This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34352e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e34352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          MrJFgHeM0gGwTw7DWIbIj+gOndysse6EGq39QlRbstg=
Subject key identifier:   A2:31:89:1D:2B:D6:DB:26:75:4C:7E:30:D2:BE:62:F3:AF:0A:21:02
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       23839A013113ED07A696106FFDE45345C980B055
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:47 +0000
ROA not before:           Tue 06 Jan 2026 19:19:47 +0000
ROA not after:            Tue 05 Jan 2027 19:24:47 +0000
asID:                     7418
IP address blocks:        200.29.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:83:9a:01:31:13:ed:07:a6:96:10:6f:fd:e4:53:45:c9:80:b0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:47 2026 GMT
            Not After : Jan  5 19:24:47 2027 GMT
        Subject: CN=A231891D2BD6DB26754C7E30D2BE62F3AF0A2102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:95:d4:1e:00:52:c8:b8:67:cb:4c:16:44:
                    1c:11:18:93:91:2d:80:5c:0c:6d:6c:4e:aa:88:2e:
                    b7:40:4f:ed:10:6b:ff:8f:b2:37:10:d4:14:ab:c8:
                    4e:5f:90:14:f4:10:cb:12:9a:87:d5:ed:36:89:94:
                    37:c1:41:c2:75:83:e1:50:59:12:ad:35:5a:f2:fa:
                    92:6e:b3:c6:16:03:a6:75:54:c7:1b:49:ba:f3:9a:
                    c4:15:77:b1:f0:90:f0:bb:cb:88:45:47:39:bf:8a:
                    b1:a1:f8:ee:e0:91:6b:b3:14:ca:3b:65:fa:de:9c:
                    47:4f:29:08:1b:9c:3a:32:52:01:b2:b6:fd:73:ec:
                    9c:c3:52:50:fb:9d:29:e2:f1:dc:30:41:50:1e:8c:
                    6f:55:65:b5:f2:31:b1:17:2c:77:fb:b8:75:65:6e:
                    85:32:36:7f:53:af:62:6e:a4:57:b4:0a:c8:6e:88:
                    28:a4:52:52:76:a6:05:8b:29:25:c5:ce:46:17:9f:
                    0c:b4:24:2f:ca:3a:a6:d1:1c:35:fc:64:47:11:0b:
                    c4:81:ca:2f:14:e7:85:83:a7:5c:6a:e8:59:52:87:
                    79:25:ea:79:58:8d:17:60:14:4d:58:71:91:90:19:
                    46:e8:04:73:0c:a3:6a:5d:d9:4a:75:8e:1b:b1:53:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:31:89:1D:2B:D6:DB:26:75:4C:7E:30:D2:BE:62:F3:AF:0A:21:02
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:d9:c5:ce:18:11:7a:58:87:af:2f:90:56:22:08:af:f3:
         8f:a6:43:0d:04:5d:13:3d:0a:12:5a:b8:e6:d0:a2:5b:50:b6:
         4a:1e:5b:dc:80:3a:2b:9e:3e:be:ff:c4:23:3e:e9:29:aa:42:
         fa:ed:4c:dd:15:3d:cc:27:72:0d:68:35:99:a2:75:81:41:34:
         cf:bf:ff:f5:36:ab:de:9a:60:cc:0c:25:f1:64:42:99:c4:f4:
         d4:b1:b5:97:18:4f:cb:3c:a8:98:d2:93:1d:25:93:5f:0c:72:
         ca:ca:bd:09:89:20:39:cd:50:39:ac:3a:56:12:f8:39:80:b3:
         00:77:eb:4b:91:fc:a4:b7:41:54:99:b1:24:2a:1e:8c:62:b3:
         c6:b5:0d:ab:66:80:74:86:56:40:c0:50:d5:76:8d:8f:f1:77:
         2c:b8:df:ba:66:55:6d:fc:f4:95:e1:12:ff:70:91:3c:fb:9d:
         64:21:68:3b:b5:ed:ae:6c:e3:13:e1:ca:d1:bb:83:0f:a2:0a:
         6f:51:c5:cc:24:30:5f:77:73:09:f6:a1:81:13:93:34:ed:b6:
         c2:e2:7e:f6:db:de:c1:e3:6c:a2:db:a9:db:21:64:61:e5:8d:
         cc:9c:97:ed:40:fd:99:56:a6:37:ce:c3:20:79:a3:bb:ea:36:
         16:63:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:59 2026 by rpki-client