This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          pGQhdDuNrJ3A5lTU6s7RN+T9lyAMTcYRvVewbJbaZ7A=
Subject key identifier:   DC:35:85:E6:4D:06:EA:7D:8F:EF:0E:F8:F9:C5:2F:C0:D9:1D:E6:FA
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       112006DCE2DED93BAB70D78432477331EA945804
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 06 Jan 2026 19:27:19 +0000
ROA not before:           Tue 06 Jan 2026 19:22:19 +0000
ROA not after:            Tue 05 Jan 2027 19:27:19 +0000
asID:                     28050
IP address blocks:        200.74.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:20:06:dc:e2:de:d9:3b:ab:70:d7:84:32:47:73:31:ea:94:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Jan  6 19:22:19 2026 GMT
            Not After : Jan  5 19:27:19 2027 GMT
        Subject: CN=DC3585E64D06EA7D8FEF0EF8F9C52FC0D91DE6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:13:4f:6d:ef:17:6d:c4:7c:d6:43:d5:09:
                    3a:fb:da:d4:2b:57:70:a8:11:6b:d8:ab:3a:a3:f9:
                    37:86:3a:bc:54:47:e5:df:37:e3:7e:a9:b0:c6:e5:
                    41:b6:f1:ea:47:be:71:f9:75:a2:d7:c4:7e:ab:87:
                    20:1a:81:be:42:f9:3b:8a:ec:74:76:c8:46:83:51:
                    40:3a:35:f5:a6:fb:76:6a:f0:ff:f7:22:ca:32:3e:
                    4a:3d:96:f7:33:ce:99:00:a3:68:3b:b9:7b:32:e5:
                    77:bb:e7:29:d4:b6:b6:12:ee:74:42:84:a1:64:4c:
                    86:bb:f9:d3:63:91:8a:0d:ef:62:a9:4f:a8:73:8f:
                    59:88:70:c5:4f:56:c9:1b:e2:30:5b:74:ba:bf:03:
                    59:ca:6c:b8:b0:1b:76:3b:58:78:16:11:6a:ec:2f:
                    b7:3b:36:ab:82:d3:2f:94:1f:e6:4b:5e:2d:b1:fa:
                    5e:a4:b1:c1:72:f6:a6:e0:0f:89:4a:c5:94:96:f8:
                    1f:87:d0:f0:2f:16:59:21:b1:af:f8:55:fb:04:e0:
                    26:f1:db:f0:e8:73:50:7c:ce:da:81:94:da:bb:60:
                    34:ef:ac:6b:5c:81:f1:94:98:e6:0a:8d:5e:56:3b:
                    25:e2:6b:7e:7e:25:fb:cb:88:c6:54:68:56:44:72:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:35:85:E6:4D:06:EA:7D:8F:EF:0E:F8:F9:C5:2F:C0:D9:1D:E6:FA
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:33:be:4f:fb:bf:55:b6:0b:35:7f:75:c2:8c:14:f0:c6:05:
         2f:73:25:8b:e3:f8:a2:69:ee:b3:56:d0:00:c5:46:f2:80:2d:
         96:14:0c:ba:93:4e:03:90:5b:0a:bc:c4:55:52:e0:1f:9f:94:
         c0:c8:d8:e0:4c:9a:1e:6a:a6:24:92:92:53:cf:e0:80:ef:6d:
         79:da:e4:27:fd:d5:49:d5:5e:26:fa:c7:db:30:52:7e:a0:21:
         6f:8b:54:fc:51:a1:c0:60:61:de:c1:fe:c3:95:a9:30:7f:7a:
         63:83:86:0a:3b:75:1c:02:bc:b5:19:6e:99:b9:29:10:2a:c5:
         e6:c3:99:99:4f:7a:0a:49:52:ff:49:b3:43:d7:79:97:bc:72:
         bf:ab:70:d7:f3:d4:4d:d8:29:65:b1:27:b3:26:e5:6a:b2:66:
         a6:ec:a2:4e:eb:b3:09:62:b5:ef:e9:38:81:2a:08:ca:0d:5f:
         74:44:9e:6b:e4:72:6c:4b:b4:a8:d8:fc:1d:6d:ee:d1:51:38:
         43:e0:4c:08:b8:12:47:b9:ca:7d:95:8f:bd:3b:00:fd:14:52:
         60:55:2f:b2:25:95:f0:a6:84:22:f5:b0:b3:b4:22:18:5b:f5:
         24:6c:11:88:3e:b1:22:c5:7c:1d:07:35:2f:20:f6:ce:9e:9b:
         8d:1c:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:13:26 2026 by rpki-client