This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33382e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          YDro2Zdk8UXrmPA0mgWIGu1znj0No7te/8UXFy6pJCE=
Subject key identifier:   F6:95:BB:BA:54:D9:70:E3:BF:68:32:36:70:0E:95:57:B0:BA:23:75
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       38DA1032A33FEF0812E385F30716C5AB05A1B545
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:43 +0000
ROA not before:           Tue 06 Jan 2026 19:19:43 +0000
ROA not after:            Tue 05 Jan 2027 19:24:43 +0000
asID:                     7418
IP address blocks:        200.29.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:10:32:a3:3f:ef:08:12:e3:85:f3:07:16:c5:ab:05:a1:b5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:43 2026 GMT
            Not After : Jan  5 19:24:43 2027 GMT
        Subject: CN=F695BBBA54D970E3BF683236700E9557B0BA2375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:98:62:8f:8b:f7:47:4e:5d:62:e1:38:34:
                    d7:c9:8b:9c:1a:39:d3:90:8b:c5:df:2a:0e:5f:a3:
                    1e:db:85:70:3e:69:3f:bf:63:9a:4a:03:71:a1:65:
                    f8:b5:cf:6f:63:fd:7e:2c:de:3d:ee:ce:83:01:61:
                    63:06:a0:f8:18:15:83:56:8b:e9:04:6d:ed:8c:a4:
                    f5:96:a0:78:b4:36:cf:dd:e1:c2:41:cf:c7:0f:14:
                    2a:23:90:7d:8c:6f:27:eb:d8:32:1d:07:73:b3:6b:
                    f6:3a:e2:b5:99:e6:c3:04:f3:ff:89:02:2d:1d:51:
                    60:b4:5f:d8:96:ea:30:9f:e0:29:86:17:6b:41:c5:
                    ea:08:49:12:f8:eb:26:c2:5a:d3:55:e2:e5:80:5f:
                    4c:ed:55:a9:4f:af:5c:0e:ba:ce:fe:11:93:35:ee:
                    6f:ec:e5:a5:62:19:31:50:91:4b:67:0d:97:9e:e3:
                    1d:6f:f5:86:58:7f:66:5b:89:cb:c6:95:04:a9:a3:
                    54:99:31:9c:62:6c:38:6d:b7:cc:32:d5:fe:42:f3:
                    7d:ad:66:1e:bb:93:97:b9:e9:30:29:9b:bc:c2:9e:
                    82:35:6e:2f:19:91:78:e9:f1:e7:87:d6:1a:3a:24:
                    b0:f0:f2:0b:52:c1:a2:6d:e5:15:bc:8c:52:4f:13:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:BB:BA:54:D9:70:E3:BF:68:32:36:70:0E:95:57:B0:BA:23:75
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:85:b5:3d:84:52:b8:6f:00:98:54:73:7d:60:aa:45:3d:7b:
         70:19:88:c0:ea:94:06:e5:ac:78:35:c6:95:12:c3:2d:5d:98:
         0a:4a:6d:f6:54:35:a9:58:f8:95:73:77:6e:d0:81:1f:ee:99:
         c7:e2:a9:2e:4c:6e:26:40:bf:45:06:f3:c0:23:70:71:75:e5:
         5f:19:8b:df:85:2e:12:a7:a9:54:72:ad:e3:9d:37:17:13:f4:
         a5:f6:3d:1a:c9:98:12:bb:ad:ea:1d:ee:3d:0f:e8:31:3b:50:
         bc:c7:ac:4a:cc:9d:83:ac:fc:2f:23:ff:10:3c:ef:99:1b:e0:
         5f:36:bd:6b:1f:f5:5a:12:9e:0f:f6:27:f2:0a:94:cc:89:67:
         90:83:ab:2a:d2:6b:3a:26:db:5f:1e:ad:f4:bf:e1:e0:21:3c:
         4c:d4:af:88:1c:ad:52:e1:c0:02:54:50:c7:2a:bd:7a:45:04:
         a5:14:9c:c4:96:1d:7f:f0:aa:28:ed:18:f1:22:89:de:29:1a:
         56:fe:59:50:f0:a4:b5:a0:8d:76:0c:6d:ec:b4:8d:3d:f4:73:
         5e:7c:61:0d:6a:7e:ec:55:39:6d:74:43:c6:84:f5:21:ae:0b:
         94:fd:8f:07:99:35:5a:d8:14:ec:5c:73:88:6e:ac:75:03:d2:
         73:21:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:51 2026 by rpki-client