This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32302d3234203d3e203232303830.roa
File:                     3230302e3132342e39362e302f32302d3234203d3e203232303830.roa (raw, json)
Hash identifier:          AGw+5zJ6L5tBMOdrRW99BUusFkU4ern+8J98a2p4WP4=
Subject key identifier:   99:C9:F0:5C:65:54:D6:39:5C:E2:61:2C:AE:BA:76:E2:FF:99:AA:8F
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       6162EC9B3A8AD482DFC5DC5950F62CD4DD8542DD
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32302d3234203d3e203232303830.roa
Signing time:             Tue 06 Jan 2026 19:19:13 +0000
ROA not before:           Tue 06 Jan 2026 19:14:13 +0000
ROA not after:            Tue 05 Jan 2027 19:19:13 +0000
asID:                     22080
IP address blocks:        200.124.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:ec:9b:3a:8a:d4:82:df:c5:dc:59:50:f6:2c:d4:dd:85:42:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Jan  6 19:14:13 2026 GMT
            Not After : Jan  5 19:19:13 2027 GMT
        Subject: CN=99C9F05C6554D6395CE2612CAEBA76E2FF99AA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:11:d1:40:83:da:db:5b:ac:94:88:f3:1a:
                    30:55:53:33:20:19:f4:6d:dd:d2:dd:48:58:80:e5:
                    c0:e9:b8:2d:02:80:79:f3:39:fc:d3:8f:bc:8c:bd:
                    9a:ce:3f:02:15:45:ec:fa:04:a4:cd:80:47:7c:94:
                    60:a2:44:21:8a:98:6a:5e:85:f3:11:a1:7d:7d:54:
                    c0:fa:4c:d0:3f:e5:a8:56:2f:58:d4:fd:4a:28:6a:
                    05:e7:dd:4f:22:fe:e2:dc:d5:52:ba:d3:94:b4:5f:
                    de:85:58:21:86:41:5c:b8:79:de:fe:37:af:7c:45:
                    ed:9a:7e:5b:79:2a:ed:d8:0d:8a:e1:10:10:2b:9c:
                    db:90:05:db:5f:9d:17:b5:3b:b6:42:09:d9:47:8d:
                    e3:9b:5d:71:0f:87:67:42:5d:45:47:16:9f:fc:af:
                    ff:35:2f:93:1d:51:d7:9d:cc:30:24:03:b4:ba:e6:
                    41:23:7a:4a:41:b5:a8:a6:d2:25:bc:2f:2f:12:86:
                    5a:ba:da:5b:7d:be:2d:1b:7b:e6:28:fe:bb:b5:83:
                    73:2a:ac:3f:20:b7:f3:5d:5e:d0:6f:7d:05:aa:52:
                    03:11:99:8a:0e:cc:b8:72:35:21:d6:ef:74:a5:d6:
                    dc:6d:ef:24:b0:3a:c3:d7:1c:5e:85:4f:8b:26:17:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C9:F0:5C:65:54:D6:39:5C:E2:61:2C:AE:BA:76:E2:FF:99:AA:8F
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32302d3234203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:53:25:86:5a:12:43:c5:7c:9a:e4:4c:2c:f8:0f:f7:e2:7c:
         14:6e:b6:c9:1e:bd:d4:7a:e7:4d:2f:b3:b6:21:4a:3e:38:8c:
         d7:42:ca:f3:01:34:69:3f:6d:88:7b:d0:07:b9:94:18:95:22:
         ed:81:58:d5:44:0c:f6:df:47:f0:ee:79:50:32:db:02:dd:ef:
         41:23:a6:91:17:f1:79:ba:c1:8d:75:d6:9d:3a:30:b4:58:78:
         96:70:93:d0:8c:5f:e0:37:76:70:96:67:fb:b6:4f:9d:16:26:
         0f:40:a6:c4:f3:c2:2e:ef:9d:85:a2:42:eb:1a:4e:47:16:a2:
         ae:a1:ad:2a:5e:d5:4d:86:32:de:6e:22:dd:f0:35:4b:84:01:
         ef:b8:6c:fa:ab:c6:a5:ba:18:ca:63:2e:fc:f1:23:a0:d1:66:
         5c:de:bb:6c:73:31:2b:7c:d2:9b:0f:ce:bc:7a:ef:e3:03:a0:
         57:8a:9f:95:5b:64:fb:87:8a:ef:26:29:f4:76:8e:6c:e6:30:
         c8:c4:17:4f:b4:77:19:44:39:75:f9:ba:30:b2:9e:e5:b1:1f:
         cf:42:87:5d:5f:a6:f2:f8:47:f2:5c:4a:90:b2:e7:b2:fd:cd:
         03:8a:0a:f6:cf:c7:af:14:0f:f5:77:07:6b:ac:d5:e8:ac:25:
         18:14:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:08:22 2026 by rpki-client