This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa
File:                     3230302e322e3232342e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          6rE0y5EIJu5nNX+ErZy5WLkn9b+WIvQnIE2pPY16hR4=
Subject key identifier:   84:53:91:03:33:42:36:07:5C:7C:AE:51:B9:28:56:20:7E:B6:6D:88
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       5DCE537CB41B1B87B7AFEEE88BA73845F5418590
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 20:54:30 +0000
ROA not before:           Tue 06 Jan 2026 20:49:30 +0000
ROA not after:            Tue 05 Jan 2027 20:54:30 +0000
asID:                     10778
IP address blocks:        200.2.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ce:53:7c:b4:1b:1b:87:b7:af:ee:e8:8b:a7:38:45:f5:41:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:30 2026 GMT
            Not After : Jan  5 20:54:30 2027 GMT
        Subject: CN=84539103334236075C7CAE51B92856207EB66D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:5b:c2:47:b8:c7:b8:8f:d5:d7:4f:b2:b0:
                    13:3b:20:c1:3a:c1:e6:7f:2b:36:f3:64:d2:c7:f7:
                    b0:5c:34:68:84:a4:01:89:e1:e5:c3:9d:2f:73:d4:
                    ba:8b:ab:f2:58:20:b5:00:33:ae:4e:c2:e7:b9:34:
                    94:d3:35:56:e8:c6:30:34:0c:41:ab:fe:a1:f2:c5:
                    84:37:47:12:1b:65:16:0e:db:18:3e:79:c3:92:bd:
                    04:06:24:f9:0c:5b:69:48:26:da:8c:1e:15:06:50:
                    0a:1c:04:6e:2b:44:82:14:3d:f2:69:5d:b3:d3:89:
                    39:e4:a8:b6:db:14:63:99:81:0d:ac:9b:c0:1c:47:
                    46:40:e1:57:0f:5b:0f:c9:c8:5f:12:82:98:04:8f:
                    01:19:82:50:e5:04:5f:8b:95:cf:ef:30:9d:34:38:
                    03:fe:bb:3c:50:29:a6:46:77:a3:a5:2d:0b:56:7e:
                    d4:8f:77:2e:3a:e8:71:c6:06:68:0e:d2:51:8a:b6:
                    16:7e:12:36:ed:f4:77:c4:9c:3c:8e:5f:f2:9d:fb:
                    2d:af:b9:4d:ed:1e:41:7b:91:f9:7e:93:71:25:f9:
                    bc:3a:e5:7f:0a:73:81:ef:24:0f:a8:50:64:fa:7b:
                    aa:f2:00:ea:b6:2b:2a:0a:12:51:6c:0f:93:df:b7:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:91:03:33:42:36:07:5C:7C:AE:51:B9:28:56:20:7E:B6:6D:88
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:41:61:7b:d4:de:12:a9:72:59:37:eb:c4:3d:fb:e3:cd:
         a2:1a:3f:02:8b:5e:f9:6e:3f:91:97:76:99:d0:b7:06:8b:9d:
         6e:98:d5:d7:47:6f:20:e5:8f:e6:2c:d2:14:54:20:5e:d7:f0:
         73:a0:b5:09:46:c2:8d:59:0b:bc:88:f9:79:3d:e7:fb:d0:d3:
         6e:d7:e1:e2:28:69:ee:22:7e:31:52:ea:c6:33:f5:f0:dc:55:
         00:b1:93:90:60:ab:4b:d1:94:d3:ff:9f:9b:11:b4:9b:77:77:
         40:f3:cf:63:ad:db:8e:74:3e:54:d8:ff:1c:e1:72:79:e2:8e:
         40:60:0b:2b:fd:b9:66:61:4f:cb:99:72:0c:a2:8c:08:f3:64:
         41:e7:22:c0:8a:09:98:d5:57:ad:52:4d:9d:15:27:40:05:b7:
         ef:2d:b9:d1:b7:09:6e:45:c6:83:6c:0d:38:ad:80:ef:56:d2:
         66:d2:a3:22:3f:6a:e9:dc:46:86:50:e0:b5:71:52:4f:a1:d2:
         d8:b6:b9:c1:30:d5:ed:24:1d:70:16:a5:1f:05:3d:03:21:05:
         76:19:57:94:09:1b:17:72:1d:3f:90:8e:5f:4e:64:fd:0e:93:
         20:a7:d2:2e:38:a2:b4:f3:af:b6:3a:1e:e0:f8:9b:24:ee:de:
         0d:f5:1e:e4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXc5TfLQbG4e3r+7oi6c4RfVBhZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNjAxMDYyMDQ5MzBaFw0yNzAxMDUyMDU0MzBaMDMxMTAvBgNV
BAMTKDg0NTM5MTAzMzM0MjM2MDc1QzdDQUU1MUI5Mjg1NjIwN0VCNjZEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnFvCR7jHuI/V10+ysBM7IME6
weZ/KzbzZNLH97BcNGiEpAGJ4eXDnS9z1LqLq/JYILUAM65Owue5NJTTNVboxjA0
DEGr/qHyxYQ3RxIbZRYO2xg+ecOSvQQGJPkMW2lIJtqMHhUGUAocBG4rRIIUPfJp
XbPTiTnkqLbbFGOZgQ2sm8AcR0ZA4VcPWw/JyF8SgpgEjwEZglDlBF+Llc/vMJ00
OAP+uzxQKaZGd6OlLQtWftSPdy466HHGBmgO0lGKthZ+Ejbt9HfEnDyOX/Kd+y2v
uU3tHkF7kfl+k3El+bw65X8Kc4HvJA+oUGT6e6ryAOq2KyoKElFsD5PftywLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhFORAzNCNgdcfK5RuShWIH62bYgwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMyMzIzNDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIAuAwDQYJ
KoZIhvcNAQELBQADggEBAJb9QWF71N4SqXJZN+vEPfvjzaIaPwKLXvluP5GXdpnQ
twaLnW6Y1ddHbyDlj+Ys0hRUIF7X8HOgtQlGwo1ZC7yI+Xk95/vQ027X4eIoae4i
fjFS6sYz9fDcVQCxk5Bgq0vRlNP/n5sRtJt3d0Dzz2Ot2450PlTY/xzhcnnijkBg
Cyv9uWZhT8uZcgyijAjzZEHnIsCKCZjVV61STZ0VJ0AFt+8tudG3CW5FxoNsDTit
gO9W0mbSoyI/auncRoZQ4LVxUk+h0ti2ucEw1e0kHXAWpR8FPQMhBXYZV5QJGxdy
HT+Qjl9OZP0OkyCn0i44orTzr7Y6HuD4myTu3g31HuQ=
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:30:16 2026 by rpki-client