This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa
File:                     3230302e372e3134342e302f32322d3234203d3e203532333937.roa (raw, json)
Hash identifier:          FjVnyAiayWw91p1nX+BtJHd7IVaMytOTaQvI4r9H3qE=
Subject key identifier:   0D:3B:29:BA:40:13:38:35:E8:C4:29:6C:10:1A:18:7D:29:21:EB:F8
Certificate issuer:       /CN=BF24EBE59688BF1635B9AB14680D9B8088D99CB4
Certificate serial:       62652E8EFB8E5E35CAE0AE49078668D5A14BD6C4
Authority key identifier: BF:24:EB:E5:96:88:BF:16:35:B9:AB:14:68:0D:9B:80:88:D9:9C:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa
Signing time:             Tue 06 Jan 2026 19:14:37 +0000
ROA not before:           Tue 06 Jan 2026 19:09:37 +0000
ROA not after:            Tue 05 Jan 2027 19:14:37 +0000
asID:                     52397
IP address blocks:        200.7.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:2e:8e:fb:8e:5e:35:ca:e0:ae:49:07:86:68:d5:a1:4b:d6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF24EBE59688BF1635B9AB14680D9B8088D99CB4
        Validity
            Not Before: Jan  6 19:09:37 2026 GMT
            Not After : Jan  5 19:14:37 2027 GMT
        Subject: CN=0D3B29BA40133835E8C4296C101A187D2921EBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:5e:cb:98:21:8e:a4:64:e4:96:2b:96:94:
                    0e:94:54:95:88:99:7a:7c:c7:10:8f:41:c9:64:3a:
                    1d:16:df:cf:58:88:a7:f9:69:64:c1:ad:84:30:80:
                    6c:96:2e:49:b5:51:ef:12:c2:5d:be:98:e5:71:c6:
                    03:53:7e:f4:61:4c:c1:87:d0:56:3f:27:e6:1d:c2:
                    21:b2:f6:c2:6b:54:58:23:62:1a:95:a9:31:a7:eb:
                    43:4a:f2:06:95:0d:a0:ab:36:e4:31:a9:33:8a:17:
                    d8:af:35:84:da:59:44:0f:04:8a:3c:0e:1a:56:3a:
                    84:ba:fd:d0:9a:cd:cb:d7:77:aa:1f:65:23:5b:80:
                    d1:30:14:0c:42:51:49:44:7c:c9:79:b6:6f:6c:a1:
                    af:13:b4:2b:46:1c:eb:e7:fc:78:6d:e1:87:75:b9:
                    52:e1:c2:87:ca:a6:b8:91:ae:fd:33:4f:e0:a8:98:
                    31:5c:78:c9:2a:d1:a2:11:9d:22:3f:55:2f:40:dd:
                    5c:e6:08:58:da:b9:5e:e9:6b:cd:0f:95:0c:2c:f1:
                    df:f2:b9:cb:2f:45:2e:4c:01:d4:57:6a:3c:f5:7e:
                    51:b1:86:99:6b:d7:46:3c:c9:8c:a6:de:4f:bd:39:
                    52:ba:ef:7f:1e:90:81:ff:ce:e9:de:30:49:e7:89:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:29:BA:40:13:38:35:E8:C4:29:6C:10:1A:18:7D:29:21:EB:F8
            X509v3 Authority Key Identifier:
                keyid:BF:24:EB:E5:96:88:BF:16:35:B9:AB:14:68:0D:9B:80:88:D9:9C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:e4:0d:37:8a:25:87:a7:02:f2:2b:9c:0a:52:b0:5e:14:
         9c:d8:61:dd:63:55:01:0b:54:13:e3:3d:9b:2d:e8:7f:4b:cc:
         ef:91:3f:a6:21:f8:92:b7:2d:49:1c:63:d9:2f:18:6b:2f:62:
         dc:34:8c:5f:7c:b9:d6:ea:f3:b7:29:55:53:eb:d2:11:05:dc:
         c4:f7:f9:85:81:82:85:a8:9e:07:0d:a6:47:3d:2e:8d:7e:a3:
         dc:7b:82:2a:63:46:c8:43:83:0d:e8:b8:7b:a2:8b:15:ff:3a:
         54:eb:b7:35:7c:e5:e4:ad:4c:ae:b7:0e:68:f5:66:5c:9b:91:
         c9:0e:2d:bd:93:cc:81:96:e3:32:84:b1:fe:e1:0e:42:78:de:
         14:c2:48:10:5c:0c:2d:85:7a:d5:20:6d:66:f9:6d:07:c0:21:
         2f:ad:04:f1:20:ba:36:e7:00:a8:4e:9f:53:57:30:c1:63:08:
         f4:00:8b:df:85:e5:fd:49:36:36:2c:ce:36:ff:7e:03:78:33:
         81:e5:33:f7:38:82:75:89:3c:1f:48:ac:30:32:c6:ff:5c:af:
         8a:93:fe:ad:26:71:56:71:d8:66:ac:c0:77:d9:12:98:76:a6:
         a7:3e:dc:f5:93:e5:ef:7d:bc:b2:cd:8d:e7:fe:07:1c:85:51:
         fc:19:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:19:47 2026 by rpki-client