This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa
File:                     3230302e33332e32362e302f32332d3234203d3e203238353031.roa (raw, json)
Hash identifier:          sY1bJy0ofhvKIfnJ07nnNCop3RCl/M2KSWTo/5X3NIY=
Subject key identifier:   3B:6B:1F:B4:C6:59:A8:C7:73:A6:0D:04:3C:C9:08:E4:86:41:3E:71
Certificate issuer:       /CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
Certificate serial:       2656B6B2D1C1B0D83AC0655D93A6E4217ADBE4F0
Authority key identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa
Signing time:             Tue 06 Jan 2026 19:09:49 +0000
ROA not before:           Tue 06 Jan 2026 19:04:49 +0000
ROA not after:            Tue 05 Jan 2027 19:09:49 +0000
asID:                     28501
IP address blocks:        200.33.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:56:b6:b2:d1:c1:b0:d8:3a:c0:65:5d:93:a6:e4:21:7a:db:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
        Validity
            Not Before: Jan  6 19:04:49 2026 GMT
            Not After : Jan  5 19:09:49 2027 GMT
        Subject: CN=3B6B1FB4C659A8C773A60D043CC908E486413E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:fe:40:3a:1b:79:ce:db:72:c2:92:fb:66:
                    c0:a0:cf:bd:91:1b:16:b3:8b:e6:1e:c8:de:ac:cd:
                    dd:c7:81:ce:6f:c8:14:b1:7a:ac:ab:d5:6d:01:07:
                    24:65:bc:f2:e4:49:35:f9:c2:aa:cb:a8:c8:a0:6c:
                    cb:f8:d9:4c:be:f3:4e:25:25:b1:91:db:8c:3a:1d:
                    41:95:16:fb:7b:00:1b:b8:42:68:6d:44:8d:53:0f:
                    12:7f:b3:9d:15:0a:a7:2e:5b:9b:88:a1:17:da:0d:
                    41:db:09:df:dc:92:97:ad:f3:15:7e:47:e0:51:95:
                    95:02:4d:43:13:46:21:9d:43:2f:e2:d7:da:52:f7:
                    7b:e3:89:f0:4c:70:e5:b1:8d:5a:6d:dc:5c:0c:cd:
                    6f:fa:47:7b:a6:34:2b:23:6e:78:4c:65:a8:bd:76:
                    d3:cd:43:6d:99:3b:12:c0:4d:f7:11:71:00:0a:3f:
                    7b:d2:11:60:8d:c7:06:a4:28:db:27:f3:01:9c:c9:
                    80:f9:c4:a2:4a:d2:3f:b2:e4:ab:7a:03:c5:41:27:
                    ce:bc:e9:68:83:83:e2:1d:e3:03:ce:41:85:31:12:
                    d0:1e:74:0c:b1:14:cb:d9:3d:af:e5:5f:81:2d:10:
                    ec:f1:f5:9a:fa:08:58:f9:33:62:e8:be:7b:e1:f7:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6B:1F:B4:C6:59:A8:C7:73:A6:0D:04:3C:C9:08:E4:86:41:3E:71
            X509v3 Authority Key Identifier:
                keyid:7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:46:a6:bb:81:c3:4c:ec:03:31:7c:94:51:92:86:a3:8d:24:
         30:3f:e4:d8:0b:6b:7d:31:c7:a8:b8:00:d6:19:21:14:69:e6:
         58:7a:1b:66:7c:01:83:0d:c3:99:e9:20:bb:0b:62:6a:c1:2a:
         23:50:ec:8e:51:06:b0:a9:48:09:5c:c2:23:2e:0a:d1:05:ff:
         c9:41:93:80:be:23:2c:57:76:54:46:f9:3b:0b:ca:78:2b:d2:
         59:c1:c5:88:eb:e1:b8:52:e0:55:9d:29:f0:7d:07:78:b6:f4:
         ee:4d:90:42:77:b7:c1:cb:69:bd:72:86:f8:ba:6e:bf:b6:c0:
         de:9a:8e:0e:49:8a:f6:8c:76:c5:69:ed:fd:ce:51:23:49:55:
         ab:ab:3d:d0:0b:3a:3a:c5:02:21:aa:ca:ab:91:6a:2b:32:88:
         52:a2:0f:b1:76:5c:d3:27:3f:d4:92:b5:8c:42:a0:a6:76:66:
         91:99:ff:bb:3f:2e:1f:10:5e:04:9c:4c:eb:e9:0a:aa:5d:f4:
         4c:7c:9b:34:35:0a:98:1e:15:79:55:f9:bd:75:aa:95:2b:08:
         c8:93:fb:79:ab:d7:db:9c:5c:1a:32:6b:bf:5c:77:8e:58:db:
         fc:60:1c:23:df:8a:08:8f:37:3a:c8:66:b0:a8:cd:98:17:79:
         07:ff:a5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:14:51 2026 by rpki-client