This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa
File:                     3230302e31342e3233322e302f32312d3234203d3e203134303830.roa (raw, json)
Hash identifier:          sheUfqKPfVF3LJPx6ILs9TuM+i32WZv6T3IBPLnbre8=
Subject key identifier:   EC:A2:0E:6D:EB:11:B8:0E:34:4F:DC:78:E2:CD:77:9B:6E:76:DC:B1
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       2352ABE01D104E2382EE31A891B1942845135517
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:36:39 +0000
ROA not before:           Tue 06 Jan 2026 19:31:39 +0000
ROA not after:            Tue 05 Jan 2027 19:36:39 +0000
asID:                     14080
IP address blocks:        200.14.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:52:ab:e0:1d:10:4e:23:82:ee:31:a8:91:b1:94:28:45:13:55:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Jan  6 19:31:39 2026 GMT
            Not After : Jan  5 19:36:39 2027 GMT
        Subject: CN=ECA20E6DEB11B80E344FDC78E2CD779B6E76DCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:26:1c:a5:cc:9e:a1:00:be:e7:1a:f6:5a:
                    4a:96:88:51:ba:35:10:dc:30:29:15:11:76:2c:ec:
                    ef:46:02:31:4a:af:9c:43:c7:59:98:84:c9:83:90:
                    3f:0b:20:a9:19:9d:fe:77:0e:6e:57:e2:b8:7a:10:
                    7b:37:05:24:28:03:10:55:64:e0:ee:da:70:15:4e:
                    b1:34:ae:e5:a9:93:f3:19:6a:65:b1:20:67:08:ab:
                    85:ea:55:56:c6:1d:a2:d2:22:d0:49:f0:a5:20:ba:
                    5b:b0:72:99:3a:51:28:bb:ce:15:18:dc:e9:a4:8f:
                    91:88:8c:30:3c:85:8d:93:ca:05:13:7d:99:fd:ca:
                    6f:cb:50:02:93:eb:d4:de:70:d5:25:5b:2e:f7:4b:
                    93:6c:33:a4:a5:b8:f2:b3:e2:ca:95:47:98:1e:ef:
                    cf:1c:b3:b4:54:fb:db:3c:c4:87:06:fd:96:df:87:
                    da:35:66:30:04:0f:d8:f1:70:6a:f7:bf:65:f0:d4:
                    9e:d0:11:0f:25:9a:b3:d6:4d:69:17:40:db:ae:f4:
                    a9:cc:43:51:a0:e8:d1:1d:10:59:e3:55:ec:35:3c:
                    4e:32:d3:70:01:bc:3e:96:08:4b:db:2b:d5:e0:06:
                    99:2a:7b:51:d6:fe:9d:c4:5a:6c:38:b0:54:fe:d6:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A2:0E:6D:EB:11:B8:0E:34:4F:DC:78:E2:CD:77:9B:6E:76:DC:B1
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:dc:ae:bc:82:9f:ff:ab:61:2d:2f:08:a0:10:b8:20:07:
         30:ec:f1:19:76:c7:5a:bc:eb:66:1d:59:d6:35:c4:01:32:ac:
         0e:4c:06:e8:c6:6e:61:57:16:54:ad:3b:01:f9:2f:9e:41:bc:
         3d:95:0a:62:11:7d:63:1c:34:88:b8:52:35:74:98:b0:2c:ab:
         49:aa:43:87:31:65:aa:bb:2f:d9:09:3b:29:cb:b8:79:26:c2:
         ff:b4:09:1f:73:ee:90:86:58:64:ee:16:3f:fb:d0:88:c6:11:
         63:a3:84:2e:67:b1:6f:c5:73:eb:8e:6f:a0:c5:b4:99:be:ee:
         43:9b:cd:f9:1c:47:4e:50:f6:c5:d8:98:3d:1f:56:22:37:6f:
         ce:1e:f3:c4:3d:8c:40:42:2e:86:a0:c5:45:28:26:de:0c:2f:
         fd:1b:cb:c7:4d:0d:63:a3:dc:f1:2c:36:e2:3b:6b:cf:3a:3f:
         84:5f:a6:67:01:54:2e:6b:58:62:23:e7:b6:93:e1:a5:86:36:
         c6:86:42:97:d4:50:94:8a:c3:93:55:4a:94:9a:d5:e7:a0:cd:
         dd:d1:03:84:69:ef:9b:34:cc:8f:d3:c5:01:43:4c:e3:c4:05:
         6b:ce:e4:00:e7:58:c0:6b:6a:cc:f0:59:24:b2:3b:f1:d3:ff:
         71:08:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:48:47 2026 by rpki-client