This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136382e302f32342d3234203d3e203532323530.roa
File:                     3230302e392e3136382e302f32342d3234203d3e203532323530.roa (raw, json)
Hash identifier:          Rtlmi+xNwkFfFtQu7bnuzRJwjtgtgkKRCdgfgwHY74E=
Subject key identifier:   7C:03:8D:AB:3F:75:1E:B6:9D:7F:A8:48:33:73:6A:9C:33:4E:CF:70
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       6954F07AE763F12AF80E1A7E53526EB2E9033E45
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136382e302f32342d3234203d3e203532323530.roa
Signing time:             Tue 06 Jan 2026 19:06:45 +0000
ROA not before:           Tue 06 Jan 2026 19:01:45 +0000
ROA not after:            Tue 05 Jan 2027 19:06:45 +0000
asID:                     52250
IP address blocks:        200.9.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:54:f0:7a:e7:63:f1:2a:f8:0e:1a:7e:53:52:6e:b2:e9:03:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Jan  6 19:01:45 2026 GMT
            Not After : Jan  5 19:06:45 2027 GMT
        Subject: CN=7C038DAB3F751EB69D7FA84833736A9C334ECF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:2c:36:5f:84:74:4a:ea:3f:16:73:0a:03:
                    20:dc:e0:20:a0:bd:b7:f1:f3:06:a2:b1:52:fa:ed:
                    b1:03:20:2f:af:d0:9e:de:21:6c:68:a9:ea:5d:1c:
                    fd:fb:ed:7f:0d:d9:30:a8:86:ef:84:8b:61:db:9b:
                    bc:05:30:93:cc:9b:aa:88:fa:c1:07:8e:24:89:5e:
                    9a:6a:17:3a:88:5a:d0:91:65:1f:df:7c:8b:4b:73:
                    e3:eb:fa:39:97:d4:70:ac:2d:13:55:e4:9c:8a:53:
                    be:37:94:13:88:94:cd:cd:7d:58:a4:be:12:da:d7:
                    13:9c:07:3b:0e:79:0d:78:43:ec:26:76:04:51:19:
                    45:8d:03:54:91:0a:04:f7:4e:dd:22:74:9c:fc:6b:
                    e5:cc:43:d1:3a:4e:96:22:b4:a1:71:67:1f:d0:55:
                    ac:99:39:06:fe:39:5f:3a:08:7a:15:b2:c4:39:7f:
                    4f:3c:70:eb:37:77:e6:9c:a6:ab:f8:da:72:1f:4e:
                    ea:e0:88:c2:3b:04:97:34:71:99:36:97:37:9b:5c:
                    f9:7c:e4:68:58:61:e0:c5:eb:b5:eb:41:69:1d:61:
                    8e:36:e5:d6:b0:48:ab:09:03:e9:b4:fc:a4:e6:eb:
                    b6:dc:f7:d0:44:80:f1:61:c0:20:1e:96:a3:9a:17:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:03:8D:AB:3F:75:1E:B6:9D:7F:A8:48:33:73:6A:9C:33:4E:CF:70
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136382e302f32342d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:b5:f9:b4:d5:1a:3f:fe:13:e4:e1:dc:c3:39:58:63:bb:
         4b:58:3d:af:8d:e2:98:6c:5e:0b:60:2e:8b:33:7d:62:50:80:
         99:30:29:5b:48:fc:da:19:ff:92:1e:72:63:51:87:04:54:6e:
         2b:7b:33:4b:73:ca:ff:58:84:81:0a:2d:0b:25:33:3e:42:51:
         e8:ec:b9:c4:d0:fc:03:0c:a7:88:ba:86:83:b6:22:7d:d1:2c:
         f6:8d:cc:7f:1b:ed:04:1c:40:ed:53:15:6d:e0:da:fe:21:81:
         55:07:38:c0:81:f1:66:6e:03:b8:1a:65:7a:4d:49:f9:64:d0:
         c3:61:7a:01:13:1c:d1:b4:e0:b2:97:74:b2:62:b7:52:9b:32:
         b6:75:f5:54:85:ee:65:0d:6b:e6:f9:38:ee:45:4a:8f:3f:c2:
         62:3c:86:3b:ec:f2:14:6b:7a:32:9b:c9:cd:d1:91:51:3c:31:
         1d:cb:e0:c2:4a:64:03:10:94:53:12:94:26:66:50:af:b6:8c:
         76:37:52:ad:ad:dc:43:09:f8:3d:cd:05:8f:f1:dd:08:79:a1:
         ee:e4:23:3e:b5:49:4e:ef:a9:a1:2c:07:b6:13:48:87:13:6b:
         e2:9e:61:8b:e4:4c:9e:51:fc:43:7a:84:64:04:62:cc:a4:67:
         2d:5d:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:31:22 2026 by rpki-client