This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3137302e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          EsMETFdC0ryISlkNGXo9uEcZZk1NuGCB0P132EdTew0=
Subject key identifier:   28:9F:54:28:F7:67:27:A3:62:5C:79:28:A9:7D:28:1B:C3:BE:F5:08
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       0DB6A9AFEA5BB5FBF1FBC978DB89E5BEB14BF7EE
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 06 Jan 2026 19:32:27 +0000
ROA not before:           Tue 06 Jan 2026 19:27:27 +0000
ROA not after:            Tue 05 Jan 2027 19:32:27 +0000
asID:                     27742
IP address blocks:        200.30.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b6:a9:af:ea:5b:b5:fb:f1:fb:c9:78:db:89:e5:be:b1:4b:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:27 2026 GMT
            Not After : Jan  5 19:32:27 2027 GMT
        Subject: CN=289F5428F76727A3625C7928A97D281BC3BEF508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:67:10:cc:4b:ce:68:ef:50:e8:44:39:77:
                    03:d1:aa:76:4f:84:78:e3:7e:8d:dc:d5:3c:e9:2c:
                    b6:4c:a5:57:9a:51:98:6d:f5:8a:4a:9c:61:80:51:
                    63:e5:33:e6:e8:25:9e:f2:ab:65:25:9b:f2:30:42:
                    2b:6d:e0:92:9a:95:4b:72:a4:0d:34:41:2c:a0:49:
                    08:9b:85:48:98:df:78:51:4c:82:af:53:79:cf:d4:
                    7d:5b:fc:79:4a:1f:ef:dd:dc:0e:a0:dc:eb:98:cd:
                    ff:f7:05:db:f3:ed:48:2f:fc:bd:8f:df:68:48:51:
                    53:4a:ba:f1:e2:9c:e7:f4:6c:d5:bd:45:eb:71:79:
                    3b:1c:9a:35:28:b4:75:9d:e1:cf:7f:44:2e:d8:a9:
                    5c:7c:23:4d:1e:f6:8a:6d:5d:dc:8f:33:e9:54:c6:
                    fc:bc:81:0a:35:e4:94:c1:38:4f:5f:95:b6:29:a7:
                    2d:5e:3a:9f:73:9c:41:45:25:91:62:63:14:95:a9:
                    57:d3:be:fb:48:2c:19:17:31:34:41:a8:04:76:37:
                    46:e2:b0:73:6f:cb:cc:4f:e1:a3:a3:90:27:2d:e4:
                    72:6f:53:90:e3:29:40:03:5b:5c:f2:77:e2:57:4d:
                    ba:e0:8b:52:5f:04:cf:f4:e2:6d:4d:b4:0b:92:45:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:54:28:F7:67:27:A3:62:5C:79:28:A9:7D:28:1B:C3:BE:F5:08
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:97:4c:60:a1:09:1d:b8:e0:9f:22:62:0b:c8:41:dc:74:a2:
         72:7a:b7:96:96:e3:70:40:21:17:c6:80:ed:98:50:d6:ae:af:
         40:dd:cd:5b:1c:dd:aa:d0:6b:95:08:0c:58:f2:de:92:6e:ac:
         4e:06:85:81:ce:35:bc:41:82:a7:a2:80:6c:8c:38:13:7e:2c:
         9f:f0:4c:77:51:43:2d:9f:b0:46:9c:dd:eb:ec:a9:ce:25:1c:
         25:98:80:8c:95:56:e4:57:99:f4:47:cf:78:cb:fe:31:35:c1:
         a1:3b:fd:b5:3e:c5:af:22:a7:22:fc:11:fc:83:12:16:25:61:
         1e:1d:92:0a:ca:4b:af:92:ca:8d:57:21:a6:b6:93:3b:30:c4:
         33:b9:f8:35:72:be:fa:96:dd:5f:d7:33:c5:f1:bb:9b:8c:2f:
         23:0f:b8:4a:28:b8:aa:96:04:37:87:b8:cf:61:2a:ba:7b:f3:
         b6:2e:3d:bf:69:c9:17:c7:57:b7:d1:7d:de:01:a1:b4:92:dd:
         14:bc:15:b0:30:b6:1e:2f:d3:31:7d:dd:e1:88:bd:63:f9:5e:
         9a:ff:ad:e1:22:e4:10:de:59:cc:84:b9:20:13:80:02:58:58:
         12:a1:9a:f8:54:70:69:db:0e:b7:6b:9f:4c:96:5d:db:97:86:
         fd:6f:9a:c9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDbapr+pbtfvx+8l424nlvrFL9+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNjAxMDYxOTI3MjdaFw0yNzAxMDUxOTMyMjdaMDMxMTAvBgNV
BAMTKDI4OUY1NDI4Rjc2NzI3QTM2MjVDNzkyOEE5N0QyODFCQzNCRUY1MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfmcQzEvOaO9Q6EQ5dwPRqnZP
hHjjfo3c1TzpLLZMpVeaUZht9YpKnGGAUWPlM+boJZ7yq2Ulm/IwQitt4JKalUty
pA00QSygSQibhUiY33hRTIKvU3nP1H1b/HlKH+/d3A6g3OuYzf/3Bdvz7Ugv/L2P
32hIUVNKuvHinOf0bNW9RetxeTscmjUotHWd4c9/RC7YqVx8I00e9optXdyPM+lU
xvy8gQo15JTBOE9flbYppy1eOp9znEFFJZFiYxSVqVfTvvtILBkXMTRBqAR2N0bi
sHNvy8xP4aOjkCct5HJvU5DjKUADW1zyd+JXTbrgi1JfBM/04m1NtAuSReMzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKJ9UKPdnJ6NiXHkoqX0oG8O+9QgwHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzNzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgeqjAN
BgkqhkiG9w0BAQsFAAOCAQEAYZdMYKEJHbjgnyJiC8hB3HSicnq3lpbjcEAhF8aA
7ZhQ1q6vQN3NWxzdqtBrlQgMWPLekm6sTgaFgc41vEGCp6KAbIw4E34sn/BMd1FD
LZ+wRpzd6+ypziUcJZiAjJVW5FeZ9EfPeMv+MTXBoTv9tT7FryKnIvwR/IMSFiVh
Hh2SCspLr5LKjVchpraTOzDEM7n4NXK++pbdX9czxfG7m4wvIw+4Sii4qpYEN4e4
z2Equnvzti49v2nJF8dXt9F93gGhtJLdFLwVsDC2Hi/TMX3d4Yi9Y/lemv+t4SLk
EN5ZzIS5IBOAAlhYEqGa+FRwadsOt2ufTJZd25eG/W+ayQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:11 2026 by rpki-client