This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3232203d3e20323633323438.roa
File:                     3230302e3139322e3233362e302f32322d3232203d3e20323633323438.roa (raw, json)
Hash identifier:          8943cvq/bSOvStEuhnhDcYwEru2raJG0/RjgWEIYzHk=
Subject key identifier:   FC:7E:40:E5:0F:58:E4:A0:D4:E2:7B:85:21:C9:FD:DA:5D:EE:60:D8
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       64369AE0184B9E9DAB6665B5152264C66B817839
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3232203d3e20323633323438.roa
Signing time:             Tue 06 Jan 2026 19:11:01 +0000
ROA not before:           Tue 06 Jan 2026 19:06:01 +0000
ROA not after:            Tue 05 Jan 2027 19:11:01 +0000
asID:                     263248
IP address blocks:        200.192.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 13:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:36:9a:e0:18:4b:9e:9d:ab:66:65:b5:15:22:64:c6:6b:81:78:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Jan  6 19:06:01 2026 GMT
            Not After : Jan  5 19:11:01 2027 GMT
        Subject: CN=FC7E40E50F58E4A0D4E27B8521C9FDDA5DEE60D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:6b:8b:63:5d:1d:c3:c7:b1:d3:70:75:1a:
                    83:3a:fe:9a:ed:98:65:1e:6f:6a:23:62:e0:e0:cf:
                    71:f7:90:b2:86:55:c6:cb:d8:ed:16:07:9c:fd:f0:
                    03:4d:df:28:6a:e4:7f:6c:c4:78:34:5f:41:f4:c5:
                    6a:f5:70:81:df:6f:9b:71:dc:a1:09:d7:fc:6b:e6:
                    d4:68:be:85:ab:08:c7:a0:05:d9:a3:9f:9a:7a:76:
                    58:49:42:6c:c6:ed:98:70:59:57:b6:41:01:7f:e2:
                    d5:5b:94:46:91:e8:52:90:e9:12:ab:67:8c:7a:e4:
                    00:8b:7d:ed:6c:2b:b5:5a:b3:59:3e:82:2d:65:cc:
                    5e:4d:78:1b:3e:a0:3c:e8:18:11:0c:37:3d:7f:d1:
                    f2:62:38:ed:c6:8c:25:75:c7:f8:47:38:2a:db:e3:
                    4d:3e:20:80:a6:15:f5:92:76:a9:2d:d1:18:c2:eb:
                    1a:dd:e9:8a:b5:51:6d:38:f7:7f:b6:6f:fc:14:81:
                    b9:1c:66:49:d2:bf:31:08:35:23:e5:47:17:41:43:
                    80:95:28:d7:47:f4:0f:17:2c:55:2d:47:a5:67:14:
                    93:0d:15:53:83:0c:10:97:38:34:69:61:ad:66:09:
                    1a:84:ff:99:af:f2:70:18:11:15:3f:fe:54:43:c4:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:40:E5:0F:58:E4:A0:D4:E2:7B:85:21:C9:FD:DA:5D:EE:60:D8
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3232203d3e20323633323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:84:87:80:aa:81:64:65:f2:7f:43:f9:a6:fb:63:fe:56:
         b1:ed:cd:40:c0:41:af:0e:f9:b6:e4:c1:13:76:5f:d3:df:0c:
         0d:f8:9a:b1:54:c6:e2:a0:24:8a:4d:61:8d:7e:3d:07:c2:a3:
         e2:6a:48:a8:d5:a7:20:46:cb:df:ac:40:e7:ce:88:a2:87:9a:
         3f:4c:b8:df:26:9d:47:76:e2:8a:d0:57:66:f9:78:98:3e:a9:
         95:71:59:9b:91:fe:ad:3e:2e:a9:da:9f:74:67:52:d3:5c:6c:
         f5:ff:df:9c:e1:d5:43:a6:34:6f:c5:13:aa:8b:16:e1:a1:d8:
         3a:da:92:e6:9c:f6:5d:09:7e:59:f8:b6:f8:64:a9:0f:96:05:
         ff:55:4e:44:7b:f5:c2:06:4b:78:62:62:95:6c:35:83:ec:fc:
         cc:02:85:e9:8a:b2:38:a5:14:4e:6d:1f:db:8a:57:dc:ba:e5:
         80:9b:62:e8:a5:85:94:1a:cd:76:f2:b1:0e:cf:82:48:be:25:
         b2:be:22:56:5f:c9:39:37:19:a2:be:3e:c7:fb:3b:2e:65:eb:
         b1:32:46:00:d4:4e:f7:14:d4:f2:d2:1b:eb:20:2c:4c:9c:3c:
         62:40:f4:9a:24:f0:90:fd:98:79:bf:c1:6d:4a:7a:59:8c:81:
         5a:45:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:42 2026 by rpki-client