This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa
File:                     3230302e35352e3234302e302f32312d3234203d3e203237393838.roa (raw, json)
Hash identifier:          sYAw2mlGEfK7OC7W9SWRUF+s4lXhulMT+W0vpuoMb6E=
Subject key identifier:   E5:42:81:C7:69:1B:15:66:4E:0B:EB:ED:09:D3:06:BC:03:91:8E:4D
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       54C761BE8456557543B4805F05C91FF274028E82
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa
Signing time:             Tue 06 Jan 2026 20:53:38 +0000
ROA not before:           Tue 06 Jan 2026 20:48:38 +0000
ROA not after:            Tue 05 Jan 2027 20:53:38 +0000
asID:                     27988
IP address blocks:        200.55.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 20:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:61:be:84:56:55:75:43:b4:80:5f:05:c9:1f:f2:74:02:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Jan  6 20:48:38 2026 GMT
            Not After : Jan  5 20:53:38 2027 GMT
        Subject: CN=E54281C7691B15664E0BEBED09D306BC03918E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:28:3a:dd:57:4f:89:e0:9c:0b:ea:25:fd:
                    d1:15:5f:26:99:15:87:50:30:58:4f:82:3e:a3:c8:
                    f2:5c:d8:45:94:06:ae:74:0e:c2:07:a4:7d:7e:ac:
                    36:07:b8:08:90:7c:dc:23:e0:8d:56:49:70:ae:ae:
                    80:90:fc:11:7b:fb:26:e7:45:28:76:df:2d:53:63:
                    df:51:3f:d7:52:9c:8d:58:55:f5:62:22:5a:d0:21:
                    c2:ed:ad:4d:6e:ac:42:e7:cc:7a:34:b5:4d:f3:58:
                    d2:aa:04:8b:3a:b9:3b:58:4b:c4:7d:1f:88:90:00:
                    82:14:a7:41:24:fa:fb:fa:cf:12:1c:0b:f3:7d:76:
                    ad:e9:0c:9f:70:b6:46:2c:bf:32:df:80:ec:43:70:
                    59:f7:c1:b5:d1:4b:04:cc:a8:29:6f:30:76:80:3b:
                    c4:45:f4:85:e4:50:9d:ab:32:96:c1:b9:20:89:90:
                    fb:2b:e7:5a:60:c0:c4:1b:0f:53:31:0f:9d:85:75:
                    e5:68:68:76:e0:14:e9:a8:de:d8:53:4a:02:b6:2d:
                    36:49:c6:a5:cf:21:4e:70:fa:2c:61:5c:9a:cd:01:
                    26:56:0b:a3:51:3b:ce:20:50:24:18:cb:99:1c:5a:
                    10:6d:9d:72:bd:21:e9:fd:1c:92:ba:2b:c5:f3:3a:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:81:C7:69:1B:15:66:4E:0B:EB:ED:09:D3:06:BC:03:91:8E:4D
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:05:dc:d8:f7:f2:55:70:09:83:97:3f:d4:ca:07:cf:52:ad:
         a5:6f:39:d6:7b:a1:d8:7d:c1:d3:d9:26:c1:a1:7d:ad:eb:f2:
         8d:5f:de:5b:c5:0a:5a:d3:4e:59:2c:34:d6:40:4a:e5:ba:ff:
         ed:26:03:82:69:33:f3:03:ee:64:35:c1:ac:18:d1:40:8d:8b:
         e9:7e:89:af:a4:47:03:41:88:17:19:f3:ef:6d:ef:e8:4a:9b:
         55:e8:06:68:bd:94:bc:99:b0:f7:d7:52:64:62:7c:37:a6:da:
         2d:a9:eb:90:f3:f9:f5:78:ba:f6:93:cb:07:6b:dc:fd:f2:93:
         3b:17:32:dd:a1:8b:58:65:e5:0f:78:68:77:06:cc:80:c5:64:
         35:d5:9c:a2:a0:82:e3:83:0a:ff:03:d5:62:33:b5:01:0d:17:
         bf:eb:f0:ec:59:84:44:5e:8e:8a:b8:41:6d:6b:7f:2d:86:51:
         1a:ad:a3:85:08:5e:76:54:cb:8f:20:63:51:cb:e8:89:75:be:
         08:54:91:13:2d:bc:b6:77:10:e6:75:d6:3a:99:b8:59:97:ac:
         49:3e:11:e9:9b:10:d9:62:8b:53:05:f9:96:c7:41:74:80:1e:
         e7:c9:54:d4:19:e1:61:29:14:13:74:42:13:98:12:87:eb:43:
         58:77:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:05:53 2026 by rpki-client