This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa
File:                     3230302e31342e38302e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          uHclMta17jD7r2MBpj/ZaFhQLAaVbgxKnmDCmNV24bI=
Subject key identifier:   89:30:20:3D:2D:B9:BA:11:82:A5:A8:9E:FB:59:FE:E0:36:C4:19:EB
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       725A0542AB790104B00B00E9C872A40BC0052180
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 20:54:31 +0000
ROA not before:           Tue 06 Jan 2026 20:49:31 +0000
ROA not after:            Tue 05 Jan 2027 20:54:31 +0000
asID:                     10778
IP address blocks:        200.14.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5a:05:42:ab:79:01:04:b0:0b:00:e9:c8:72:a4:0b:c0:05:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:31 2026 GMT
            Not After : Jan  5 20:54:31 2027 GMT
        Subject: CN=8930203D2DB9BA1182A5A89EFB59FEE036C419EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:86:8f:82:58:ac:8b:fb:b1:ff:0a:b3:99:
                    c8:d9:a2:26:8c:c2:2e:2e:4f:d7:40:48:d9:62:b8:
                    39:8c:29:af:e0:b1:aa:75:d2:43:9b:7c:c7:c0:76:
                    6f:67:1b:5f:a2:f0:46:01:1b:b2:6c:3e:b2:e1:04:
                    16:84:34:6a:26:8e:82:a9:9f:07:33:dc:85:cf:27:
                    77:2d:8b:1e:50:29:bb:9d:a1:ab:6b:c9:c6:d9:09:
                    05:95:82:4b:02:29:13:55:27:3a:44:08:9f:dc:d5:
                    8b:1a:36:d8:e9:c7:38:83:1e:7f:55:d4:c1:c8:ae:
                    eb:f1:bd:bf:30:e0:0b:ef:d6:90:2e:e6:c0:8a:79:
                    95:ad:85:7a:fb:88:c9:f9:ed:fd:1e:ad:be:98:bc:
                    f9:ed:55:82:55:d0:4e:36:7e:3e:07:7b:db:1f:a7:
                    ce:6f:c8:7c:b3:47:77:1f:33:0a:3f:3b:ec:6d:69:
                    4c:6e:82:46:b9:5a:9f:45:aa:ac:d2:ad:b0:77:a9:
                    6c:1f:52:e8:ef:0b:fd:d9:c3:8a:59:b6:a7:85:5e:
                    5a:8c:63:2b:cb:73:13:c7:89:8f:9e:77:75:81:e8:
                    b6:39:17:31:36:d0:70:75:4b:08:fa:ab:ef:7e:95:
                    b8:6f:0d:9b:13:1f:cc:5b:ea:51:4d:73:4c:4a:b1:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:20:3D:2D:B9:BA:11:82:A5:A8:9E:FB:59:FE:E0:36:C4:19:EB
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:4d:6c:34:cc:22:60:ac:cd:eb:01:49:eb:de:bf:a4:69:
         60:27:a0:57:b8:da:bc:fb:61:a0:6d:b5:a3:8f:e6:95:bb:2d:
         4e:5a:e5:c5:50:42:76:be:82:e2:6c:67:45:f5:80:3f:5c:ba:
         f9:9b:41:ee:1b:8c:a0:59:0c:cb:2b:a3:3a:76:ca:26:a9:0e:
         df:87:7a:75:a3:6c:73:ae:d7:4e:ab:7f:0c:86:76:c4:39:51:
         84:c1:35:f8:42:26:a8:c8:ca:ee:db:4e:ac:93:29:26:2b:90:
         1b:95:fa:00:09:cb:ad:32:8f:f9:d6:81:bb:6a:68:1d:f6:5b:
         cd:7d:24:31:e0:98:08:75:cb:3f:7c:29:2b:16:18:eb:71:a3:
         32:3f:ba:7d:78:21:42:de:2d:b6:a1:70:40:87:e2:3e:af:ff:
         95:6b:1c:3e:b3:92:48:27:1d:bd:b0:0e:72:e1:9e:96:6b:6c:
         6e:ce:a5:b6:aa:3d:a3:aa:74:d6:86:e8:49:0b:17:88:b0:6d:
         81:5d:90:2c:b6:10:6e:74:38:e9:06:2e:01:61:70:3e:aa:3e:
         79:76:0b:fc:42:59:25:a7:66:3a:14:b8:b2:b1:6d:e7:09:8a:
         07:6c:71:ad:41:cc:88:de:10:5c:72:7c:62:91:1a:d8:49:fd:
         d8:58:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:46:00 2026 by rpki-client