This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa
File:                     3230302e32352e36382e302f32342d3234203d3e203634313234.roa (raw, json)
Hash identifier:          9CH4wep71nyrHC6hgHkRFQqWje/UJ9BkmVWmitA+U/s=
Subject key identifier:   17:E9:43:28:F2:62:91:CE:B5:26:F3:B2:A6:F2:0D:E7:10:1C:F5:7F
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       508CCBB78A01832E753625E19175927DBF379F21
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa
Signing time:             Tue 06 Jan 2026 19:25:14 +0000
ROA not before:           Tue 06 Jan 2026 19:20:14 +0000
ROA not after:            Tue 05 Jan 2027 19:25:14 +0000
asID:                     64124
IP address blocks:        200.25.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8c:cb:b7:8a:01:83:2e:75:36:25:e1:91:75:92:7d:bf:37:9f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jan  6 19:20:14 2026 GMT
            Not After : Jan  5 19:25:14 2027 GMT
        Subject: CN=17E94328F26291CEB526F3B2A6F20DE7101CF57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:03:77:40:47:e2:4a:fb:0f:47:eb:42:8c:
                    6e:97:f2:5c:ec:2a:55:a2:93:50:ff:ae:bd:ba:a0:
                    c1:47:7a:43:4f:fd:61:dc:bf:d7:9b:f8:53:41:8a:
                    90:68:69:fb:f2:6d:b6:ee:1c:d4:55:33:34:72:24:
                    8c:7b:58:09:08:19:e2:c3:2f:45:86:72:33:6a:54:
                    aa:f7:e6:17:8b:4e:1e:90:05:e1:a6:5a:a0:c7:83:
                    cb:f7:d6:d3:ac:a9:3e:17:21:29:9f:24:7c:0f:da:
                    f5:62:3f:48:99:d1:b9:7d:c3:ce:1d:1a:ae:07:aa:
                    66:07:79:e2:0c:2e:5b:37:ab:d7:cf:05:20:24:88:
                    f1:31:3d:4a:e1:d5:9e:b9:be:b5:9d:37:d7:69:d6:
                    e9:60:7a:79:22:3d:01:d8:09:6a:7c:7b:fe:e8:2c:
                    54:ca:be:d9:51:f4:61:fb:5a:a6:65:64:da:f4:3b:
                    fd:95:a3:d7:76:03:a1:61:2c:10:44:76:e2:b0:cc:
                    ff:5b:1e:fd:c2:cd:47:4c:54:a3:13:69:9c:d2:8d:
                    ae:0e:16:9c:e8:0b:53:1f:ce:72:98:54:e9:1f:24:
                    da:04:fc:11:fa:aa:ff:9f:73:5b:11:30:99:24:eb:
                    0e:be:32:8e:2c:74:87:c9:30:de:36:8d:8d:fb:b0:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:43:28:F2:62:91:CE:B5:26:F3:B2:A6:F2:0D:E7:10:1C:F5:7F
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:d5:bc:67:0a:ff:fa:a2:ea:a1:94:50:bd:b4:5e:f7:3c:
         71:1d:27:3f:63:f3:bf:60:b8:4a:ec:99:bd:14:92:3b:ea:a5:
         90:d4:3e:4e:9a:01:0b:c4:13:40:22:bc:1c:44:d5:b6:fc:8c:
         38:37:e4:6e:46:a1:fb:22:b7:b4:30:7e:ab:cb:17:4a:6a:c9:
         0c:38:2a:f2:ce:5b:63:dd:27:2f:a2:43:c4:f1:30:8e:b6:74:
         70:1f:9c:42:6d:89:2e:c5:e8:21:bb:4a:c3:9c:ac:0f:f1:e7:
         b6:a7:a0:c7:e7:4f:26:f0:b5:09:9d:42:2a:15:ad:31:8f:ed:
         c8:64:9d:c1:09:06:54:5b:e7:69:09:f9:f3:a8:84:78:fd:27:
         3c:c1:2b:23:46:8e:94:65:4f:78:ee:10:95:8a:c9:94:64:a5:
         ec:30:b7:04:5b:ae:3a:17:77:3f:b6:fb:c5:65:5a:57:9a:20:
         4e:e2:d6:7d:43:5c:3e:6f:26:bb:20:fc:c8:c3:26:08:1e:ba:
         05:85:1c:75:e7:96:25:be:c9:ab:52:18:dd:56:86:5c:41:82:
         47:ec:dc:36:c4:69:df:22:e2:b6:fd:fc:b3:83:cc:0f:2e:00:
         27:de:ab:3a:7a:42:4a:a9:b9:6e:f3:4e:4d:93:8a:e9:b2:d9:
         27:19:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:55:14 2026 by rpki-client