This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa
File:                     3230302e35302e34322e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          /iSkdzBHI6CHrEvwJFJeBsXtAbRZfeF+MyNIJPHjf+E=
Subject key identifier:   A7:1C:93:06:B6:F8:8A:95:FC:0E:DD:86:1A:BC:F6:0A:FA:45:59:0A
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4DB3D98E60C5A30EDFE8F8E8BF304D193FF7E10D
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 19:24:43 +0000
ROA not before:           Tue 06 Jan 2026 19:19:43 +0000
ROA not after:            Tue 05 Jan 2027 19:24:43 +0000
asID:                     7004
IP address blocks:        200.50.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b3:d9:8e:60:c5:a3:0e:df:e8:f8:e8:bf:30:4d:19:3f:f7:e1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:43 2026 GMT
            Not After : Jan  5 19:24:43 2027 GMT
        Subject: CN=A71C9306B6F88A95FC0EDD861ABCF60AFA45590A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:08:c2:f0:05:7f:fa:0a:00:b2:2c:a3:20:
                    a4:4f:04:39:2f:49:8c:9b:b8:4c:c0:a3:91:23:74:
                    ed:bb:47:40:38:a9:ae:ea:ed:c2:5f:21:46:43:9a:
                    9c:6b:4f:e9:67:24:d1:63:4a:b5:c7:bf:07:b9:c6:
                    2e:1d:d4:8b:e6:d5:df:b5:b3:7a:5e:3a:94:98:5a:
                    0e:39:8c:27:fd:cc:89:b5:53:1b:b6:f0:af:a1:25:
                    bc:4a:18:3b:4a:de:49:03:73:86:28:ad:72:02:76:
                    15:b0:64:83:2f:f0:ef:06:1a:f7:17:f9:43:a1:79:
                    ea:22:22:f9:8b:4d:01:e9:00:1b:c2:09:05:3b:99:
                    b8:fd:c5:d3:3c:b2:b1:0a:8a:b0:f1:5f:e4:e2:5a:
                    4d:63:6d:ee:f9:9b:1c:95:ff:2d:92:7c:76:1c:aa:
                    93:a2:f9:ea:3e:3d:51:f3:6f:60:56:be:24:bb:2a:
                    0d:61:96:43:44:e7:47:1e:ea:b7:ec:b9:c4:7a:4b:
                    03:12:0d:f3:54:d4:6c:32:97:2c:57:fd:92:6b:5c:
                    5f:0f:20:08:5b:33:42:60:24:b2:45:a0:57:b9:8b:
                    63:a3:46:29:12:28:76:14:91:c5:49:da:d9:b1:33:
                    21:b2:a3:be:26:cf:ba:77:77:8a:5b:4d:f2:5f:b7:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:93:06:B6:F8:8A:95:FC:0E:DD:86:1A:BC:F6:0A:FA:45:59:0A
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:20:12:a7:8a:9c:36:55:33:72:89:c8:82:e9:2a:fe:42:f6:
         83:9d:91:5e:8c:35:5d:7a:91:13:80:3f:ad:61:26:c3:56:de:
         b6:38:6b:b8:d0:10:d2:3f:f9:6f:60:44:8f:b9:b1:9a:bf:85:
         0a:02:38:ad:38:82:03:0f:38:86:67:86:1a:be:2f:d6:18:a4:
         dc:17:d3:af:1d:23:f6:8d:01:00:3c:c4:3c:d7:84:fb:62:99:
         a0:bf:bb:5b:79:d1:f6:6d:54:4c:bb:0e:3a:a3:96:21:ff:b0:
         1e:75:3c:4d:80:28:77:1f:05:08:f2:ba:fe:9e:42:16:5d:59:
         4f:68:2f:34:52:56:7e:50:62:6c:68:43:24:b2:42:5f:53:cb:
         28:88:1c:fd:73:b7:66:f1:fa:43:9f:8c:c7:29:d7:ca:fe:46:
         88:21:3e:a4:08:7b:77:f2:a9:ed:4c:93:a0:ef:99:8a:0d:96:
         a3:52:af:80:92:85:2b:3d:b6:3b:95:f5:65:d5:cb:02:d5:21:
         e2:9b:93:0b:5c:c4:91:a6:a8:40:a5:bf:15:db:1d:a5:34:e4:
         4b:f1:e2:19:c9:54:cb:f3:a0:f1:2d:77:e4:3a:75:8f:8d:b6:
         93:02:a5:a9:70:47:bf:e0:0e:b8:bd:ef:19:09:21:30:e0:de:
         b6:99:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:37 2026 by rpki-client