This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa
File:                     3230302e32392e3139322e302f31392d3234203d3e2036343239.roa (raw, json)
Hash identifier:          JDWoxigMPSnjy4G+dUUZkSPQkAKUJ/o7C6oqfZ0Z1aI=
Subject key identifier:   3D:E5:2C:AF:49:37:60:12:20:9D:1C:79:05:62:41:78:CA:BE:C5:AE
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       4313BC311E7E0B315F11A24BAE26B30F5D347F38
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 19:36:42 +0000
ROA not before:           Tue 06 Jan 2026 19:31:42 +0000
ROA not after:            Tue 05 Jan 2027 19:36:42 +0000
asID:                     6429
IP address blocks:        200.29.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:13:bc:31:1e:7e:0b:31:5f:11:a2:4b:ae:26:b3:0f:5d:34:7f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Jan  6 19:31:42 2026 GMT
            Not After : Jan  5 19:36:42 2027 GMT
        Subject: CN=3DE52CAF49376012209D1C7905624178CABEC5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:9c:1b:e1:91:d5:05:38:b2:3c:ee:82:ce:
                    a9:d4:24:41:6f:d9:b9:15:45:72:3a:7c:aa:bf:0f:
                    52:d2:8e:65:57:9e:f3:fe:7f:53:9f:6a:1f:c6:f3:
                    92:ae:de:88:e6:8c:56:a3:18:6c:9b:45:21:b1:c7:
                    44:d0:e2:40:56:08:f1:35:e0:0d:43:0d:75:9c:4c:
                    26:2c:f9:cc:c1:d9:ec:a4:5e:1b:cb:ac:73:8b:66:
                    1e:8f:b2:72:96:94:3b:0e:fc:3e:94:58:f8:9c:09:
                    a6:37:37:bf:5a:ce:93:4e:68:44:7a:48:d2:1c:5f:
                    28:48:db:b1:83:c7:cf:88:c2:7e:47:eb:c4:bd:bc:
                    33:8c:8b:76:62:8e:47:57:fb:42:88:05:f7:20:e5:
                    99:c2:a1:02:e7:43:d2:c9:53:6c:a0:42:3f:45:85:
                    49:d5:4d:23:ee:0e:aa:b4:2c:fd:db:97:d0:ff:fd:
                    3a:52:c3:b6:38:88:b4:12:99:b9:dc:58:61:81:a6:
                    09:5e:e1:a4:1e:f5:65:31:5e:43:b9:ae:6d:8f:9d:
                    3f:a6:72:ce:2f:17:81:c8:51:f7:36:0f:72:37:d6:
                    86:32:5b:5b:85:c8:2e:bc:2b:12:d1:38:03:55:23:
                    df:e3:3c:7f:8f:46:8e:6f:12:80:63:a3:0d:5a:f1:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:2C:AF:49:37:60:12:20:9D:1C:79:05:62:41:78:CA:BE:C5:AE
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:61:e5:11:11:2c:f8:29:55:a1:74:4f:ee:1f:73:dd:02:
         ef:2a:fe:b3:c2:b3:c9:7b:c8:5d:93:0b:25:11:09:b1:ae:8f:
         26:3d:44:fe:45:30:61:33:11:a0:78:5c:f5:a8:91:8f:23:6b:
         0c:c0:18:60:ee:41:68:f8:01:41:e4:d8:3a:1a:92:02:13:41:
         c7:73:22:9c:52:c0:a7:93:4e:74:37:76:65:f9:35:14:ed:05:
         d0:a7:1d:e9:18:49:ec:53:cf:58:41:3c:23:59:98:9c:ea:3d:
         ce:21:58:8f:fe:18:e9:e1:3b:ab:88:6f:64:67:51:c6:7a:4a:
         f4:76:5b:dd:74:36:34:5b:ab:c6:c6:54:a9:8b:3d:be:16:ee:
         1f:26:43:ce:a4:d4:2d:fe:0f:ca:27:2f:05:4d:54:c4:21:51:
         39:2c:8d:93:00:b7:6e:f1:e5:5c:0f:0c:2c:1c:ed:77:06:9e:
         1a:0d:c6:87:93:eb:dc:e0:34:af:f6:41:fd:73:e9:96:c8:3f:
         59:67:95:ec:ec:3a:00:94:ba:f6:f5:79:07:9c:df:8e:b3:35:
         c7:34:2f:93:2a:90:05:91:be:68:ba:d1:69:62:4a:1f:0b:83:
         ed:06:75:3e:54:64:47:0a:0e:51:18:c5:7f:bd:00:c6:96:b3:
         09:4e:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:03:07 2026 by rpki-client