This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135342e302f32332d3233203d3e203532333939.roa
File:                     3230302e372e3135342e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          FeJjugdEX9ls2rq+FeK9SrWJ8IE+pvF+RBJ0AAeRh/w=
Subject key identifier:   65:30:38:2F:03:7B:B1:3A:A3:51:7A:29:49:B7:FA:0F:08:D6:FF:CD
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       59ABB2A06C70B4D666099A5FAB4FD688E40AC829
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135342e302f32332d3233203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:30:02 +0000
ROA not before:           Tue 06 Jan 2026 19:25:02 +0000
ROA not after:            Tue 05 Jan 2027 19:30:02 +0000
asID:                     52399
IP address blocks:        200.7.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ab:b2:a0:6c:70:b4:d6:66:09:9a:5f:ab:4f:d6:88:e4:0a:c8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Jan  6 19:25:02 2026 GMT
            Not After : Jan  5 19:30:02 2027 GMT
        Subject: CN=6530382F037BB13AA3517A2949B7FA0F08D6FFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:b1:0e:1e:2a:2b:fc:dc:9a:02:cc:4f:99:
                    6b:07:33:18:b9:79:0a:fc:b6:d3:00:fd:57:0d:aa:
                    ed:88:10:a7:b8:05:45:9f:f0:29:ff:21:48:cd:3a:
                    0a:59:09:6f:d9:41:b0:3f:67:c8:8d:bf:b9:92:4c:
                    ac:9c:81:e6:37:b6:f1:dd:10:cd:b9:4b:a9:7d:17:
                    eb:9e:74:ce:ae:21:a8:78:14:55:6e:98:0d:d9:31:
                    b5:8a:30:27:7f:a9:04:96:d3:69:b0:8f:6c:f2:da:
                    c1:4d:82:9e:63:0e:e9:14:a4:88:a8:72:3c:f8:f8:
                    78:ad:a8:2e:60:52:21:6f:ca:9f:b5:4c:62:ee:63:
                    ba:cd:2a:62:33:0d:03:5a:9a:ba:80:b3:e4:f3:4d:
                    bd:60:33:c4:a6:df:a5:59:b2:d1:49:1e:04:a3:3a:
                    df:4e:3a:43:bc:5c:7c:04:12:18:6d:ab:e7:e5:3d:
                    a4:1b:ec:3e:e8:45:90:b3:fe:af:37:d2:5b:f9:86:
                    d6:f6:24:47:5f:de:c9:85:97:3d:a9:b1:ca:8b:96:
                    49:e1:4f:d8:ee:42:3b:cb:1a:95:98:d9:9d:c1:dc:
                    c6:41:02:db:10:2e:ab:fd:21:db:a1:bb:e7:a8:57:
                    17:d1:78:f7:92:ef:6d:51:ad:b0:47:9f:13:fb:fc:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:38:2F:03:7B:B1:3A:A3:51:7A:29:49:B7:FA:0F:08:D6:FF:CD
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135342e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:f6:23:3e:c5:f8:12:c1:90:b7:df:25:03:d8:c7:c8:9b:
         60:9f:86:98:d2:0f:72:3d:f1:7b:91:42:f5:a9:79:7a:e8:7a:
         fe:b6:7f:0f:44:c5:4c:56:4f:d2:09:c2:ca:16:13:eb:61:d1:
         88:4e:73:a1:ab:19:c3:96:36:c1:d4:1b:37:a7:83:6a:02:dc:
         14:f9:42:d9:cd:e7:13:17:d6:ef:a7:7d:c9:9c:2a:b6:e8:86:
         66:8d:4c:6a:65:1f:30:6e:8b:e5:43:d2:0a:2d:25:bc:5a:17:
         45:5c:7f:fd:64:14:7b:47:20:49:b5:9c:5d:40:58:da:d1:d0:
         bf:99:32:2b:28:ac:dd:49:40:4a:39:4f:a3:ff:39:bf:2e:e9:
         6c:19:65:4c:3d:29:3f:32:57:6d:f6:26:31:d3:11:fe:30:c7:
         2a:fc:0b:2d:40:6e:8d:fd:b8:21:61:d0:21:74:d9:bd:0f:13:
         fb:4d:ea:15:cb:cb:fc:86:45:a5:2e:45:e2:22:9f:91:6e:ff:
         90:7b:22:f1:6d:a9:a4:6b:01:7c:c4:d2:ec:45:fc:4d:01:7e:
         13:31:8d:f9:8c:43:95:95:77:64:18:70:7a:6b:e7:a2:29:b1:
         7b:6a:3b:3a:ed:d2:b9:ac:45:4a:63:4f:53:f1:80:aa:11:1a:
         30:2d:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:31:43 2026 by rpki-client