This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e20323037303336.roa
File:                     3230302e312e3135342e302f32342d3234203d3e20323037303336.roa (raw, json)
Hash identifier:          xntcdrh2hgtQ+QrGkckdv7qnMXn+w8SOUvKF32FI0GY=
Subject key identifier:   67:F3:D0:74:E9:65:2B:A2:0A:EC:9C:55:66:36:78:E5:79:64:02:19
Certificate issuer:       /CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
Certificate serial:       18B521AA3C464CBDD8785DB6321CDDA4857C85CE
Authority key identifier: D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e20323037303336.roa
Signing time:             Tue 06 Jan 2026 19:18:31 +0000
ROA not before:           Tue 06 Jan 2026 19:13:31 +0000
ROA not after:            Tue 05 Jan 2027 19:18:31 +0000
asID:                     207036
IP address blocks:        200.1.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:21:aa:3c:46:4c:bd:d8:78:5d:b6:32:1c:dd:a4:85:7c:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
        Validity
            Not Before: Jan  6 19:13:31 2026 GMT
            Not After : Jan  5 19:18:31 2027 GMT
        Subject: CN=67F3D074E9652BA20AEC9C55663678E579640219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:f7:3a:ad:85:3b:d5:2a:55:c4:2a:65:62:
                    a6:66:c7:e0:b8:4c:aa:ff:65:51:d9:65:93:5b:1c:
                    bf:8e:43:46:73:40:c9:c7:54:47:e6:70:94:30:be:
                    71:5f:c6:59:f4:2e:2e:35:1a:f7:85:14:b2:e9:22:
                    c9:fa:7b:21:e2:2c:80:55:59:47:eb:f5:1f:59:74:
                    9b:28:59:e1:9c:fb:5c:3c:d3:4d:bb:cb:73:d1:11:
                    52:ea:4f:a0:6d:58:d5:dd:6a:d9:0f:65:f6:9b:cd:
                    90:68:78:06:eb:66:72:f6:60:0d:ba:c1:fb:43:1a:
                    5b:95:c8:c3:d9:81:9e:19:03:f1:99:49:35:1e:93:
                    b4:48:f2:36:33:dc:f7:74:d6:80:d4:c4:e8:85:b9:
                    9c:ef:b8:65:20:a7:49:6a:75:6a:b6:70:dd:3e:67:
                    39:9e:21:00:77:13:b4:df:fe:f6:57:bf:95:d0:ac:
                    71:7f:53:ec:83:6c:8e:9b:bc:54:ce:b0:1b:34:a6:
                    f4:31:cf:65:29:f7:92:20:26:93:e6:78:da:b9:fa:
                    40:1f:ac:4a:d4:22:11:bd:46:b3:8a:a2:27:85:2b:
                    de:82:06:52:2a:0c:ef:a3:98:3f:90:52:d9:00:cc:
                    ff:d8:17:9c:45:b6:f2:32:f6:b0:61:2e:c1:86:68:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:D0:74:E9:65:2B:A2:0A:EC:9C:55:66:36:78:E5:79:64:02:19
            X509v3 Authority Key Identifier:
                keyid:D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e20323037303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:de:5c:b2:74:fc:0d:46:eb:f0:ed:92:e4:5b:cb:a5:ae:
         44:b9:7e:71:f9:ea:03:3b:12:62:15:f6:ee:dd:61:0a:e9:e3:
         86:81:8c:02:ab:a7:ca:99:6b:e0:6a:cf:79:6a:a3:55:1d:73:
         29:2d:ef:70:2c:3c:c1:97:e8:c9:dc:03:06:59:30:ee:7a:58:
         37:9b:f5:38:dd:9b:08:ee:f3:c9:f7:3c:19:77:2e:f0:2f:be:
         18:db:ae:f6:c8:73:b0:56:d6:d8:14:99:28:6c:d5:43:cc:13:
         5c:0d:b2:ef:aa:2f:d4:eb:d6:61:89:3a:42:cd:16:3b:8e:90:
         bc:da:e6:0d:3a:82:25:8b:69:40:98:bb:e0:ab:5e:c4:0c:23:
         91:83:6b:49:ee:db:18:83:1f:d8:e8:c7:be:64:97:db:b1:83:
         59:01:0f:b0:0c:ce:3b:cd:50:c5:07:77:03:8b:e7:02:ec:8e:
         7e:7e:ab:c0:38:af:fe:06:0f:67:0e:68:49:16:96:8a:63:ed:
         75:4d:3f:e3:37:b8:a1:fb:8c:1c:72:75:2b:cb:75:cd:6f:26:
         48:33:bc:cf:7c:5c:d9:6f:84:78:29:84:fe:32:88:cf:d4:43:
         ea:2b:7e:cd:ab:a0:87:a3:58:b6:52:a6:43:f2:92:18:e7:72:
         92:d5:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:41 2026 by rpki-client