This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
File:                     3230302e372e31362e302f32302d3231203d3e203237363531.roa (raw, json)
Hash identifier:          jkT6jbgAdh36RU/c62XfKiaHoxA3rdeekulm2gQ6x5U=
Subject key identifier:   29:EB:81:24:5F:41:65:36:F0:49:10:31:00:7A:98:4B:74:59:E6:90
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       5E79F2DCFAF7EA9BB8263C28F8BCFF62A0FD4DFC
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 20:48:17 +0000
ROA not before:           Tue 06 Jan 2026 20:43:17 +0000
ROA not after:            Tue 05 Jan 2027 20:48:17 +0000
asID:                     27651
IP address blocks:        200.7.16.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:f2:dc:fa:f7:ea:9b:b8:26:3c:28:f8:bc:ff:62:a0:fd:4d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jan  6 20:43:17 2026 GMT
            Not After : Jan  5 20:48:17 2027 GMT
        Subject: CN=29EB81245F416536F0491031007A984B7459E690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:0b:21:33:60:48:07:6b:81:3b:ba:f8:dc:
                    86:2a:9a:b9:8c:5b:16:34:51:2c:b1:0f:6f:10:ac:
                    be:61:9a:ca:f4:fe:86:7d:9a:ac:a2:7b:62:74:5f:
                    37:3e:48:00:f1:8a:8a:de:45:6f:68:d2:ea:0b:0c:
                    be:a2:7f:1c:6d:09:49:cd:84:ca:3f:be:e3:40:76:
                    85:3f:03:7d:a9:8c:a2:01:60:6b:0a:e9:4a:fe:b7:
                    0e:65:da:4a:23:83:c8:d7:c7:94:ce:f2:d8:9a:05:
                    ff:ef:b6:e1:f7:39:34:41:70:17:d8:6e:ac:4f:c6:
                    09:82:60:74:7e:eb:a0:92:9b:02:3c:51:14:01:21:
                    f9:50:a2:e0:1c:02:36:6d:af:63:fb:fd:fa:8f:95:
                    34:c1:2e:c9:bd:76:1f:a1:3d:85:15:de:a7:bf:8c:
                    44:8e:53:f3:b1:e8:67:70:fa:5f:ee:c6:27:be:b6:
                    04:56:93:be:a7:0c:a5:07:9d:ac:60:be:66:e6:2b:
                    a4:38:19:7f:a4:98:0c:ac:ab:37:d2:65:0f:76:9b:
                    58:aa:ce:d2:66:a6:8e:3b:88:76:76:a5:38:8d:b0:
                    c3:3a:fa:ef:6b:a3:29:bb:19:8b:33:cc:20:c4:c3:
                    04:87:ef:30:5c:2a:96:94:7e:01:ed:2b:fd:0c:32:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:81:24:5F:41:65:36:F0:49:10:31:00:7A:98:4B:74:59:E6:90
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:33:b0:80:72:b5:66:ce:36:a8:ee:1b:82:19:69:17:1a:
         31:a6:8d:8b:bb:49:8e:98:bc:69:52:9f:b7:11:97:ec:24:f4:
         71:70:4b:58:6f:f6:8a:6d:71:5f:cf:d9:23:53:db:dc:05:65:
         b9:98:1f:a0:88:66:03:7a:7d:3e:38:0e:3c:65:c5:c9:f6:60:
         ae:3d:7b:49:a8:c4:06:93:bf:88:eb:58:2a:6b:4b:63:63:cd:
         2b:f9:ea:92:be:8f:ca:d9:cb:e5:86:2d:5f:fd:8c:d6:d9:74:
         fc:fb:c8:39:5b:5b:67:06:ad:ea:39:3b:51:84:8f:c0:b4:09:
         27:95:2a:59:0f:f9:8a:35:f7:ff:bc:da:0c:2f:d8:b9:59:8e:
         2e:27:82:86:c1:1d:06:fa:3b:53:01:99:ed:14:7d:d6:a9:98:
         b1:83:45:c2:6c:43:57:94:64:b1:0b:9a:af:67:4c:71:9c:0e:
         fb:9e:d7:0f:79:0e:98:58:5e:f3:31:25:b0:da:a1:27:4e:8a:
         d0:64:d4:8d:c2:2b:5b:b9:92:bb:9e:92:f0:ce:79:df:61:42:
         0e:a7:72:1f:4b:bb:7e:f8:80:ce:97:33:07:63:4a:fc:3e:74:
         b5:33:05:1c:7c:08:67:c6:c2:b5:f1:5a:ad:4b:97:f8:ae:fd:
         bf:ca:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:05:13 2026 by rpki-client