This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa
File:                     3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          dZr2hUF8jo/aaBSQ1CbOZcIxNK6cjLckIa1M3Iqxu9M=
Subject key identifier:   C4:0D:CF:1B:3C:F1:A5:58:08:50:E8:83:8E:6D:29:EB:49:7D:C9:9E
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       51D27EC1225DCB1E61976224540B448BF54B21E9
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa
Signing time:             Tue 06 Jan 2026 19:47:23 +0000
ROA not before:           Tue 06 Jan 2026 19:42:23 +0000
ROA not after:            Tue 05 Jan 2027 19:47:23 +0000
asID:                     262172
IP address blocks:        200.119.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d2:7e:c1:22:5d:cb:1e:61:97:62:24:54:0b:44:8b:f5:4b:21:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:23 2026 GMT
            Not After : Jan  5 19:47:23 2027 GMT
        Subject: CN=C40DCF1B3CF1A5580850E8838E6D29EB497DC99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:db:21:74:99:a7:f8:8f:3b:34:f8:22:5a:6c:
                    a2:69:1d:6e:0d:60:7d:4c:4f:48:84:db:96:0b:87:
                    8b:9f:b0:87:68:e8:e3:41:20:7b:fa:c3:fa:66:05:
                    19:43:69:91:6d:a0:d3:e1:f6:a0:c2:61:95:9c:6b:
                    c6:08:ca:92:d4:3e:dd:c2:b9:9f:c3:81:71:86:e8:
                    79:ee:09:2c:eb:cb:37:25:08:f9:dd:6f:05:e8:19:
                    6d:38:44:e5:6c:75:78:ec:0d:96:2a:04:4c:05:50:
                    6a:e3:32:34:f1:7c:88:a0:ad:23:88:39:4f:b6:7f:
                    57:bd:fb:0c:da:a1:16:f4:d4:14:2b:55:4f:c9:e2:
                    af:86:4c:c2:ae:60:b3:ac:31:50:6e:33:c2:1b:62:
                    b5:e1:55:44:8b:d7:d0:58:d6:e3:28:5d:48:24:cb:
                    3c:11:fc:75:c3:d3:d6:6c:3a:b1:f0:21:6c:cb:08:
                    2a:1b:05:7d:f2:fc:52:42:c5:f6:90:58:7f:30:75:
                    5a:ea:0d:7a:f6:e4:57:88:88:8f:e0:0a:8a:b8:a3:
                    2a:b2:d8:ba:75:97:05:5d:6d:16:38:24:f9:ef:a0:
                    69:c7:44:98:94:d4:3d:0a:6c:a7:a0:aa:ef:eb:fa:
                    76:21:aa:07:07:26:e7:55:85:52:ca:f4:67:cd:c9:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0D:CF:1B:3C:F1:A5:58:08:50:E8:83:8E:6D:29:EB:49:7D:C9:9E
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:08:ae:8a:dc:cf:ed:84:99:04:59:9f:d3:c2:64:9b:05:9f:
         b3:3d:fe:32:f4:6b:b1:a7:fd:88:15:3d:d9:2f:9a:ec:93:8e:
         95:f6:26:f5:b4:b7:ec:13:67:c2:b6:b6:dc:23:5c:7e:a2:0a:
         fd:6d:ed:eb:af:80:66:8f:88:14:12:5f:86:a7:36:30:8e:90:
         28:a8:83:e2:88:bb:64:08:42:86:18:42:06:0a:41:22:c4:82:
         a8:bc:76:be:ff:37:c3:9d:cc:d5:83:29:85:98:f7:ed:84:16:
         de:fc:b6:bf:e0:f3:db:2a:b7:0c:1a:ef:54:56:ff:ef:34:6d:
         a0:e5:3e:f3:66:6b:a6:bf:78:85:60:ec:07:a7:95:29:96:7d:
         ba:6d:e6:6e:e5:b7:ee:6c:b9:4f:bf:b4:9f:2d:a3:4b:ca:50:
         94:96:57:1b:9c:1a:d5:fd:72:2b:09:25:48:ed:2d:27:c0:0b:
         d7:57:61:92:97:46:99:8c:d9:93:5d:59:90:5d:e1:31:28:54:
         8b:8d:14:06:84:77:28:5c:79:b0:db:87:c9:c3:8b:bf:92:95:
         b6:fb:89:64:21:59:0b:0b:21:b2:80:65:5b:13:d2:87:de:87:
         7f:b7:63:a8:3c:ff:f4:2a:43:62:ce:f5:8c:cb:9e:fc:15:f3:
         bc:09:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:38 2026 by rpki-client