This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33392e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          FnmXoFvoIUyzOJwx7Ml9eI8L2U1LzVQWO38NXdS5fo4=
Subject key identifier:   1A:AF:56:74:57:B9:2C:A4:94:BC:DE:74:D7:75:CA:9D:F2:3C:DF:9E
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2CC63DDD626A46DF65730F760E21E45B1254D3D5
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:57 +0000
ROA not before:           Tue 06 Jan 2026 19:19:57 +0000
ROA not after:            Tue 05 Jan 2027 19:24:57 +0000
asID:                     7418
IP address blocks:        200.29.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:3d:dd:62:6a:46:df:65:73:0f:76:0e:21:e4:5b:12:54:d3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:57 2026 GMT
            Not After : Jan  5 19:24:57 2027 GMT
        Subject: CN=1AAF567457B92CA494BCDE74D775CA9DF23CDF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:67:2a:ee:db:ad:f3:14:0f:af:3e:fe:50:
                    d2:cf:d0:c9:7a:85:4a:c9:f8:24:b5:ab:da:23:7f:
                    02:03:8e:60:e5:11:42:cc:f1:f2:fb:19:93:9e:08:
                    d4:a1:f6:81:ca:92:62:12:a7:0f:c6:dc:52:c2:ee:
                    55:65:80:ef:4f:7b:66:c7:30:41:09:a5:97:66:20:
                    1c:d9:93:63:7f:00:54:56:f9:7e:ae:f3:50:8d:f5:
                    2a:96:87:ef:e7:c1:20:91:2f:dd:c4:bc:90:28:f3:
                    a1:fb:a8:b4:41:e9:42:ba:63:05:ac:f5:19:d1:2f:
                    63:05:61:b6:12:a0:15:21:74:69:14:1b:55:6c:db:
                    91:27:d2:c1:47:24:6d:cd:fd:dc:c8:d9:83:f8:9a:
                    06:33:f3:18:28:29:6e:40:35:b7:90:87:c5:5a:4e:
                    4c:e7:43:45:df:21:8f:fa:38:4a:bc:10:54:8e:81:
                    9f:25:47:72:49:45:32:c1:7f:34:9c:a3:a5:93:b1:
                    77:53:63:99:03:7a:72:49:82:ba:74:c0:f5:25:d0:
                    a0:79:1f:7f:5f:55:e8:79:90:f9:71:d9:90:7f:46:
                    7a:27:98:5b:e5:0d:77:0c:34:2c:14:d6:02:ad:ec:
                    eb:e5:c2:fc:c6:08:95:fb:76:6d:3d:ac:4c:72:22:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:56:74:57:B9:2C:A4:94:BC:DE:74:D7:75:CA:9D:F2:3C:DF:9E
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:2d:69:b0:de:40:f7:db:a1:7e:10:41:56:46:c2:fc:f1:
         9f:d3:d9:17:d9:de:7b:a1:d0:23:9b:68:b1:8d:1c:71:40:1c:
         14:b0:60:e8:5b:f2:14:99:fd:a1:74:48:66:e8:34:46:35:57:
         a3:92:82:12:70:62:77:a6:e8:85:91:65:16:19:50:3f:a0:1f:
         ba:55:6f:c6:e7:fc:f6:a8:23:20:53:25:e6:2b:d2:28:1f:65:
         5f:a6:d6:34:b5:f2:d2:36:61:b5:b2:28:e1:2b:68:41:f1:33:
         89:19:94:5e:96:c3:09:fd:b2:47:3a:96:46:c2:5f:d5:dd:5f:
         91:06:bc:84:94:0f:4b:b4:c3:bb:8c:cd:03:b2:f0:a1:c7:c3:
         8b:38:eb:e5:85:38:5e:ff:e5:21:35:21:3c:ae:bf:d0:c4:cb:
         c6:e3:3c:31:cd:78:f8:89:01:97:59:33:d1:d9:dc:b1:f4:4c:
         10:06:40:7a:98:57:7b:bc:05:28:25:61:4d:38:cd:1a:a9:13:
         92:08:4c:fc:f9:3f:3b:24:6e:98:46:d5:36:a2:e0:31:f9:63:
         d9:c9:d9:f0:e5:51:21:b0:5b:c8:8d:f3:f3:32:26:b3:74:fe:
         1b:f4:a7:a5:d3:07:ae:c7:97:25:1a:28:9a:22:3b:a4:08:7b:
         60:35:01:f3
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIULMY93WJqRt9lcw92DiHkWxJU09UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNjAxMDYxOTE5NTdaFw0yNzAxMDUxOTI0NTdaMDMxMTAvBgNV
BAMTKDFBQUY1Njc0NTdCOTJDQTQ5NEJDREU3NEQ3NzVDQTlERjIzQ0RGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0mcq7tut8xQPrz7+UNLP0Ml6
hUrJ+CS1q9ojfwIDjmDlEULM8fL7GZOeCNSh9oHKkmISpw/G3FLC7lVlgO9Pe2bH
MEEJpZdmIBzZk2N/AFRW+X6u81CN9SqWh+/nwSCRL93EvJAo86H7qLRB6UK6YwWs
9RnRL2MFYbYSoBUhdGkUG1Vs25En0sFHJG3N/dzI2YP4mgYz8xgoKW5ANbeQh8Va
TkznQ0XfIY/6OEq8EFSOgZ8lR3JJRTLBfzSco6WTsXdTY5kDenJJgrp0wPUl0KB5
H39fVeh5kPlx2ZB/RnonmFvlDXcMNCwU1gKt7OvlwvzGCJX7dm09rExyIs7fAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUGq9WdFe5LKSUvN5013XKnfI8354wHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzOTJlMzMzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0nMA0GCSqG
SIb3DQEBCwUAA4IBAQB9Ci1psN5A99uhfhBBVkbC/PGf09kX2d57odAjm2ixjRxx
QBwUsGDoW/IUmf2hdEhm6DRGNVejkoIScGJ3puiFkWUWGVA/oB+6VW/G5/z2qCMg
UyXmK9IoH2VfptY0tfLSNmG1sijhK2hB8TOJGZRelsMJ/bJHOpZGwl/V3V+RBryE
lA9LtMO7jM0DsvChx8OLOOvlhThe/+UhNSE8rr/QxMvG4zwxzXj4iQGXWTPR2dyx
9EwQBkB6mFd7vAUoJWFNOM0aqROSCEz8+T87JG6YRtU2ouAx+WPZydnw5VEhsFvI
jfPzMiazdP4b9Kel0weux5clGiiaIjukCHtgNQHz
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:40 2026 by rpki-client