This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3230382e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          DAwLch0Ll80Ek0dkOLrpba7DYtSRv5cCqnMNKdZ9J0Y=
Subject key identifier:   5C:5E:9B:95:5A:16:6D:B7:EE:9E:77:34:87:A1:AE:73:4E:2E:05:80
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4E22DA335A120F44DBB3CDD2B0460BB8D8136C23
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:46 +0000
ROA not before:           Tue 06 Jan 2026 19:19:46 +0000
ROA not after:            Tue 05 Jan 2027 19:24:46 +0000
asID:                     7418
IP address blocks:        200.90.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:22:da:33:5a:12:0f:44:db:b3:cd:d2:b0:46:0b:b8:d8:13:6c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:46 2026 GMT
            Not After : Jan  5 19:24:46 2027 GMT
        Subject: CN=5C5E9B955A166DB7EE9E773487A1AE734E2E0580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:eb:d8:bd:48:a0:31:cc:cc:26:34:ef:26:
                    b9:97:8d:a1:7d:96:26:a0:30:f2:97:a4:9c:86:83:
                    d7:be:43:bc:d0:a4:57:a4:2b:3c:2c:24:55:55:18:
                    c4:55:45:f7:48:9c:6a:18:f1:d9:7a:09:cb:52:4a:
                    2f:8e:7d:e8:99:b7:d2:63:6d:20:1c:16:ef:9b:22:
                    c1:c0:f4:c6:7c:ad:cd:4b:b2:53:62:61:c7:97:5e:
                    e6:90:b0:a5:a7:f1:8f:db:e4:bb:6f:20:ef:e3:37:
                    70:18:95:2f:7b:67:4a:01:ea:cf:73:32:6e:43:57:
                    61:b3:71:6c:e1:d1:58:3b:f3:7c:63:9b:df:f5:d1:
                    96:2b:c0:3d:bd:33:10:6a:9a:03:05:c0:2e:06:f0:
                    d0:ad:1e:1f:32:f2:79:48:60:e3:43:d8:55:e2:ae:
                    07:ab:f1:93:01:f2:e6:53:60:46:63:da:35:00:76:
                    55:af:02:c4:4d:ff:9a:89:d2:e9:22:8e:af:0d:a5:
                    ee:bb:82:b0:09:63:84:5f:db:33:0e:91:a1:43:98:
                    40:23:6e:29:21:83:e6:bd:1d:72:3b:f3:f7:f6:28:
                    0f:5f:67:03:91:8a:2a:e8:12:1d:af:ac:a0:3a:1c:
                    e8:e0:f3:7a:5e:e9:4c:bd:9d:82:d5:dc:fa:e2:a9:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5E:9B:95:5A:16:6D:B7:EE:9E:77:34:87:A1:AE:73:4E:2E:05:80
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:8d:a9:d8:7a:5d:5e:e0:3c:90:9b:aa:2e:d1:27:d7:53:
         80:b5:96:98:87:7a:cb:f1:19:8f:81:fa:65:c8:b0:d9:6a:aa:
         9b:14:a0:7a:f4:5a:af:6d:f3:35:25:a0:cd:18:ed:62:f5:2d:
         4c:be:f7:60:f1:38:19:5d:2c:8e:f9:b2:b5:63:e8:c4:cc:63:
         a2:af:42:7f:97:4e:97:3e:c6:a0:6f:30:54:bc:51:96:d7:fc:
         ea:ba:19:50:b7:4e:cc:05:8f:00:f3:b1:4c:22:a9:2d:d2:2a:
         eb:bf:7b:6e:24:46:3b:9c:87:39:a9:b4:4f:77:56:e4:19:70:
         7e:24:5f:78:6c:04:36:f0:e3:d2:60:2f:61:3b:80:1c:d5:22:
         64:07:1e:20:fe:ca:c7:9c:15:a8:44:fd:a8:32:0f:48:50:a5:
         4c:b9:65:f0:7d:b5:c5:8e:ba:68:56:7b:8c:ed:89:07:ce:aa:
         60:52:7c:b1:80:bb:3c:51:31:4e:df:f9:ff:35:ba:35:18:84:
         18:1c:eb:7f:70:ca:98:36:76:5b:20:dc:4a:cf:90:26:f6:0d:
         d3:52:e0:7c:4c:4d:c9:77:fb:35:1f:97:f6:51:56:b5:3d:f1:
         95:14:b5:76:af:95:51:9b:1e:9b:3f:be:ed:03:27:52:56:9f:
         90:a0:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:24 2026 by rpki-client