This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa
File:                     3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          VTwAo9KM+KbyQgJkcZeJacGdiT70Iv95cGDgQdBPn2U=
Subject key identifier:   57:C9:B4:DB:96:7E:6E:B7:FB:00:B7:C3:8A:83:C1:65:61:45:E3:CB
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       4B91DB78B70E6E2A5D83C36165C726DB6AC923AC
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa
Signing time:             Tue 06 Jan 2026 19:20:44 +0000
ROA not before:           Tue 06 Jan 2026 19:15:44 +0000
ROA not after:            Tue 05 Jan 2027 19:20:44 +0000
asID:                     263242
IP address blocks:        200.12.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:91:db:78:b7:0e:6e:2a:5d:83:c3:61:65:c7:26:db:6a:c9:23:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Jan  6 19:15:44 2026 GMT
            Not After : Jan  5 19:20:44 2027 GMT
        Subject: CN=57C9B4DB967E6EB7FB00B7C38A83C1656145E3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:ef:b6:74:f9:18:7b:a3:0d:f2:b9:c3:9e:
                    ba:a3:f7:94:40:ff:7d:d0:de:0e:63:e7:0d:09:12:
                    eb:c8:70:9e:01:7a:61:c7:6b:27:3b:9b:ea:13:8d:
                    5e:b1:81:27:30:50:93:f5:90:96:e1:91:29:1d:53:
                    5d:0b:5d:eb:f6:47:59:85:85:35:a6:a0:d3:11:32:
                    a1:79:61:91:ab:4f:d1:28:59:57:90:68:f4:0d:62:
                    a8:2a:eb:f8:43:d2:0a:37:24:ba:08:3a:4f:0c:3e:
                    48:24:f3:51:d9:c4:59:86:1e:fa:89:ed:80:08:92:
                    50:41:9a:12:c7:72:81:f5:9a:7d:43:49:90:2f:ed:
                    89:11:6a:ee:7a:2b:5c:b0:b9:bd:6d:27:25:9f:a2:
                    c9:43:b8:f4:76:a8:52:4a:0b:0f:e8:0f:8d:61:ab:
                    d4:97:34:e0:bd:97:ff:67:da:87:91:08:d5:4b:8f:
                    2d:a8:71:f1:2c:3c:df:cf:3c:48:63:78:87:aa:c4:
                    66:6c:f1:bc:04:14:76:e1:de:91:6a:0a:eb:41:1b:
                    c7:90:ae:e8:af:9a:0a:20:95:8f:ca:1d:5f:19:01:
                    87:a3:ce:09:bc:d6:ab:96:ec:0a:06:72:3e:8d:b5:
                    2e:5a:8f:a4:5f:fc:94:d9:aa:62:1d:3a:2d:4c:13:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:B4:DB:96:7E:6E:B7:FB:00:B7:C3:8A:83:C1:65:61:45:E3:CB
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:b4:c7:a6:27:c6:68:dc:63:56:4b:d8:5a:c7:c3:63:0d:
         bb:f3:42:72:97:93:16:03:d0:55:a5:be:4e:52:22:90:56:b9:
         45:ab:3e:14:3a:19:8a:aa:c4:2f:fd:89:7b:42:87:48:84:aa:
         60:93:ea:61:93:e8:ad:1b:25:be:d9:12:db:fe:44:48:b0:9b:
         10:21:e4:03:85:dd:8c:b9:ee:ab:2c:ef:7f:46:d0:37:59:69:
         44:c5:cd:15:c5:ea:1f:18:3e:f7:46:9c:b0:a0:85:26:fd:2a:
         31:4f:a9:82:b2:bd:de:9e:40:1c:e2:cf:3c:4f:90:c3:1c:c3:
         89:54:a7:2e:37:cb:e9:83:18:e1:29:30:8f:17:89:36:91:35:
         2e:7a:3e:b4:46:be:36:34:d7:51:76:78:0d:95:d1:7e:bc:af:
         c4:5a:65:c4:22:61:89:89:0e:7c:5a:b2:77:b1:42:87:e0:a6:
         2c:ff:4e:ca:c4:6e:f9:44:17:cf:91:5c:1e:52:6c:6a:b4:5f:
         3b:e9:68:61:cd:93:3d:11:51:db:e6:a7:44:3c:08:e8:c0:63:
         1a:59:c4:42:e3:db:50:3e:1f:02:32:8b:d2:60:c1:5e:b4:5c:
         15:8e:be:af:07:39:7f:77:30:29:56:b3:41:fe:65:29:c5:46:
         94:e9:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:50 2026 by rpki-client