This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
File:                     3230302e32362e3139352e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          mUdwmcqv6V/M3SGM5ubt7nwKg3BihbLmLpSK5L6Dbbs=
Subject key identifier:   BE:DE:98:05:F8:29:3F:22:32:1A:AD:83:4C:F3:08:91:9A:DA:A8:79
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       05E1E5BE3297BEDE401D357C56490042E71E4B4E
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:15 +0000
ROA not before:           Tue 06 Jan 2026 19:38:15 +0000
ROA not after:            Tue 05 Jan 2027 19:43:15 +0000
asID:                     52233
IP address blocks:        200.26.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e1:e5:be:32:97:be:de:40:1d:35:7c:56:49:00:42:e7:1e:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:15 2026 GMT
            Not After : Jan  5 19:43:15 2027 GMT
        Subject: CN=BEDE9805F8293F22321AAD834CF308919ADAA879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:30:30:17:1d:ff:ff:87:7c:45:72:99:09:
                    c5:33:c6:76:38:c8:13:b3:b5:d6:c9:a0:4b:60:ad:
                    06:0a:60:13:d7:93:91:bd:db:91:f5:31:9f:f5:9a:
                    96:d2:06:9b:f2:40:12:36:f8:01:c5:42:3d:b4:04:
                    9b:5d:ef:60:07:ac:a2:50:6e:f2:fc:19:31:29:b0:
                    8a:9f:02:90:ee:6d:29:4f:c0:66:ec:9a:ef:0a:73:
                    a6:dd:72:b7:66:42:ec:34:f9:d5:d9:95:1b:59:a1:
                    89:03:54:4e:19:bc:a5:80:fe:d5:6b:6a:b9:e3:89:
                    db:04:76:97:67:a6:63:b0:27:99:dc:4c:6c:38:39:
                    90:4e:6f:f7:99:e0:68:df:7e:8f:41:19:93:16:eb:
                    4d:38:53:e1:10:94:b2:98:0c:80:59:66:9d:31:c4:
                    ca:d5:65:fe:d2:10:78:a9:fa:b1:1e:98:01:cd:69:
                    3a:4b:9c:f1:7d:e6:e6:b0:71:97:10:f4:d3:10:97:
                    3e:00:e6:4f:f3:d6:e2:c0:9e:ca:f6:f0:f9:bc:f6:
                    1b:c9:48:cc:f3:20:1c:c2:2c:26:7c:f7:6e:a9:22:
                    18:73:34:33:b6:56:6c:9a:ec:23:ba:c3:9f:5b:a7:
                    2e:c0:78:d0:29:65:25:70:48:37:5a:9d:02:bd:88:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:98:05:F8:29:3F:22:32:1A:AD:83:4C:F3:08:91:9A:DA:A8:79
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:23:d0:00:3c:a1:0b:6a:84:28:13:a6:fc:7e:d5:73:df:04:
         0e:4f:a8:d3:2f:a4:52:b3:07:d0:a2:ca:ff:9b:8f:4e:de:b2:
         69:b0:1b:8e:71:3e:6f:59:72:03:ed:ab:aa:2b:43:5f:e9:88:
         3a:b3:8b:10:9a:ff:d6:93:f1:ef:84:bc:e4:67:7f:21:fb:b6:
         12:c9:73:01:7f:eb:9f:a8:d3:16:ca:08:cc:fe:e9:0f:f3:a9:
         d7:fd:e1:a9:ce:bc:2d:5a:18:fc:34:9d:27:e5:1e:7a:7d:0c:
         2e:53:bd:88:47:07:ea:2e:68:5d:7c:27:c7:c1:4f:69:ed:66:
         b5:7e:e9:b6:6e:2c:f5:bf:ef:51:59:4e:66:8f:a8:c9:04:b0:
         ed:8d:fa:9a:e6:35:9d:d6:02:da:2a:c6:76:da:cc:5f:35:21:
         fe:56:2c:63:be:8e:45:bf:d3:ad:03:67:7d:3d:33:f9:12:f4:
         a5:09:22:e2:75:3f:64:dc:e3:29:c5:d1:72:11:d1:5f:13:a7:
         55:d5:1e:ad:8d:3d:e5:ff:5c:a2:ca:ef:76:92:f1:25:cd:aa:
         3a:3d:a9:c8:59:47:8f:58:fc:9c:98:52:8c:15:ad:86:b1:d2:
         0a:a7:2a:58:df:aa:d1:d7:ab:db:74:85:0c:3a:02:46:dd:62:
         38:83:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:31:58 2026 by rpki-client