This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa
File:                     3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier:          TtouyobwLbCr37allFPBHKmDeFyEYI1gC9CqC+V0T4I=
Subject key identifier:   65:1C:0C:57:7A:D0:22:E9:B4:58:9A:21:0B:5B:08:A6:FB:A5:D7:35
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       167D1EB39D43F3BE1C970A55D80F24CD5F4F4307
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa
Signing time:             Tue 06 Jan 2026 19:42:26 +0000
ROA not before:           Tue 06 Jan 2026 19:37:26 +0000
ROA not after:            Tue 05 Jan 2027 19:42:26 +0000
asID:                     263174
IP address blocks:        200.29.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7d:1e:b3:9d:43:f3:be:1c:97:0a:55:d8:0f:24:cd:5f:4f:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Jan  6 19:37:26 2026 GMT
            Not After : Jan  5 19:42:26 2027 GMT
        Subject: CN=651C0C577AD022E9B4589A210B5B08A6FBA5D735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:f7:73:61:de:5a:6d:27:dd:19:3c:31:5e:
                    9f:78:3f:20:9b:b5:96:11:9e:46:7e:a3:e3:d6:67:
                    64:6a:ee:b5:62:8f:e8:bb:6b:5b:37:6c:9a:d6:57:
                    96:8f:95:d7:cd:40:7b:00:1b:ed:8f:25:4f:7d:ce:
                    1f:0e:53:82:de:63:ca:0c:74:c0:65:a5:4c:c2:fa:
                    94:fb:46:73:fb:a1:50:56:1d:34:be:dc:7e:bc:e6:
                    79:52:0f:fb:c8:95:d3:c0:69:42:0a:17:34:91:74:
                    31:a1:95:dd:fe:4f:aa:6f:49:8a:c6:98:ce:79:04:
                    b4:63:2a:3b:33:c7:e2:87:8e:9c:ed:f8:ae:cd:1e:
                    f6:88:44:89:fb:2e:f1:f7:c4:e7:8c:2e:a2:d2:e6:
                    1a:7f:97:55:1f:2a:e0:10:6d:c8:a3:e6:7f:84:53:
                    17:6b:ac:31:16:4f:94:49:41:15:a3:3f:1b:b2:34:
                    12:ac:63:d1:6b:17:f1:0b:cb:d9:bd:ad:be:a2:5c:
                    9f:6c:16:d6:e9:d4:05:ea:5b:09:5c:58:8f:ac:af:
                    59:a3:04:2f:ea:2c:b0:86:cc:a7:c3:0e:75:42:f1:
                    8c:c7:a4:38:70:c1:41:36:fc:8f:4d:3d:72:46:0b:
                    46:7c:c1:9f:cf:ca:9e:f5:bf:f9:e7:77:50:3c:5d:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1C:0C:57:7A:D0:22:E9:B4:58:9A:21:0B:5B:08:A6:FB:A5:D7:35
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:8e:1e:8a:aa:aa:86:8e:02:47:47:02:1a:52:7b:26:6c:
         c0:07:07:c3:c5:47:cb:d3:e8:71:1d:7d:36:85:dd:46:bd:93:
         fd:5f:d2:c3:9f:53:f2:2c:8e:f1:44:81:db:46:dc:05:ce:a0:
         68:69:47:c2:40:07:7a:aa:ba:1a:6f:e5:fb:ee:cd:21:83:ec:
         a5:45:64:1b:e1:82:c3:71:92:68:7f:8b:af:54:2c:53:ff:0b:
         c3:67:46:c3:01:f5:d8:04:da:77:28:94:5b:16:67:5c:6c:17:
         91:7e:16:b7:77:49:ae:be:f6:e3:04:94:f9:28:a2:fb:12:a6:
         6b:1e:5a:c2:6d:b2:55:3c:10:c2:f7:3f:61:95:c0:1d:64:c0:
         5a:25:cd:96:34:cd:56:95:28:22:1f:7c:70:dd:ee:e6:7a:e0:
         20:49:b8:63:1c:30:df:7e:db:b1:99:fb:7c:71:ba:f8:f8:d8:
         61:0b:2e:92:9f:e4:98:0b:a9:f2:71:2b:0a:f8:66:5e:3f:df:
         2d:87:3e:b4:72:80:77:78:7a:6b:a0:b5:04:78:f5:3b:69:25:
         09:e3:bf:1a:52:10:47:9d:ea:4d:8a:7b:ba:e5:36:7f:56:2a:
         39:29:09:6c:f3:2d:1c:d6:01:32:ad:5d:c3:f6:61:9f:86:ae:
         45:a2:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:55 2026 by rpki-client