This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa
File:                     3230302e32372e3135362e302f32342d3234203d3e203235373138.roa (raw, json)
Hash identifier:          BcdhYURfvVBpqSf/bLrJhEj+Y2X7kZm9ozi4o0xnuy0=
Subject key identifier:   F3:04:C8:46:5F:FB:7F:FC:AF:9E:41:32:91:E5:3C:9C:A3:2F:60:3A
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       4C216481A7E095455676ABD4F7B8184B69A8EA60
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa
Signing time:             Tue 06 Jan 2026 19:36:43 +0000
ROA not before:           Tue 06 Jan 2026 19:31:43 +0000
ROA not after:            Tue 05 Jan 2027 19:36:43 +0000
asID:                     25718
IP address blocks:        200.27.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:21:64:81:a7:e0:95:45:56:76:ab:d4:f7:b8:18:4b:69:a8:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Jan  6 19:31:43 2026 GMT
            Not After : Jan  5 19:36:43 2027 GMT
        Subject: CN=F304C8465FFB7FFCAF9E413291E53C9CA32F603A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:b2:f4:ca:51:70:5a:48:d5:18:90:ed:d1:
                    fc:bd:8f:34:17:e2:49:95:12:84:19:24:9b:be:91:
                    31:0f:1a:1c:07:71:76:34:87:e3:2e:01:9c:44:f3:
                    7c:96:8c:f4:c0:fc:f1:2a:5e:3d:84:82:a3:48:de:
                    b4:ce:b1:c6:d2:90:46:ef:a3:42:52:aa:52:99:ab:
                    fd:10:33:7e:e3:62:74:38:00:32:19:a7:49:23:3b:
                    8d:6b:92:a4:0d:d6:88:e5:00:bd:81:16:0c:a0:ef:
                    ec:3f:d7:06:3d:12:65:63:a8:61:40:5c:12:b2:7d:
                    eb:be:13:33:57:74:f7:54:79:ca:58:02:69:08:23:
                    f5:33:ae:15:75:03:d7:b7:78:7b:4f:df:02:23:49:
                    0a:34:cf:4a:a6:07:98:1c:bc:4a:06:4d:ae:78:37:
                    0e:3b:48:71:67:7e:a9:c9:51:49:0a:4d:c9:85:3b:
                    0e:c3:aa:a2:e3:8b:53:a8:e8:4c:ac:cb:3b:81:34:
                    6a:84:19:95:65:d5:f3:35:13:36:06:70:ae:5d:3b:
                    27:8f:a4:51:cc:0a:87:8f:a1:5c:5d:75:94:24:85:
                    fa:4b:66:6c:2c:b7:aa:55:2f:8e:73:70:23:1c:44:
                    9d:16:38:63:fd:4a:9d:55:b4:4f:3d:b8:b7:8d:c8:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:04:C8:46:5F:FB:7F:FC:AF:9E:41:32:91:E5:3C:9C:A3:2F:60:3A
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:85:0a:af:98:00:f2:02:43:a4:b7:1f:36:5e:b2:26:34:5d:
         17:f5:d2:41:8c:91:62:dc:81:39:64:3e:47:0f:94:21:fb:58:
         82:35:3b:1a:ee:1f:93:b5:7e:6e:f9:9d:d0:36:67:c0:30:d2:
         62:cf:1f:23:2c:a6:d5:bb:2a:08:ed:8e:18:9d:40:7a:05:d2:
         74:88:9d:3f:11:d0:6d:95:e2:5a:30:c4:0d:a3:cc:40:54:92:
         ad:74:49:79:8b:4b:cd:de:09:04:f1:30:6f:c6:aa:8c:51:8c:
         67:b0:ef:ce:2d:20:00:e1:75:a8:57:ff:01:fd:44:49:14:6a:
         71:bd:96:8c:b3:75:16:ff:5f:79:6d:87:44:2c:6a:b8:a9:3f:
         8f:49:95:17:77:16:ed:7a:61:f9:33:ca:af:1c:cd:71:0f:b6:
         67:75:d4:73:86:13:dd:28:a1:62:c7:5d:32:1f:18:ef:eb:ac:
         54:40:0e:8d:cf:fc:a6:0d:db:94:6e:d2:05:7a:f0:99:2c:69:
         2e:e4:41:92:52:ad:54:aa:2c:c3:57:1e:90:9e:cc:b9:c4:c0:
         d1:f4:39:a4:eb:1d:0a:37:42:75:5e:02:95:ca:95:fa:64:b6:
         f9:b2:f0:76:31:b1:a3:6c:ff:49:c7:5c:f6:d3:2e:43:c9:29:
         45:7e:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:50:33 2026 by rpki-client