This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa
File:                     3230302e3131352e34322e302f32332d3234203d3e203237373834.roa (raw, json)
Hash identifier:          PplUfFY6hmO9NWO5BwnmBwuFfW4PLiJqnSKtgovpdb0=
Subject key identifier:   46:1C:3F:6E:A4:14:6A:19:5A:9B:C8:B9:36:26:FD:80:25:86:5B:38
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       2E1A98C26AB6D798E5AB7829B0C612484DF3596A
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa
Signing time:             Tue 06 Jan 2026 20:56:11 +0000
ROA not before:           Tue 06 Jan 2026 20:51:11 +0000
ROA not after:            Tue 05 Jan 2027 20:56:11 +0000
asID:                     27784
IP address blocks:        200.115.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1a:98:c2:6a:b6:d7:98:e5:ab:78:29:b0:c6:12:48:4d:f3:59:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Jan  6 20:51:11 2026 GMT
            Not After : Jan  5 20:56:11 2027 GMT
        Subject: CN=461C3F6EA4146A195A9BC8B93626FD8025865B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:88:81:a9:e6:dd:47:b2:75:23:a8:a0:13:
                    bd:fa:17:b1:3d:ae:23:5d:03:5d:58:87:1f:4d:bc:
                    e8:c2:86:6b:b8:4d:54:8e:ed:8f:fd:e7:43:85:97:
                    a0:ce:7a:2d:5f:13:33:fe:2c:67:98:6c:73:ff:b7:
                    71:91:84:b5:2e:6a:60:36:2e:2f:e3:a4:81:1b:23:
                    f6:af:eb:66:33:00:46:16:d4:6e:b2:35:f5:3e:8e:
                    6d:06:71:11:17:94:4b:02:35:f6:77:2c:01:b0:20:
                    3c:5c:c5:2a:cd:26:9d:00:bd:43:6b:a9:72:ad:f0:
                    01:7f:77:a7:d3:e6:ca:f8:55:67:3c:67:c4:95:fd:
                    70:d2:16:a5:4c:63:b2:97:9d:2c:9f:d6:ea:f4:bb:
                    f1:23:17:73:c0:3c:76:40:e5:1c:9a:f3:82:b1:4e:
                    6e:6e:95:77:47:0b:1b:6a:49:da:46:1d:b7:18:8a:
                    10:cb:7f:80:58:ae:e1:c3:f6:03:50:e2:33:62:6c:
                    79:85:b9:05:17:59:92:7f:5a:70:00:51:6d:21:09:
                    15:ee:64:41:e5:fa:9c:3e:ad:37:df:8e:c1:5b:f8:
                    e8:cb:84:e9:db:e4:cc:f7:99:80:cf:0a:3a:58:18:
                    c7:1a:3e:1d:d2:83:75:db:7b:1d:73:0f:e0:c9:b9:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1C:3F:6E:A4:14:6A:19:5A:9B:C8:B9:36:26:FD:80:25:86:5B:38
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:b8:01:59:df:50:ff:39:58:92:e4:09:32:f2:41:27:52:6c:
         97:f2:d7:36:7e:46:10:db:bb:bb:eb:33:87:36:33:56:84:77:
         b5:0c:84:5c:e3:bd:7c:fb:13:63:5e:31:ef:47:55:19:e1:5b:
         f7:84:08:36:69:fa:83:e7:29:f2:29:7a:c5:17:17:fd:63:4b:
         cb:2e:79:7b:ec:d4:47:f4:20:e2:2a:fd:d4:6f:b6:fd:f7:50:
         f5:5d:ce:5a:ad:98:9e:d8:aa:40:35:52:9e:0e:6f:5a:d8:fb:
         8f:b7:53:d5:bb:02:8a:e4:84:f6:3b:d6:ac:14:ab:53:14:06:
         d1:c2:b1:0a:f4:3f:05:76:d3:ce:2a:f9:0f:82:25:41:0a:14:
         b4:c5:6a:b8:62:b8:d7:90:e0:27:1c:f9:f4:74:7a:34:13:61:
         35:eb:ef:0a:7f:c3:10:e3:e0:99:de:7b:44:c7:f2:ab:70:13:
         0d:ae:8b:37:14:c8:df:ad:1e:d1:f9:95:28:b3:9a:96:d0:14:
         56:4c:51:a9:5c:4f:18:55:72:df:d1:14:c9:90:c2:c0:66:86:
         0a:7e:26:1b:fa:83:5c:fa:6e:53:55:65:3a:d4:f5:c2:35:e7:
         7c:16:68:58:b2:49:52:ab:fe:8c:ec:d4:f2:e3:15:eb:f4:1a:
         ed:ce:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:16 2026 by rpki-client