This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3230302e342e3137362e302f32302d3234203d3e203237373539.roa
File:                     3230302e342e3137362e302f32302d3234203d3e203237373539.roa (raw, json)
Hash identifier:          2wWJfCy+omjrTfS8g6La7hTzzoO/gs/tDElAnKWD5YE=
Subject key identifier:   1F:70:62:6A:55:25:B9:08:6B:68:44:84:F9:01:0F:7A:BC:73:9D:ED
Certificate issuer:       /CN=32AE7493892249577E99292721D77996C23DC982
Certificate serial:       3D7E34734418925771C991347F1C2E58D794B8B8
Authority key identifier: 32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3230302e342e3137362e302f32302d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 20:20:00 +0000
ROA not before:           Thu 18 Dec 2025 20:15:00 +0000
ROA not after:            Thu 17 Dec 2026 20:20:00 +0000
asID:                     27759
IP address blocks:        200.4.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7e:34:73:44:18:92:57:71:c9:91:34:7f:1c:2e:58:d7:94:b8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32AE7493892249577E99292721D77996C23DC982
        Validity
            Not Before: Dec 18 20:15:00 2025 GMT
            Not After : Dec 17 20:20:00 2026 GMT
        Subject: CN=1F70626A5525B9086B684484F9010F7ABC739DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:36:db:fe:cf:19:8d:aa:52:85:78:e0:bc:
                    c1:ed:c5:9a:a4:ca:73:27:be:0b:55:16:12:78:18:
                    e2:d6:18:2a:06:92:2e:ae:36:d2:28:2f:f6:0c:a9:
                    4a:a0:bb:76:26:26:7c:9f:43:49:c0:81:42:4f:b8:
                    33:64:81:83:f1:01:0a:9c:19:a2:9d:f3:a7:79:da:
                    dc:1b:3b:1b:81:58:f3:0f:20:d9:c1:05:3f:6b:89:
                    d9:12:9a:e7:f4:8a:a8:b5:5e:2c:93:3f:78:43:80:
                    ce:07:ea:5b:30:39:24:b5:83:a0:7f:cc:26:38:e6:
                    2d:85:f4:b0:87:96:6d:a2:51:e4:b1:56:1e:2f:11:
                    cb:ea:3d:6a:8f:21:30:03:d9:ec:bb:9e:99:6f:21:
                    65:fc:cd:9c:39:40:dc:86:8d:d1:3b:34:df:f8:0e:
                    48:7c:23:98:6e:46:7d:c7:95:a6:60:7d:4a:10:e9:
                    2b:f4:5b:bb:a4:e0:6f:80:1d:9f:32:fa:e0:9b:91:
                    9f:e9:b3:cf:8a:bc:c6:03:32:66:b5:54:f9:9a:7f:
                    db:7f:9d:d9:f2:76:27:91:ff:a6:d6:58:74:8c:4e:
                    5b:9d:e5:2c:14:5b:ed:3b:30:fd:fc:f3:87:62:bc:
                    01:99:cf:91:21:4f:66:44:a5:af:43:ac:86:be:90:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:70:62:6A:55:25:B9:08:6B:68:44:84:F9:01:0F:7A:BC:73:9D:ED
            X509v3 Authority Key Identifier:
                keyid:32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3230302e342e3137362e302f32302d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:9a:69:a7:a3:11:2c:5d:26:50:bd:15:38:9d:1b:8e:f7:
         c4:97:c0:0d:f1:78:42:11:e8:cd:8b:3c:8a:10:c9:7c:4e:24:
         31:b8:11:8c:00:4c:b6:c3:d5:17:69:19:1f:d9:10:14:d9:10:
         d7:03:8a:0c:42:dc:60:11:18:62:19:f4:71:bf:a1:c2:62:af:
         d9:7f:e6:d1:dc:5c:1e:6f:ce:58:be:be:31:22:24:78:8d:6e:
         8c:ac:ce:f0:57:ef:d8:2c:7c:14:c3:67:3c:0b:81:28:3d:de:
         b5:21:ee:bf:81:07:1e:c5:4e:6b:f2:d8:e0:1a:25:f0:a5:08:
         20:73:55:b7:7e:99:e0:47:1f:30:65:99:20:9c:17:39:67:c4:
         86:f1:b4:16:89:1c:e1:4c:87:42:b5:dd:77:05:35:9f:37:44:
         1b:c1:4c:f7:a0:1d:9d:c3:26:bf:d5:12:59:dd:b7:da:8f:69:
         24:9d:47:36:d4:60:27:d6:d4:a4:af:21:8a:a6:d8:bd:55:ce:
         6c:72:42:d4:0d:22:e6:63:27:fd:ff:0d:37:58:d5:f6:f3:5f:
         88:50:e0:55:ef:ba:3d:4f:c2:d6:71:d5:4f:b1:8e:b2:5d:62:
         ce:d1:17:8b:49:2d:a2:d2:ac:e3:c9:b9:05:50:aa:2c:13:88:
         44:b2:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:52:23 2025 by rpki-client