This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa
File:                     3230302e37362e39362e302f32302d3234203d3e203136353331.roa (raw, json)
Hash identifier:          8JB8IF47Z+t5u7WXpUsmguipSCp3Lke2xVJPbcojdEQ=
Subject key identifier:   95:B6:89:B5:9A:F1:89:29:27:C8:AF:DB:44:74:46:F0:E3:C4:80:F4
Certificate issuer:       /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Certificate serial:       77B18DEC4FACA93C47B50D51F1DB4B5337D52A6B
Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa
Signing time:             Tue 06 Jan 2026 19:24:30 +0000
ROA not before:           Tue 06 Jan 2026 19:19:30 +0000
ROA not after:            Tue 05 Jan 2027 19:24:30 +0000
asID:                     16531
IP address blocks:        200.76.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b1:8d:ec:4f:ac:a9:3c:47:b5:0d:51:f1:db:4b:53:37:d5:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
        Validity
            Not Before: Jan  6 19:19:30 2026 GMT
            Not After : Jan  5 19:24:30 2027 GMT
        Subject: CN=95B689B59AF1892927C8AFDB447446F0E3C480F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:ea:ee:13:a0:f9:d1:19:fe:f1:d3:dc:32:
                    1e:80:38:ac:54:d2:ba:ee:dd:b0:1a:cd:59:d7:d6:
                    d3:8d:4a:5c:2a:ac:6d:42:fa:97:1b:05:3d:da:38:
                    d7:49:72:d5:ab:3d:55:6c:83:96:e3:c1:38:b4:e6:
                    3d:06:27:0e:af:5f:74:df:32:d5:f8:e5:0a:38:d8:
                    86:b4:bf:e9:8f:3d:c4:ed:be:11:e1:02:10:6f:ea:
                    bd:d4:55:77:d5:27:23:9e:57:06:22:27:f5:f2:b2:
                    55:cb:e8:a4:78:37:8e:8d:81:c2:19:4f:6d:33:af:
                    0c:6f:2f:65:1f:cf:17:72:e3:11:d2:53:87:ea:72:
                    d1:46:eb:88:d2:d5:ca:25:27:59:3d:9e:92:90:ba:
                    51:9d:ca:8c:49:9d:5b:e8:1a:4c:4c:2f:5a:dc:e0:
                    7c:7a:c2:52:12:8a:34:2f:fe:0d:64:31:ee:96:75:
                    23:78:ec:8f:1b:3e:3c:ab:5e:92:23:f9:bf:37:3b:
                    d9:c3:73:b5:8e:e4:2f:55:fe:bc:5e:a1:0b:0e:ce:
                    ef:ad:c2:49:ac:ec:61:dc:90:09:a0:fd:7f:75:f7:
                    7f:f8:53:df:a0:f7:17:5e:30:8a:92:85:a1:92:b3:
                    79:a2:11:da:30:37:9b:2a:92:28:d6:d5:80:f1:8d:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:89:B5:9A:F1:89:29:27:C8:AF:DB:44:74:46:F0:E3:C4:80:F4
            X509v3 Authority Key Identifier:
                keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:89:f5:0e:fd:30:da:e2:55:b3:d4:02:48:eb:6e:41:a0:
         7b:4c:89:b9:a9:ff:9d:d1:5d:ec:a2:84:d8:86:1e:fa:39:8b:
         d9:52:65:8d:45:d6:a3:9d:3b:f7:4a:33:dc:b5:c5:5d:65:68:
         e5:46:5e:eb:a9:92:88:62:f7:27:c6:ac:9b:39:ec:f5:30:25:
         f9:bc:46:d6:01:97:8c:c2:af:08:f3:10:b5:af:98:01:8c:31:
         1d:60:b8:5a:b9:2c:36:1d:a7:d6:b3:2b:9c:8e:76:d5:4e:6d:
         02:59:f6:9a:af:b1:28:1c:8d:bf:82:d9:26:9c:6a:29:e7:4a:
         ee:63:06:1e:3b:7f:0d:aa:5b:a5:a6:28:c8:01:85:bf:96:e5:
         3f:ca:e5:3c:f8:46:19:fe:f4:26:b5:4c:2c:08:5f:a3:d4:10:
         ca:6f:ea:46:f0:2d:d7:a7:0e:ed:92:a9:1f:c7:73:ed:2e:37:
         b8:09:6f:59:48:ea:90:67:db:5e:83:c1:a0:10:35:76:5e:21:
         15:03:98:d8:1a:59:f3:27:ae:4d:5f:0f:a9:4c:f6:78:5c:b3:
         36:94:b0:b4:82:a4:f2:32:f7:09:de:25:c3:c9:50:b2:31:43:
         29:b1:fd:61:2a:f2:0b:cb:7c:47:8c:ff:61:3b:cf:5a:63:73:
         fe:2c:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:06 2026 by rpki-client