This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
File:                     3230302e35372e31302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          e3tVSzRYMN1M27W+xXv4TnZ58jv6aCqzlcrjfyLNFuk=
Subject key identifier:   19:0D:17:7C:53:31:02:56:5C:1E:CE:DD:03:E2:40:43:9C:6A:F4:34
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       501AEE794A7C03815394ECCA747B2BA7ECA694BF
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:29 +0000
ROA not before:           Tue 06 Jan 2026 18:59:29 +0000
ROA not after:            Tue 05 Jan 2027 19:04:29 +0000
asID:                     18734
IP address blocks:        200.57.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1a:ee:79:4a:7c:03:81:53:94:ec:ca:74:7b:2b:a7:ec:a6:94:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:29 2026 GMT
            Not After : Jan  5 19:04:29 2027 GMT
        Subject: CN=190D177C533102565C1ECEDD03E240439C6AF434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:a2:f5:5e:73:1d:85:23:e2:fc:b2:71:1b:
                    3c:db:98:4d:da:b3:82:e7:56:c1:15:f7:2b:34:43:
                    86:63:73:b2:f9:95:d9:01:2a:a7:1b:85:03:83:ad:
                    f0:c6:7c:07:f6:f2:ac:fc:93:6f:36:fb:e2:ab:51:
                    98:83:e2:58:be:1b:d4:e3:ac:2c:ef:28:5c:60:a0:
                    23:79:30:11:e7:60:76:7f:da:e4:e6:6c:06:26:0b:
                    4e:c5:58:54:a8:96:89:52:c2:c7:ba:b3:46:5a:c8:
                    c0:b2:04:6f:85:93:8d:e1:f8:a6:76:06:5e:7a:0a:
                    eb:58:64:9b:e2:15:b6:b9:0c:84:5e:f8:04:83:4d:
                    40:8c:eb:26:a7:43:1e:e8:b1:e1:18:15:a3:12:d7:
                    eb:e8:c9:33:32:d7:75:5b:c1:e7:60:4e:22:40:0d:
                    70:d9:68:d0:04:f1:4a:47:7e:78:65:60:10:bf:38:
                    06:2e:5d:23:e4:a3:03:cc:15:34:31:e1:de:71:1d:
                    f2:0f:b2:4a:23:68:ee:30:f0:5c:ca:9e:7b:0e:a2:
                    2b:34:25:d0:09:f0:1a:b9:57:25:7b:13:28:21:db:
                    11:8a:1a:14:72:46:18:7c:57:40:ca:0e:42:63:5f:
                    47:5e:82:60:6d:cf:f3:75:17:cb:e3:53:c6:13:e4:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0D:17:7C:53:31:02:56:5C:1E:CE:DD:03:E2:40:43:9C:6A:F4:34
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:20:af:2a:e9:fe:09:b6:d1:27:de:cd:6f:0e:e5:d0:e1:f4:
         38:8a:5c:18:18:2b:fe:e2:76:ce:55:a2:2a:67:50:73:48:a3:
         5c:81:9a:01:09:5a:68:b2:c1:70:6d:7b:d3:61:e0:eb:3e:6b:
         6e:2f:5a:83:3e:69:78:6d:36:20:bf:5f:49:1b:a2:88:3c:da:
         6a:1b:75:4c:83:03:93:9a:99:82:1c:7d:09:53:7f:13:2f:a6:
         82:c0:60:c6:c9:13:6f:0a:1a:3f:f3:88:6e:97:0e:63:d6:54:
         80:ce:58:0c:29:e4:4c:3b:47:20:f3:f0:01:f1:bb:fd:95:2c:
         c9:ea:49:17:51:f2:19:91:c5:fd:6f:32:49:e8:4c:ce:f3:d8:
         da:85:13:fc:1f:c8:fd:33:18:70:e6:cc:3f:b8:0b:61:6c:d5:
         28:f2:37:99:dc:44:de:a5:9c:0c:b1:f5:95:7b:68:2a:45:0c:
         e1:03:74:3d:dd:7c:46:48:a7:3d:54:79:4b:f2:9e:b0:22:d8:
         d8:99:57:52:19:af:23:21:7b:2c:56:14:ec:8e:13:16:63:7b:
         4f:ac:80:46:68:1c:83:72:85:f7:42:77:71:f9:22:bf:6e:0f:
         69:28:c7:13:a0:4b:86:27:e1:07:70:7d:ea:3e:46:c8:ef:2f:
         03:dd:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:59:40 2026 by rpki-client