This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa
File:                     3230302e33312e34362e302f32342d3234203d3e20323634383036.roa (raw, json)
Hash identifier:          MC4dPyWpX2z5k+rHqfjaRzz29m9+YAIcbNiiLJbA54Y=
Subject key identifier:   97:9D:4B:8E:4B:5A:D9:FE:75:47:F5:99:23:78:35:51:3D:CA:32:B0
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       42869DB8FAA97028C3B2369BC8F45CAF1591C4A5
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa
Signing time:             Tue 06 Jan 2026 20:54:23 +0000
ROA not before:           Tue 06 Jan 2026 20:49:23 +0000
ROA not after:            Tue 05 Jan 2027 20:54:23 +0000
asID:                     264806
IP address blocks:        200.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:9d:b8:fa:a9:70:28:c3:b2:36:9b:c8:f4:5c:af:15:91:c4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:23 2026 GMT
            Not After : Jan  5 20:54:23 2027 GMT
        Subject: CN=979D4B8E4B5AD9FE7547F599237835513DCA32B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:5b:ba:11:45:65:5f:70:69:f2:b5:a8:c8:
                    07:ac:be:5b:26:7b:d2:e0:99:6e:29:e5:30:0f:1a:
                    c5:f4:e8:3c:b6:f2:4b:bc:87:91:f5:26:52:a1:d2:
                    5b:f2:2a:da:ab:f5:87:67:fd:f5:d0:54:05:74:85:
                    33:fc:b9:2f:f6:03:bb:62:79:df:d3:f2:9c:fc:eb:
                    36:84:49:a4:bc:ac:b5:0c:73:3b:bc:73:69:91:95:
                    6f:e1:16:65:79:8f:94:11:f1:31:1d:ba:4d:03:c9:
                    df:e7:4c:ee:e8:4e:16:ce:19:e3:72:f2:d2:32:5e:
                    87:b4:52:24:7a:c5:eb:ac:51:0a:31:26:b9:00:d9:
                    97:19:55:8c:36:ba:3f:12:c2:b7:db:91:42:d7:0d:
                    ee:c5:90:7a:65:16:87:f5:af:49:76:51:2e:a6:34:
                    2d:18:d1:4c:f7:a1:5f:eb:9a:26:ee:05:f9:7d:c5:
                    7f:20:5d:23:86:fb:84:02:86:73:a9:63:8a:6b:19:
                    26:3e:0a:90:06:7f:13:f3:77:ec:0d:16:37:46:38:
                    90:bc:48:28:a3:ff:4b:28:d5:66:f5:05:01:cf:64:
                    1f:f4:27:9c:a7:76:86:56:56:8a:43:4b:3a:71:db:
                    67:98:c8:b2:0e:fb:80:2e:bd:48:6f:62:7d:bd:94:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:4B:8E:4B:5A:D9:FE:75:47:F5:99:23:78:35:51:3D:CA:32:B0
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:d1:cb:50:8a:44:62:dd:06:64:81:63:c5:d0:75:82:6a:
         19:c1:06:bf:98:1c:7f:ad:79:3e:4a:66:96:50:ee:3f:be:08:
         3a:ae:0b:69:d0:37:f0:d4:88:10:78:c8:39:45:34:6f:6a:55:
         59:b5:c3:30:d8:25:71:4e:68:a3:63:2a:ec:5f:54:59:e4:89:
         18:c4:d1:00:a8:f5:93:f0:d3:1a:b8:cb:47:e7:dd:67:51:09:
         54:ae:d1:a3:53:0a:da:c8:7f:f6:e5:a9:6d:bb:67:c0:fc:9e:
         cb:6b:1f:41:89:ae:83:ef:28:d1:76:db:14:59:b3:04:6d:44:
         76:4b:3f:6c:20:79:dd:60:88:5b:84:fe:09:cd:35:22:d8:d2:
         38:f2:1b:2c:57:b6:58:6f:2a:15:c7:89:94:d1:20:c0:cd:87:
         cf:56:11:ef:b8:69:b2:28:11:11:3a:bd:1f:5d:7b:c3:88:53:
         1f:ee:cc:81:d9:e0:c9:94:c5:d2:39:5b:a3:ac:0e:7a:c3:79:
         36:81:ce:00:33:e0:e7:ce:fb:31:ce:b7:09:ca:d2:bc:aa:33:
         cb:e7:73:cb:e3:a4:60:3a:ef:5d:46:c6:83:12:01:50:14:9b:
         aa:d6:55:2a:af:17:83:df:d5:65:2f:a0:99:cc:ec:69:1e:69:
         61:67:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:32 2026 by rpki-client