This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa
File:                     3230302e32392e36342e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          pVUfiKt2UcIWdrg/78ALyLqoGq/FfYU9mXdEUleH6B0=
Subject key identifier:   96:26:55:90:E5:51:66:79:D6:5C:E2:BF:A4:35:FC:4D:A1:F4:15:3C
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       20605D259A273861BFF10BD0025E60F70C5B42D6
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 20:54:30 +0000
ROA not before:           Tue 06 Jan 2026 20:49:30 +0000
ROA not after:            Tue 05 Jan 2027 20:54:30 +0000
asID:                     10778
IP address blocks:        200.29.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:60:5d:25:9a:27:38:61:bf:f1:0b:d0:02:5e:60:f7:0c:5b:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:30 2026 GMT
            Not After : Jan  5 20:54:30 2027 GMT
        Subject: CN=96265590E5516679D65CE2BFA435FC4DA1F4153C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:06:8e:77:cb:26:b9:9f:89:d6:e2:81:3c:
                    81:3e:2d:aa:40:64:b5:c1:2e:49:85:0d:1d:80:8b:
                    73:ca:00:3e:49:b2:95:a6:10:41:9a:58:73:a6:8d:
                    fa:77:fd:51:01:1b:34:80:e3:d6:96:c7:41:ac:c0:
                    ce:c7:5c:08:d5:db:4d:74:b8:82:7a:a4:61:db:d4:
                    86:0e:24:7f:1a:8d:3e:64:20:5c:ae:cb:3f:77:a4:
                    e2:c3:d0:2e:88:a2:02:2e:3f:74:17:75:38:6a:df:
                    63:b9:df:d2:35:ec:3a:61:a5:7a:51:84:34:6d:47:
                    a4:23:26:7d:52:dc:60:f1:83:c7:9e:91:91:d7:48:
                    84:c1:33:55:79:e0:2f:f0:5e:52:f5:2b:b1:f2:26:
                    3e:44:27:d0:52:47:b7:a4:03:c5:62:9f:69:42:34:
                    0e:e6:9b:85:bc:40:ad:57:e6:08:ec:da:b1:ba:1a:
                    55:53:9e:9e:21:34:b2:02:35:0b:57:39:1e:19:66:
                    7f:ef:75:6b:d3:97:42:da:e7:27:e5:d6:4e:9a:9c:
                    b3:7e:22:08:1c:36:3a:17:f2:bb:16:ca:37:b5:c9:
                    57:45:1a:92:a2:60:19:c0:a2:bc:69:c6:d4:08:7c:
                    71:96:ba:be:a2:67:cd:a7:dc:08:f6:52:1c:ce:ef:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:55:90:E5:51:66:79:D6:5C:E2:BF:A4:35:FC:4D:A1:F4:15:3C
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:11:da:fd:c6:5c:4c:bc:90:9e:1a:c1:69:a5:e7:1d:47:cd:
         70:40:fe:02:52:55:98:4d:ad:a2:59:17:2b:33:bc:c5:ef:e8:
         d4:b9:e4:8a:16:98:e2:4c:a5:16:43:79:ba:2d:4c:e8:f6:db:
         82:d2:54:62:79:1e:2f:ff:27:21:71:1a:2a:49:28:9a:b7:b1:
         ce:cd:a0:f1:04:cf:ae:41:00:a7:50:4c:f0:c1:4f:02:5e:c2:
         6c:d4:c9:05:e5:63:3b:87:f3:0f:03:05:4e:a0:3a:70:b9:fa:
         4c:d8:c4:d3:35:a6:a6:91:29:bb:4f:44:3a:11:10:fb:c6:b2:
         d5:95:14:36:87:10:71:a6:4e:65:43:3e:7a:e4:ab:90:88:a6:
         12:f5:82:03:28:c7:46:25:a0:25:d5:f1:f3:a5:d3:44:e0:6a:
         e8:fb:55:37:d4:65:b1:05:ba:98:04:18:7a:98:e0:0a:0e:75:
         bb:6b:40:97:87:62:dd:5d:6b:4f:30:f6:d8:91:55:4a:c0:31:
         43:cf:e7:48:b4:94:57:a3:fb:7a:6d:42:1c:55:bf:38:1c:04:
         0b:33:9d:a0:dc:46:e4:49:75:6d:23:9c:d5:97:b8:e1:c3:58:
         c8:0a:71:02:a4:33:9b:b4:54:e8:28:c6:df:4f:ad:a4:4e:77:
         ed:29:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:07:24 2026 by rpki-client