6:
         f7:e5:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:53 2026 by rpki-client