This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3332203d3e203130343532.roa
File:                     3230302e31302e3134302e302f32342d3332203d3e203130343532.roa (raw, json)
Hash identifier:          tXU7NdMND4HHcJJhJBu9zoTCXenk4VhmGGlBfTWgme4=
Subject key identifier:   4D:BF:79:1D:C1:8B:B3:FC:D5:F3:73:0A:DF:55:61:66:DA:A0:4F:34
Certificate issuer:       /CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32
Certificate serial:       63405FF2BC0A2EDF7F27FC78D392C3F1867A4666
Authority key identifier: F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3332203d3e203130343532.roa
Signing time:             Tue 06 Jan 2026 19:37:11 +0000
ROA not before:           Tue 06 Jan 2026 19:32:11 +0000
ROA not after:            Tue 05 Jan 2027 19:37:11 +0000
asID:                     10452
IP address blocks:        200.10.140.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:5f:f2:bc:0a:2e:df:7f:27:fc:78:d3:92:c3:f1:86:7a:46:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32
        Validity
            Not Before: Jan  6 19:32:11 2026 GMT
            Not After : Jan  5 19:37:11 2027 GMT
        Subject: CN=4DBF791DC18BB3FCD5F3730ADF556166DAA04F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:a1:3d:0d:de:84:bd:d6:c6:87:ab:f4:c5:
                    87:2a:76:f8:70:86:69:13:e6:f9:2d:c5:8c:ec:9a:
                    c2:46:10:d3:85:14:5f:b9:70:19:0c:e2:d2:c9:26:
                    7f:45:43:b5:34:b6:4f:af:5c:07:9b:9f:b9:fa:2b:
                    a5:e4:5e:5a:30:ee:df:a4:dd:43:7b:32:ef:6f:ec:
                    6c:c2:26:34:43:48:ab:f6:23:d4:6f:19:28:6b:d2:
                    1c:20:66:1d:c0:40:ac:06:73:de:0c:f4:d5:49:2b:
                    12:e1:83:87:ff:22:bf:28:99:58:8d:c0:1a:9c:03:
                    81:37:fd:ed:e9:2d:f8:42:82:ed:3e:81:20:8a:af:
                    5c:94:c8:c5:aa:23:bd:ce:a2:ea:ac:2c:98:34:99:
                    cc:b8:81:cd:a3:19:66:2e:b8:fb:2f:31:10:9f:81:
                    b0:97:94:30:03:dc:c7:38:16:18:94:ce:59:d2:ce:
                    9b:2e:54:80:7b:58:a2:8d:da:68:0e:05:a2:79:d6:
                    06:40:fe:53:bb:c9:09:a9:9e:57:e6:0d:d7:8b:7b:
                    cd:ec:d4:51:72:5e:39:4f:75:48:a3:5f:f4:ce:26:
                    22:7d:17:8c:0b:b4:54:e5:6c:f4:48:e9:57:ef:17:
                    26:53:8b:52:40:c2:b4:9c:32:17:e4:58:68:0d:ae:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:79:1D:C1:8B:B3:FC:D5:F3:73:0A:DF:55:61:66:DA:A0:4F:34
            X509v3 Authority Key Identifier:
                keyid:F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3332203d3e203130343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:a3:7d:26:88:1e:61:71:e5:fd:25:6f:4f:c0:a1:41:0f:
         17:ad:11:17:00:f9:ca:68:48:66:fa:b4:4b:25:e0:4f:25:89:
         6a:94:53:0e:0d:64:cf:f8:9a:dc:28:89:36:4e:67:ec:4e:91:
         01:e1:0e:6c:94:02:16:cb:5b:83:8b:f0:1f:46:88:b8:d2:9f:
         b5:41:57:d5:8d:c2:6c:69:cc:6b:df:ab:fe:7a:18:72:ed:ea:
         b8:58:36:34:6b:f5:96:93:a4:17:a0:0f:7d:a2:bd:7e:b5:93:
         c9:2d:59:5d:53:31:25:18:0b:aa:a8:72:db:94:f0:66:c3:ce:
         a8:78:12:d4:68:c0:c6:a5:64:b6:46:fc:f4:b3:0a:cf:17:8a:
         d4:40:66:09:1e:54:b2:d4:62:38:aa:e1:13:54:c0:ca:9b:b1:
         3e:a0:aa:67:5c:3b:c4:8f:ff:b6:ca:a9:88:70:f9:ff:6b:93:
         56:71:61:81:80:ad:7d:bd:7f:6b:96:0c:26:c8:4f:94:32:9a:
         11:5d:55:cc:e8:2f:e4:00:e5:99:11:1e:eb:4b:ec:50:34:f4:
         cf:37:d6:18:c4:ff:e8:ae:02:0b:c2:c0:17:a4:36:1f:c7:3a:
         92:f3:99:03:8f:6b:ae:51:14:20:ae:9f:ae:3d:c9:d1:b5:67:
         d2:e5:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:38 2026 by rpki-client