This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa
File:                     AS27997.roa (raw, json)
Hash identifier:          lX+snliE+Vf5A+2bfSfxf/ySnKaLPBQCAYsLwyveszo=
Subject key identifier:   02:6D:23:5D:BC:9E:9E:CF:D3:7A:67:97:6B:4F:D0:17:44:76:B7:1A
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       354E88FD1747DD968110BE77CBE12FA1086878C5
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa
Signing time:             Tue 06 Jan 2026 20:57:28 +0000
ROA not before:           Tue 06 Jan 2026 20:52:28 +0000
ROA not after:            Tue 05 Jan 2027 20:57:28 +0000
asID:                     27997
IP address blocks:        190.226.241.0/24 maxlen: 24
                          200.43.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 03:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4e:88:fd:17:47:dd:96:81:10:be:77:cb:e1:2f:a1:08:68:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Jan  6 20:52:28 2026 GMT
            Not After : Jan  5 20:57:28 2027 GMT
        Subject: CN=026D235DBC9E9ECFD37A67976B4FD0174476B71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:27:12:e2:43:db:5c:92:b1:59:fc:32:40:
                    1f:3f:f3:ca:8d:03:54:98:82:bf:c6:d3:23:35:67:
                    cf:4a:6c:a6:ed:9d:dc:23:c2:97:9f:72:4c:56:47:
                    68:3c:ef:c5:0c:da:78:a4:e1:61:3c:e4:55:b2:fd:
                    f2:76:d1:eb:0a:66:a1:fc:0f:0f:6b:10:d4:a8:22:
                    51:65:b1:b4:a6:00:bd:b3:63:c2:30:3b:f5:e6:ea:
                    04:15:16:a1:3c:c1:08:f6:a4:99:5e:7d:97:05:85:
                    7f:d6:e4:5e:92:66:6c:0b:38:9f:18:ab:f8:ab:27:
                    da:41:e5:ec:f9:27:8c:c4:ed:75:e1:ca:d0:1f:02:
                    4b:41:46:2e:29:28:e1:94:01:be:5f:3e:d4:87:37:
                    02:46:b4:7d:99:fc:fc:a1:42:e5:0c:33:a0:c3:8f:
                    b5:1f:8b:56:9a:74:3b:5b:61:76:46:e8:ff:08:e0:
                    a6:2f:2e:b3:f0:75:59:ed:34:64:b5:02:27:22:91:
                    5e:5b:95:26:f2:19:0f:df:47:e6:0b:f8:e5:dd:80:
                    e6:29:fc:d6:dd:71:7c:00:15:99:8d:03:12:bf:5c:
                    28:e8:16:51:f7:7f:b2:9b:89:83:a1:28:3f:63:db:
                    ba:59:40:05:16:ad:42:26:f1:c0:ce:f3:dd:d3:fc:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:23:5D:BC:9E:9E:CF:D3:7A:67:97:6B:4F:D0:17:44:76:B7:1A
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS27997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.241.0/24
                  200.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:a6:ec:89:84:50:d6:5c:c4:1f:a0:d6:a4:6a:cd:40:59:
         b4:99:55:b1:44:af:60:81:1b:f2:3a:b4:3b:26:81:43:f7:a9:
         18:ce:d6:13:46:70:8c:60:ad:c5:83:bb:13:e6:04:5c:40:3f:
         e7:2f:84:3c:f6:ae:d3:41:d3:43:3a:c7:9b:20:e7:65:73:9c:
         ed:0e:10:84:6a:6d:38:01:07:7e:43:83:2b:3f:8c:cb:85:a9:
         0f:12:ae:66:07:2f:4a:44:3a:a4:52:8e:35:45:b4:e0:39:22:
         81:48:1f:54:63:da:76:e7:b8:ca:fb:f6:95:4e:35:fb:04:f7:
         55:35:96:91:89:e5:da:79:dc:20:4c:c0:58:fd:ca:6a:a4:2d:
         2e:48:31:eb:64:db:8f:65:67:3a:44:0e:ad:be:ef:70:0f:c5:
         db:e1:06:e7:3e:6c:1a:9e:72:7e:cb:83:c4:97:5d:06:3d:67:
         c7:8e:d5:e3:00:02:db:85:43:7a:76:1f:b5:df:72:2f:5f:2f:
         e0:13:d6:a4:a0:12:43:d2:9a:f8:8c:85:9a:76:2f:de:c0:4c:
         de:42:ab:be:8c:80:d8:e7:51:01:86:dd:0a:47:23:9f:cc:7d:
         91:aa:99:07:4a:7e:fc:43:6f:04:cb:6a:83:38:5c:f1:e1:45:
         0c:71:3d:96
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUNU6I/RdH3ZaBEL53y+EvoQhoeMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNjAxMDYyMDUyMjhaFw0yNzAxMDUyMDU3MjhaMDMxMTAvBgNV
BAMTKDAyNkQyMzVEQkM5RTlFQ0ZEMzdBNjc5NzZCNEZEMDE3NDQ3NkI3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQScS4kPbXJKxWfwyQB8/88qN
A1SYgr/G0yM1Z89KbKbtndwjwpefckxWR2g878UM2nik4WE85FWy/fJ20esKZqH8
Dw9rENSoIlFlsbSmAL2zY8IwO/Xm6gQVFqE8wQj2pJlefZcFhX/W5F6SZmwLOJ8Y
q/irJ9pB5ez5J4zE7XXhytAfAktBRi4pKOGUAb5fPtSHNwJGtH2Z/PyhQuUMM6DD
j7Ufi1aadDtbYXZG6P8I4KYvLrPwdVntNGS1AicikV5blSbyGQ/fR+YL+OXdgOYp
/NbdcXwAFZmNAxK/XCjoFlH3f7KbiYOhKD9j27pZQAUWrUIm8cDO893T/LQ7AgMB
AAGjggKeMIICmjAdBgNVHQ4EFgQUAm0jXbyens/TemeXa0/QF0R2txowHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNzk5Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAL7i8QME
AMgrNzANBgkqhkiG9w0BAQsFAAOCAQEAtram7ImEUNZcxB+g1qRqzUBZtJlVsUSv
YIEb8jq0OyaBQ/epGM7WE0ZwjGCtxYO7E+YEXEA/5y+EPPau00HTQzrHmyDnZXOc
7Q4QhGptOAEHfkODKz+My4WpDxKuZgcvSkQ6pFKONUW04DkigUgfVGPadue4yvv2
lU41+wT3VTWWkYnl2nncIEzAWP3KaqQtLkgx62Tbj2VnOkQOrb7vcA/F2+EG5z5s
Gp5yfsuDxJddBj1nx47V4wAC24VDenYftd9yL18v4BPWpKASQ9Ka+IyFmnYv3sBM
3kKrvoyA2OdRAYbdCkcjn8x9kaqZB0p+/ENvBMtqgzhc8eFFDHE9lg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 08:09:13 2026 by rpki-client