This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203532333938.roa
File:                     3230302e372e3134382e302f32322d3234203d3e203532333938.roa (raw, json)
Hash identifier:          G9kigebZrCCFVi0694yFa4eCStAv2AO1w9i9oSH4cr4=
Subject key identifier:   39:3D:99:DF:82:59:A5:D8:18:BE:07:39:19:EF:A8:2A:C9:92:AA:80
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       2DB5A432139C61F97A9931AF5CB9B44F6C9BEB52
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203532333938.roa
Signing time:             Tue 06 Jan 2026 19:04:38 +0000
ROA not before:           Tue 06 Jan 2026 18:59:38 +0000
ROA not after:            Tue 05 Jan 2027 19:04:38 +0000
asID:                     52398
IP address blocks:        200.7.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
                          rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b5:a4:32:13:9c:61:f9:7a:99:31:af:5c:b9:b4:4f:6c:9b:eb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Jan  6 18:59:38 2026 GMT
            Not After : Jan  5 19:04:38 2027 GMT
        Subject: CN=393D99DF8259A5D818BE073919EFA82AC992AA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:6b:9d:68:6b:54:89:a0:45:d6:d6:32:9b:
                    47:ce:1e:6c:56:43:0f:df:04:50:56:31:8d:a7:d8:
                    6e:09:e6:2b:8c:0f:2f:f1:96:e1:eb:56:a7:f9:51:
                    69:a9:4b:49:62:ca:04:d7:70:ea:e4:68:c0:55:fb:
                    52:a7:af:70:48:eb:50:a8:76:d3:cb:0c:db:ba:d0:
                    44:65:54:71:ac:91:18:4d:9a:6e:94:c9:19:1f:8d:
                    f9:b0:e6:c8:6b:e9:a5:b6:5e:72:b5:f9:c7:e1:d7:
                    73:c8:4b:5f:40:19:20:67:ad:1b:81:eb:da:b7:b9:
                    6f:22:17:bc:5a:a1:9b:68:f3:e8:4f:9d:13:45:2c:
                    ef:3a:80:cc:77:89:68:40:a4:4d:4d:9f:8c:fc:7e:
                    f7:fc:fa:c1:9e:94:2f:52:b6:66:ff:f1:17:80:84:
                    53:0f:09:73:f2:5c:34:84:5b:ac:00:39:8c:e8:47:
                    e5:4b:81:6c:76:ac:51:a6:75:2d:3a:2c:88:8c:e3:
                    eb:e3:62:c4:a1:fd:e9:06:ab:68:88:39:7f:96:0b:
                    58:40:b3:b4:c6:0c:aa:b5:cb:92:d4:a6:28:4f:cd:
                    d4:60:3d:64:2e:23:f5:d3:27:28:d1:23:a2:5e:9f:
                    62:8f:92:d3:3d:9c:21:35:e6:e3:c9:8a:14:f0:d4:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:99:DF:82:59:A5:D8:18:BE:07:39:19:EF:A8:2A:C9:92:AA:80
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:61:84:2a:25:ab:e8:7f:64:1a:86:ed:7c:5d:07:44:c3:
         f1:4f:b9:81:8c:69:f0:f2:db:b6:24:96:e1:35:a0:de:7d:13:
         61:1e:87:ca:15:24:df:00:c4:5a:a0:c0:b6:57:65:61:dc:a4:
         45:34:11:94:b5:16:51:b5:c9:49:7b:96:c6:79:79:47:f6:1b:
         00:8b:a9:90:bd:9b:fe:76:f5:23:11:82:ef:23:0b:6e:90:fa:
         62:52:d0:43:3c:d5:34:81:36:e5:92:ff:de:6d:da:28:98:c6:
         88:cf:f3:75:4a:37:cb:ac:11:9e:ee:9c:89:d9:d8:9b:22:72:
         f5:52:60:63:7b:dd:6c:1f:c2:f3:91:3b:a2:bb:c9:b1:40:fe:
         d2:81:9f:04:a4:05:38:55:cd:66:3a:f7:df:14:c0:74:5a:f5:
         41:42:b9:55:f2:30:9c:fa:99:e6:26:ad:b9:51:ca:1c:63:51:
         1e:18:15:ee:36:d5:08:48:50:92:ba:0b:be:8b:95:f5:1c:16:
         c7:01:0b:30:64:c9:6f:b2:09:db:3a:88:6a:d8:4a:f2:7b:92:
         f8:80:9c:80:77:c8:cb:31:b2:8c:2b:df:f9:bf:a0:63:ed:b6:
         69:ed:e7:34:58:fb:91:ab:29:ec:41:d6:21:4a:10:aa:69:a8:
         17:5f:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:05:36 2026 by rpki-client