This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa
File:                     3230302e3131342e39362e302f32312d3234203d3e203238303830.roa (raw, json)
Hash identifier:          HbPCvoKFqjtsDTRXuTTngpRG+c7jQ8YkKQYQsC1Q6L0=
Subject key identifier:   B5:E2:C1:ED:3B:C3:FB:EB:EB:80:7E:9E:75:8D:92:70:1D:08:43:39
Certificate issuer:       /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial:       04FC5213B62C5042245F29609DAC1EE876C99055
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa
Signing time:             Tue 06 Jan 2026 19:41:01 +0000
ROA not before:           Tue 06 Jan 2026 19:36:01 +0000
ROA not after:            Tue 05 Jan 2027 19:41:01 +0000
asID:                     28080
IP address blocks:        200.114.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:52:13:b6:2c:50:42:24:5f:29:60:9d:ac:1e:e8:76:c9:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
        Validity
            Not Before: Jan  6 19:36:01 2026 GMT
            Not After : Jan  5 19:41:01 2027 GMT
        Subject: CN=B5E2C1ED3BC3FBEBEB807E9E758D92701D084339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:55:65:96:20:9f:88:60:d4:08:56:62:71:
                    7e:83:6c:d6:71:37:cd:8b:be:89:9f:6f:eb:9b:ad:
                    e5:30:ac:ae:de:5d:a7:0a:40:2f:6a:15:7a:a1:8b:
                    b0:c7:91:b7:8d:fb:81:02:87:1d:43:da:78:f6:d0:
                    aa:36:ce:72:54:9e:e2:5e:9a:cf:ea:ec:b7:1d:6e:
                    5f:8b:51:62:37:3a:1a:6b:b7:cd:25:9f:1f:13:ae:
                    09:49:a8:80:73:1a:e3:18:f7:a6:0a:b2:66:44:7a:
                    d6:45:84:45:1a:6a:44:c4:e2:11:cc:2f:53:da:fe:
                    d4:35:18:37:40:05:5d:bc:09:89:1e:d3:ac:22:8d:
                    70:e4:dc:27:ca:bc:ce:d8:a0:c4:9b:48:13:43:79:
                    9b:9f:ab:0f:03:be:a6:be:49:30:b6:55:54:d7:4d:
                    ce:67:11:22:4a:57:43:bb:4d:db:85:6a:f1:cc:d4:
                    d4:a1:dd:ee:f3:f0:48:7b:05:8b:b2:18:eb:44:54:
                    41:bb:7c:23:48:d5:01:d5:31:1f:43:9b:51:f2:6b:
                    1d:fc:69:d1:fa:7e:94:cb:0d:a3:10:b0:54:d0:ca:
                    8d:dc:d8:f6:75:bd:63:72:93:4d:12:8b:3d:17:95:
                    0e:3f:9b:85:1c:29:83:3f:bd:48:2f:66:eb:d9:d6:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E2:C1:ED:3B:C3:FB:EB:EB:80:7E:9E:75:8D:92:70:1D:08:43:39
            X509v3 Authority Key Identifier:
                keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3230302e3131342e39362e302f32312d3234203d3e203238303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:91:3d:69:25:ea:b1:f9:8a:10:02:7f:58:dc:1b:e7:c9:bf:
         b9:45:36:4d:5a:d0:8d:14:e1:d5:37:89:4d:cc:40:0b:a3:e1:
         b8:79:86:2b:23:24:33:f9:be:b0:1a:83:64:02:3b:67:58:56:
         4c:85:77:d8:0b:a7:42:62:21:47:50:19:d6:af:2f:88:37:01:
         0d:11:c6:4f:cd:fc:b3:d6:01:ec:5b:23:b3:6a:22:13:64:ee:
         79:ee:1e:df:2e:88:e0:f2:35:df:06:0a:e5:40:68:14:1c:53:
         35:ec:54:28:eb:ec:fd:35:98:ef:5f:1f:2e:73:28:8b:d5:62:
         aa:17:93:37:5b:34:ad:85:c8:5d:05:c3:94:e2:04:28:5c:58:
         66:94:93:78:85:dc:24:18:82:8b:24:bb:79:9f:45:2e:af:4b:
         be:ad:e4:3b:da:46:2f:f2:b4:b7:0b:38:eb:6c:46:85:81:10:
         aa:8e:5d:ce:f1:d5:3f:10:8b:8c:34:2d:a5:51:a9:29:ba:9f:
         d8:72:03:25:c4:8b:95:1b:c3:27:a2:b4:a3:bc:0d:f2:e3:54:
         23:6b:8b:1b:52:31:aa:36:42:35:f6:fb:a3:f9:a6:a1:c9:25:
         bf:bf:53:8a:bd:1b:5f:bd:44:59:3b:32:5e:78:27:35:26:79:
         29:f3:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:53:46 2026 by rpki-client