This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
File:                     3230302e372e3132382e302f32302d3234203d3e203237373730.roa (raw, json)
Hash identifier:          E1IQlK+SM6uZWwQ2NdtnO1wfKIzIa6EL9Yi8LlnCyVk=
Subject key identifier:   C9:74:F5:82:F3:19:59:64:98:E2:AE:DA:84:D2:3C:E3:0F:4F:F3:D8
Certificate issuer:       /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial:       498DD2AB587C754A7285DB40C62DFB88B6E8C057
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
Signing time:             Tue 06 Jan 2026 19:40:07 +0000
ROA not before:           Tue 06 Jan 2026 19:35:07 +0000
ROA not after:            Tue 05 Jan 2027 19:40:07 +0000
asID:                     27770
IP address blocks:        200.7.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8d:d2:ab:58:7c:75:4a:72:85:db:40:c6:2d:fb:88:b6:e8:c0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
        Validity
            Not Before: Jan  6 19:35:07 2026 GMT
            Not After : Jan  5 19:40:07 2027 GMT
        Subject: CN=C974F582F319596498E2AEDA84D23CE30F4FF3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:11:18:c6:49:b4:d7:e9:e6:83:a6:fd:ed:
                    53:95:9d:46:72:23:dd:95:92:99:c7:eb:7f:1c:cd:
                    7c:2a:ff:7d:a8:40:c7:b9:bf:8e:ce:11:d2:80:5d:
                    0b:96:c5:ea:db:7a:ca:99:c9:d1:44:92:ca:f4:0c:
                    ff:01:8c:c0:31:72:31:78:07:c2:7f:64:45:46:a4:
                    ad:fc:7c:d5:f5:2f:63:da:9f:55:1c:4d:a3:90:c0:
                    24:d3:67:a0:c6:1f:60:0a:0b:53:57:6d:42:f9:b9:
                    bb:bb:d7:5e:cf:bd:83:1f:f4:f0:32:d5:21:21:64:
                    c0:a4:94:2a:90:2c:2f:a8:4e:63:89:11:c7:38:3c:
                    8e:26:54:f9:3c:33:ac:46:38:00:6e:86:62:81:32:
                    3a:b3:55:2a:da:17:5a:33:08:1b:f5:f4:35:71:f3:
                    2d:43:42:43:80:09:21:6e:49:c3:20:71:81:5d:ad:
                    98:dd:a6:ce:5c:18:42:ca:10:a2:5c:aa:38:a6:1a:
                    55:67:6c:cb:82:c3:9b:b4:c0:d4:d0:97:23:33:70:
                    af:0c:76:d5:1c:d6:15:21:dc:00:52:1a:9f:e2:05:
                    7e:c6:43:b2:a5:b8:7f:fd:d3:18:8d:3c:0c:1a:5d:
                    2d:31:25:b2:ea:7e:ef:0e:90:53:6f:1a:cf:f3:3f:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:F5:82:F3:19:59:64:98:E2:AE:DA:84:D2:3C:E3:0F:4F:F3:D8
            X509v3 Authority Key Identifier:
                keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:b8:b6:60:03:73:0d:17:9f:ca:a2:9c:68:75:6b:d1:58:
         e8:53:b2:b6:ad:cb:87:d1:eb:29:dc:c3:a3:e7:92:09:cd:45:
         40:7b:64:e4:47:e4:b9:7e:f4:f7:cf:69:b1:77:f3:6f:e1:aa:
         f2:f0:62:4c:e1:24:67:39:e0:e0:b2:b4:bd:a3:09:c9:36:3f:
         da:b9:9b:ee:2c:98:32:fc:68:85:b2:a1:ca:53:73:ad:29:bc:
         cf:a3:e0:ba:e0:42:49:eb:ad:c9:e5:27:e4:7e:5f:41:ab:8e:
         73:21:f5:c6:bb:4f:57:7f:69:e3:e3:5b:15:94:d9:1a:11:2d:
         42:cd:8e:dc:ab:54:bb:ed:e0:c3:f1:14:8c:9b:d5:93:d5:95:
         ec:d1:b5:8a:74:a5:3b:89:77:02:b4:7d:05:0c:ae:e4:bb:da:
         cf:b4:94:aa:38:06:ee:74:57:2b:0b:a4:7e:28:36:33:b8:d4:
         90:53:18:5c:f9:db:1a:71:04:97:34:ca:a2:92:8b:96:51:fc:
         df:a2:78:10:26:40:4c:75:29:86:93:7e:23:f1:89:c5:98:da:
         60:12:6b:f7:30:8a:5c:0b:17:a1:af:53:ac:0e:00:3f:17:37:
         ba:9c:90:ad:8d:6e:f3:57:a9:28:79:66:63:f8:92:06:f5:03:
         e2:e8:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:28 2026 by rpki-client