This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3137362e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          INa5kEAoYAX126WnTueo18DN4KYr7rAWG2fqSyc0bgs=
Subject key identifier:   5C:82:7D:56:B4:43:48:41:94:31:60:80:9C:71:58:10:E9:E1:68:21
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       4422F1F56A891F1D5F0DBEA4E41C50EDD2693414
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:32:28 +0000
ROA not before:           Tue 06 Jan 2026 19:27:28 +0000
ROA not after:            Tue 05 Jan 2027 19:32:28 +0000
asID:                     20299
IP address blocks:        200.30.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:22:f1:f5:6a:89:1f:1d:5f:0d:be:a4:e4:1c:50:ed:d2:69:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:28 2026 GMT
            Not After : Jan  5 19:32:28 2027 GMT
        Subject: CN=5C827D56B4434841943160809C715810E9E16821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:38:2c:f1:de:41:47:dd:b4:38:64:eb:32:
                    89:eb:ee:6a:a9:24:60:3e:8e:30:67:4a:ca:16:53:
                    74:6a:cb:91:ed:95:ee:e8:23:7d:dd:57:b2:92:8f:
                    af:67:4f:16:19:88:94:43:2e:c1:6d:bb:10:3e:9f:
                    8c:4c:96:27:1f:3a:3e:75:03:54:c9:bb:af:56:6c:
                    eb:ed:46:cf:5f:9e:b9:bd:88:8a:28:8f:7f:ab:66:
                    9d:3b:94:a0:05:0f:e2:2f:6c:62:d2:81:47:ca:73:
                    95:87:0c:90:23:50:fc:c8:0a:60:b5:6f:7f:91:71:
                    bc:0d:95:a5:52:3c:2a:b0:df:82:ff:71:aa:09:09:
                    72:da:fd:72:04:70:9f:02:07:c0:be:d4:1e:af:71:
                    fb:de:b2:ad:7b:7b:23:ca:bd:7c:b1:84:8b:ed:44:
                    6d:1a:8c:2d:ad:86:63:fa:ca:f7:78:72:f7:94:91:
                    d3:4a:18:3d:27:ff:d0:17:09:d6:55:db:76:04:d8:
                    a4:18:53:c9:e7:5d:f2:df:e5:44:3d:43:68:1b:90:
                    14:8d:17:76:26:a2:02:b8:ef:57:80:cd:c3:61:bf:
                    f9:5f:74:8e:b1:8e:0e:71:a5:0f:1e:31:72:de:dd:
                    02:78:7a:54:41:b0:b2:32:e8:7b:f2:ae:89:1e:b9:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:7D:56:B4:43:48:41:94:31:60:80:9C:71:58:10:E9:E1:68:21
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:af:00:67:82:b4:2a:6b:80:de:a1:d3:10:33:b6:d7:51:
         4e:f4:2b:60:83:17:40:ad:ad:20:5d:2a:e9:d7:c3:d9:fb:2b:
         2f:59:a7:00:da:87:b0:f8:f7:ed:71:ad:a5:59:0e:87:99:35:
         13:04:21:a5:dc:19:28:40:da:29:79:d0:7b:61:25:33:af:c8:
         ec:39:cf:73:3c:ee:9d:76:a6:75:06:56:44:cf:24:75:91:4c:
         6c:14:23:50:5f:ec:43:c2:c3:8b:00:43:ad:20:b5:4c:20:20:
         87:98:bf:c1:8b:c1:03:cc:dd:a2:4a:9d:c6:54:2d:d2:ee:a3:
         27:10:d8:81:ab:15:38:7d:f7:46:53:44:e8:ec:37:8c:fb:a5:
         53:03:79:09:08:3c:2e:ed:63:16:98:d5:b0:b1:28:0c:ea:fc:
         20:65:6d:67:0c:ec:0b:5b:df:44:f8:a6:90:6c:fd:6c:83:3e:
         47:b7:f1:40:1b:8c:cf:5f:7d:7d:c3:3c:a1:3d:30:2d:8a:a7:
         01:eb:76:cc:6c:25:08:3b:e1:10:a7:52:f1:3f:9a:44:c9:30:
         ca:cc:2e:f2:9a:39:66:6d:f4:68:ac:db:61:4c:19:5f:11:63:
         67:a5:3b:33:24:41:68:23:1a:94:96:30:04:6d:5a:8e:41:3e:
         5c:d3:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:48 2026 by rpki-client