This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
File:                     3230302e31302e3232342e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          u7lI/mKHtO30bUtidsyr4DoPGc6Ur77bUt1hXTOrgiA=
Subject key identifier:   2D:8C:42:E8:B9:34:C5:28:52:9C:9A:80:7B:3E:E8:0F:63:44:68:2C
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2C574B8D19795806C1CEDDF34EDFFF9BD7E64BF9
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 19:24:55 +0000
ROA not before:           Tue 06 Jan 2026 19:19:55 +0000
ROA not after:            Tue 05 Jan 2027 19:24:55 +0000
asID:                     7004
IP address blocks:        200.10.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:57:4b:8d:19:79:58:06:c1:ce:dd:f3:4e:df:ff:9b:d7:e6:4b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:55 2026 GMT
            Not After : Jan  5 19:24:55 2027 GMT
        Subject: CN=2D8C42E8B934C528529C9A807B3EE80F6344682C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:a9:04:67:f0:0d:2e:a4:ae:28:fe:ea:15:
                    df:eb:4d:b3:89:df:27:89:75:ea:83:40:4e:2d:2c:
                    4c:bd:b8:04:d1:79:74:72:f9:2d:b4:2d:b3:b1:d1:
                    a1:6f:6c:22:2d:e4:a9:bd:14:9a:06:26:86:40:ab:
                    c4:2f:4b:73:8a:0d:2a:4f:f4:9f:3e:a1:9b:f6:bd:
                    8d:3e:ea:b1:a7:77:ef:02:c9:0a:3b:07:4a:cf:a1:
                    ba:b1:14:90:04:fa:59:33:f5:8d:f8:1e:46:cf:f0:
                    4b:a3:bf:fa:09:be:de:46:75:34:f3:58:14:75:67:
                    19:a5:3e:6e:8d:3b:96:c9:18:a0:29:31:46:ea:95:
                    8c:dd:c0:be:aa:06:44:41:c3:f4:1b:f3:69:62:57:
                    de:4b:ae:8e:6e:f6:e4:24:96:ec:b5:0a:58:68:47:
                    40:1c:21:e7:44:22:0f:3b:76:60:16:f6:c2:9c:e2:
                    52:e9:67:2f:45:ae:e0:bd:5b:86:62:eb:e0:11:bb:
                    1e:f8:5f:50:40:db:cd:77:d6:81:38:e6:79:19:3e:
                    83:81:d5:61:21:2e:b9:41:27:fd:33:c4:1e:31:dd:
                    b6:22:1f:5d:af:be:c4:e7:44:59:e1:a8:74:8b:0a:
                    b6:11:e1:e3:3f:e7:f2:f0:f5:af:ab:e5:3d:36:6c:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:42:E8:B9:34:C5:28:52:9C:9A:80:7B:3E:E8:0F:63:44:68:2C
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:15:22:95:e3:f6:4c:ed:d0:4f:29:28:c6:8c:fb:a8:d3:e4:
         c4:74:52:74:ca:df:6a:6e:0d:98:4b:fa:3e:09:68:b1:df:f7:
         e4:d1:cb:92:11:5a:d7:34:f1:ae:6f:85:7a:af:41:ff:10:6c:
         96:37:5f:f6:8d:40:3f:b1:3b:c3:12:96:c7:f5:95:ad:5b:95:
         19:0c:e6:07:4a:97:cf:65:eb:00:17:62:19:e3:d6:ee:84:00:
         17:db:18:c7:55:bc:a2:6e:5d:3f:c9:cc:5e:b9:41:26:22:8d:
         ca:36:7d:67:bc:00:a0:94:80:da:58:bc:a6:af:c2:9a:b1:e1:
         e0:ed:5d:0f:a0:86:52:9e:52:f1:c6:43:c4:7b:70:c4:36:d1:
         52:cc:4a:d8:50:99:56:a9:ab:55:60:ee:4b:df:63:fe:f4:da:
         93:c7:0b:72:7f:7d:b6:35:ae:50:cf:49:e5:0b:6b:be:66:6c:
         63:da:09:85:a8:e1:1b:94:de:b3:f1:f9:4e:d1:79:19:ee:88:
         b2:c5:4f:f6:dd:0b:95:4c:e5:4f:46:ec:05:c3:86:66:1d:e0:
         4d:8a:0a:ac:ca:01:30:09:94:9e:a9:4d:d3:d8:f3:78:e7:2d:
         ac:70:85:5a:aa:80:9c:eb:15:8b:ed:c5:ef:34:6d:10:40:f1:
         fa:3b:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:09 2026 by rpki-client