This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134312e302f32342d3234203d3e203237363639.roa
File:                     3230302e3130382e3134312e302f32342d3234203d3e203237363639.roa (raw, json)
Hash identifier:          dq5vITuKR8dE3hy8PKwHPoZB2QWiGFLaObuuNPAjwz0=
Subject key identifier:   D7:B3:C1:AE:08:4B:78:D7:7A:B3:95:2E:3C:9B:DD:05:DD:6B:53:55
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       16663F43DF99896AE82BBB99D2C2B0FDD65105BD
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134312e302f32342d3234203d3e203237363639.roa
Signing time:             Tue 06 Jan 2026 19:46:59 +0000
ROA not before:           Tue 06 Jan 2026 19:41:59 +0000
ROA not after:            Tue 05 Jan 2027 19:46:59 +0000
asID:                     27669
IP address blocks:        200.108.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:66:3f:43:df:99:89:6a:e8:2b:bb:99:d2:c2:b0:fd:d6:51:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Jan  6 19:41:59 2026 GMT
            Not After : Jan  5 19:46:59 2027 GMT
        Subject: CN=D7B3C1AE084B78D77AB3952E3C9BDD05DD6B5355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:21:9e:4f:42:0b:e7:6c:38:80:dd:57:58:
                    74:7e:8f:1a:72:f8:b5:db:be:fd:00:51:1d:b8:aa:
                    65:3c:6d:1e:f9:91:56:c8:11:1f:fb:8d:0c:a6:68:
                    e8:5a:6f:c0:2a:bd:e0:76:07:95:ea:4e:4f:7b:18:
                    a2:56:d2:5d:27:fb:f6:ab:86:2f:b6:06:6c:8a:c0:
                    2b:31:d4:15:d0:d0:67:30:a3:c5:65:cd:ce:e8:4e:
                    aa:31:a2:af:68:5a:64:b0:39:40:9e:98:7c:52:95:
                    c4:99:0d:19:a9:ad:49:05:c4:b9:4a:f9:a3:6d:00:
                    d7:d8:80:df:c7:5e:66:db:24:42:fc:54:f9:75:6d:
                    36:78:fb:12:6a:ba:8d:5d:f7:82:63:0a:fd:a5:21:
                    ad:c9:94:ef:74:c1:5a:9e:81:ef:8c:fe:3c:5a:e8:
                    c5:f1:74:f4:33:aa:f3:3f:56:ce:ec:62:e0:54:62:
                    b7:0b:65:8d:f6:3d:63:5b:1d:c6:49:b8:87:fd:a8:
                    be:41:b6:a4:70:bc:34:bd:8f:34:2a:ea:5e:da:23:
                    87:60:b8:be:37:16:11:e3:7a:3b:c8:b4:f4:b5:9d:
                    96:80:a6:8d:4e:f2:67:c5:55:dc:1d:0e:26:e5:c1:
                    85:8d:eb:af:04:5f:7f:9c:db:36:34:0b:ed:6a:9c:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B3:C1:AE:08:4B:78:D7:7A:B3:95:2E:3C:9B:DD:05:DD:6B:53:55
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134312e302f32342d3234203d3e203237363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:37:2b:bc:ae:fb:2b:6c:4f:41:27:f9:3c:29:16:fa:69:
         91:be:37:3e:c1:33:19:c3:d9:61:ee:3f:44:86:72:36:81:06:
         56:de:fa:2e:db:de:a6:25:3e:f1:f6:42:d0:26:06:14:ab:5e:
         b5:f3:51:44:a6:70:5f:4a:32:2b:b4:5b:c6:26:8c:60:e1:e6:
         fe:8b:77:ea:c3:ad:a8:76:fd:6c:9d:3d:50:62:36:7b:d0:96:
         ca:76:2b:0e:84:fc:fe:78:d1:61:17:66:ad:8e:21:69:8a:d9:
         10:c8:98:d8:94:8c:3c:68:8f:b5:42:94:f2:6c:3a:2e:5b:87:
         de:20:dc:44:3b:bb:53:63:2e:dd:37:5d:23:21:e9:c6:0c:20:
         6e:95:b3:84:ea:d0:e9:9e:12:06:ea:56:0c:d6:7c:60:22:67:
         62:71:24:3f:92:cb:a3:5b:54:10:6c:21:5f:26:5e:1d:43:9c:
         2b:7b:22:81:a4:2e:a8:df:96:6a:e9:c2:e1:e5:3f:4f:fc:b3:
         32:6e:d9:b1:86:68:ca:d7:b4:ce:90:ce:f9:a9:3f:d9:63:74:
         3b:dd:c4:a3:be:7c:42:21:42:d5:00:9d:c0:06:9f:f8:0e:47:
         75:a5:b4:62:ba:82:be:bd:11:0b:a9:44:22:7d:27:0e:00:04:
         dc:2a:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:38 2026 by rpki-client