This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa
File:                     3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa (raw, json)
Hash identifier:          RggXJN9HfUc9qCgLYUpAKkDLp9yi5PnKB/FcpJPrfGY=
Subject key identifier:   15:F2:15:2F:88:E4:67:BA:14:82:BB:1A:18:09:BA:CB:A1:06:B9:7A
Certificate issuer:       /CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
Certificate serial:       407BE90C2C80A6DDAF9DB2570D4256F98EB305BF
Authority key identifier: 25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa
Signing time:             Tue 06 Jan 2026 19:26:27 +0000
ROA not before:           Tue 06 Jan 2026 19:21:27 +0000
ROA not after:            Tue 05 Jan 2027 19:26:27 +0000
asID:                     264633
IP address blocks:        200.10.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7b:e9:0c:2c:80:a6:dd:af:9d:b2:57:0d:42:56:f9:8e:b3:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
        Validity
            Not Before: Jan  6 19:21:27 2026 GMT
            Not After : Jan  5 19:26:27 2027 GMT
        Subject: CN=15F2152F88E467BA1482BB1A1809BACBA106B97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:09:1e:53:77:7e:3a:62:1f:37:b0:a2:c0:
                    59:45:8f:12:82:90:e0:7c:35:19:a1:4d:82:4e:2d:
                    21:ec:41:d3:64:8d:01:06:6d:22:3a:57:fb:fd:d1:
                    54:0c:89:19:59:d5:51:8d:ba:98:08:70:c6:13:e0:
                    1a:9c:96:dd:8f:c7:c8:ea:92:a0:1a:61:59:66:f1:
                    24:d0:c7:30:e4:aa:37:da:93:8f:1d:a4:c1:fe:c4:
                    41:e2:5f:dc:73:15:59:e0:13:77:f1:5c:fb:8f:b7:
                    8c:b4:37:52:ee:c3:41:fe:e0:07:d2:b7:0c:e7:38:
                    ff:da:67:43:a8:f3:3f:73:b2:bb:a9:40:fa:b5:b8:
                    85:88:86:1b:63:e7:04:cd:02:d4:38:2c:16:ed:a9:
                    b3:07:44:80:47:38:13:9f:d2:ae:9d:20:aa:3b:f1:
                    73:84:13:a3:74:8b:e1:8b:0c:4b:96:ce:e6:c3:b6:
                    3f:52:42:51:8d:d1:41:6f:de:73:73:b2:37:d7:1e:
                    95:af:51:e8:36:47:20:0b:69:0d:fc:01:8f:ca:0e:
                    a7:a0:c1:4e:4a:67:04:88:a5:26:79:f4:4e:49:2c:
                    66:ba:88:fe:e3:d6:ca:55:f6:fc:16:3e:fd:9b:95:
                    06:30:3e:21:1e:93:0e:41:11:18:39:26:d7:50:24:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F2:15:2F:88:E4:67:BA:14:82:BB:1A:18:09:BA:CB:A1:06:B9:7A
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:cc:b5:ef:db:dd:41:41:6b:32:04:1b:01:99:77:e8:a0:
         8f:dd:2f:85:f1:94:1d:6f:04:e9:7e:de:36:ac:cf:43:aa:a9:
         97:29:aa:5b:1a:0f:5d:ff:f8:81:35:64:d0:bd:69:11:fe:f5:
         63:13:cf:87:5a:20:2b:91:cd:40:73:b3:ca:cc:6b:2f:46:6f:
         69:40:20:e9:4f:6a:71:97:dd:62:5c:3f:18:1c:5e:fe:0a:23:
         b6:02:e0:da:bb:f0:a3:2c:30:da:23:35:24:7e:56:bb:f4:8c:
         f5:a2:bd:1d:ff:ba:f2:3e:16:02:a9:b1:58:4a:b3:2b:55:a7:
         b2:1f:bf:05:82:8d:e8:6e:17:32:22:7f:db:84:a7:0d:58:9b:
         f0:41:0b:d0:ac:37:bb:62:b0:69:58:c3:40:37:66:6d:ce:9b:
         fb:69:7a:20:eb:1b:75:8e:55:1f:95:57:62:da:7d:0a:5d:64:
         2e:37:f8:4c:7f:25:00:fb:61:47:6e:43:b6:87:1e:99:52:c2:
         47:0b:d3:f2:7e:5b:9f:43:3e:0e:7d:77:52:d4:f2:4c:6a:ec:
         de:b0:29:ae:16:94:6d:d6:cd:06:f9:ec:c0:6a:5d:38:21:75:
         1d:32:1e:0a:b6:58:4b:fc:f1:04:ca:f6:db:86:7c:09:6d:1f:
         28:c2:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:50:28 2026 by rpki-client