This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa
File:                     3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa (raw, json)
Hash identifier:          Yjc9d0mYDf1tsi71WJE0zFFu6BDGlc5d33zUOa8NecQ=
Subject key identifier:   5C:9F:8F:4E:47:FA:24:01:91:3E:CB:D7:64:BA:2A:F3:0A:87:32:14
Certificate issuer:       /CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
Certificate serial:       19AAD972934ED34835C837DAE67AD488FDDD63AE
Authority key identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa
Signing time:             Tue 06 Jan 2026 19:40:05 +0000
ROA not before:           Tue 06 Jan 2026 19:35:05 +0000
ROA not after:            Tue 05 Jan 2027 19:40:05 +0000
asID:                     28458
IP address blocks:        207.248.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 09:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:d9:72:93:4e:d3:48:35:c8:37:da:e6:7a:d4:88:fd:dd:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
        Validity
            Not Before: Jan  6 19:35:05 2026 GMT
            Not After : Jan  5 19:40:05 2027 GMT
        Subject: CN=5C9F8F4E47FA2401913ECBD764BA2AF30A873214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:a4:b8:16:23:0b:f4:db:7e:a4:c8:30:a8:
                    29:54:d7:21:ff:1c:0e:55:c6:35:ec:e9:ec:ee:d1:
                    6d:ca:04:0b:43:46:d6:c1:06:72:ff:8d:09:6b:dc:
                    18:84:ee:40:84:d3:76:c1:a5:57:36:46:cd:60:32:
                    04:98:bd:04:6f:34:39:7a:89:68:59:40:b5:c7:43:
                    1d:2e:09:b2:73:fa:de:12:77:31:b9:78:63:2e:92:
                    6c:89:03:41:e9:08:c5:b3:8e:84:87:cc:ec:46:ec:
                    ab:98:05:e6:32:89:e3:46:79:2c:86:f2:b0:63:ed:
                    18:d9:eb:59:db:c2:e3:2f:08:ca:7b:f3:e5:65:fa:
                    d7:c5:a2:a0:c2:26:0b:3f:07:5f:85:98:34:fa:c9:
                    7e:5f:db:b2:59:f4:be:75:78:e0:d4:2f:9f:cd:3b:
                    0d:fd:04:88:b8:6b:6f:8f:25:e5:3f:2a:92:84:1a:
                    12:f1:24:19:75:b6:b7:6e:77:4b:cd:f3:cd:c6:e0:
                    50:be:42:02:e3:2a:bb:1f:9c:7c:89:14:18:0c:32:
                    04:85:a9:af:c1:b3:81:19:e9:4c:67:8d:e9:7f:44:
                    a8:1f:1c:e5:26:d7:41:84:aa:2b:1b:c8:34:8f:3e:
                    11:89:f6:37:1d:c1:8b:d7:7b:49:82:45:bd:07:f2:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9F:8F:4E:47:FA:24:01:91:3E:CB:D7:64:BA:2A:F3:0A:87:32:14
            X509v3 Authority Key Identifier:
                keyid:03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32332d3233203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:be:7c:99:67:5e:5c:b7:91:e1:49:95:82:af:89:20:bc:4a:
         8a:8c:45:65:60:d4:40:90:77:7e:89:15:a4:2e:28:4b:28:90:
         7d:ab:bf:91:51:87:4c:f2:d5:f6:8f:9d:76:3a:63:38:4c:b5:
         7e:74:3f:70:c9:94:22:4e:b4:05:ed:35:5f:41:ea:1a:f8:da:
         b6:3e:25:6e:84:e1:07:4d:d2:35:20:8a:74:9c:4f:4e:bd:92:
         54:62:9e:cc:1e:ba:45:d2:bc:aa:51:fa:59:dd:1f:7a:37:19:
         28:f2:14:62:94:a0:2e:ca:9d:12:7b:f5:6c:a2:fe:a4:43:94:
         12:48:93:f0:18:4f:e1:65:8f:68:4b:f0:9a:36:e6:86:12:da:
         aa:81:04:e6:4a:0e:61:d2:71:1b:a8:3b:2f:0e:84:7d:b9:07:
         51:00:85:07:55:a0:b9:94:04:c3:42:ec:2e:64:bc:5b:e5:e2:
         1b:8d:6b:9c:03:79:e0:46:b1:c5:90:6b:13:0b:a5:cb:25:ef:
         52:0f:74:dd:0b:e9:3f:3b:b5:c9:ea:8e:a8:a6:8e:e9:d0:eb:
         3f:2b:8c:2a:72:7d:3a:dd:9b:5a:9b:5d:4e:f3:6f:ba:41:79:
         0b:20:c2:7c:f3:08:77:e5:5f:92:01:dd:50:57:d1:ce:94:3d:
         a8:16:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:06:05 2026 by rpki-client