This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa
File:                     3230302e302e3137352e302f32342d3234203d3e203237373739.roa (raw, json)
Hash identifier:          cMp9JV4egQm6ibtvlneBeTcZ8nsbzXITl8jd20+9eDc=
Subject key identifier:   28:A7:C6:23:1A:46:04:88:C2:05:36:32:0D:EE:9C:1A:72:38:58:4A
Certificate issuer:       /CN=18F32445C7470480959C29EE05393EE1A6A424C0
Certificate serial:       7F81D71C88A4224C991604F2F1B0E542B0AA7CFB
Authority key identifier: 18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa
Signing time:             Tue 06 Jan 2026 19:04:08 +0000
ROA not before:           Tue 06 Jan 2026 18:59:08 +0000
ROA not after:            Tue 05 Jan 2027 19:04:08 +0000
asID:                     27779
IP address blocks:        200.0.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:81:d7:1c:88:a4:22:4c:99:16:04:f2:f1:b0:e5:42:b0:aa:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F32445C7470480959C29EE05393EE1A6A424C0
        Validity
            Not Before: Jan  6 18:59:08 2026 GMT
            Not After : Jan  5 19:04:08 2027 GMT
        Subject: CN=28A7C6231A460488C20536320DEE9C1A7238584A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:4d:19:e9:c3:66:fd:91:7e:96:f1:bb:f2:
                    e0:5a:94:aa:bb:32:58:57:e1:68:8c:05:f1:64:83:
                    fc:75:9f:50:d3:ba:37:3a:91:c9:f3:2f:c8:9b:72:
                    e6:1a:49:33:49:36:7e:c9:16:5e:c5:ec:42:95:41:
                    e5:aa:db:f3:29:e3:a9:87:a9:8d:04:64:8b:cd:93:
                    7a:64:89:67:ec:ca:65:1e:fb:3f:82:b2:93:f8:bb:
                    61:cf:2d:1f:67:73:62:43:5b:d3:99:92:c3:97:e8:
                    84:3b:87:cd:cb:5c:c3:bf:6b:52:30:ce:1d:56:6c:
                    29:08:e0:40:6e:32:ca:e6:52:11:c5:9c:d3:bf:68:
                    84:78:c5:81:e7:e8:c1:c6:c3:72:01:ca:f7:c9:ea:
                    6f:58:39:af:ac:48:70:ce:8e:b5:3b:61:2f:03:95:
                    dc:11:84:f5:f2:33:ba:6d:08:49:c1:9d:45:f9:0d:
                    48:dc:98:3f:c0:0b:65:e9:24:20:a8:67:61:80:36:
                    b2:57:8c:48:ca:c3:ef:9c:2a:76:30:6f:bf:e8:2f:
                    cb:a9:27:4d:f9:7e:8d:5a:fb:dd:c6:3b:57:c0:57:
                    7e:72:bc:a0:11:92:c0:03:49:97:e3:6a:6f:90:5a:
                    b1:8f:eb:e3:7f:ba:12:c4:aa:4b:bc:85:f2:02:5c:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A7:C6:23:1A:46:04:88:C2:05:36:32:0D:EE:9C:1A:72:38:58:4A
            X509v3 Authority Key Identifier:
                keyid:18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:42:a5:f6:cd:70:95:b8:6c:21:21:c7:bd:d3:1d:69:ed:97:
         9b:1f:96:75:f4:88:cd:f7:86:34:c7:4c:fc:74:14:6d:ee:e1:
         30:ce:a9:90:cd:79:c0:f2:51:b3:b9:20:e4:5a:19:e9:9c:86:
         2b:6b:fa:4e:fa:a0:e6:a9:bd:6e:3e:f6:d9:fb:b6:05:dd:44:
         76:fd:b6:b8:24:98:af:6c:1e:e0:c6:18:22:78:9b:f4:c4:c7:
         59:b2:3d:1c:0e:04:a8:6f:e4:2b:13:6c:49:34:3f:5c:6a:b2:
         60:0b:45:56:46:c2:05:c5:25:ad:78:c9:ca:90:4c:fd:ee:67:
         a2:2a:a6:d3:aa:eb:ee:dc:19:4e:0b:b3:df:6f:13:dc:e9:03:
         ed:1f:71:38:8c:57:ac:ca:5e:b5:12:9c:b7:9e:43:26:f3:da:
         5b:ce:07:6c:f5:6a:94:d4:ed:cf:da:8e:31:55:93:8b:bb:2e:
         a9:fd:9e:5f:d9:2d:ea:06:bf:b8:a2:35:34:1e:4b:16:b2:4d:
         50:42:c2:e7:d1:4f:e0:b0:ff:8b:ae:4e:80:56:9a:8b:01:dc:
         e0:59:32:74:c0:b6:6d:b5:c5:02:50:20:f7:0d:1f:51:24:ee:
         43:a8:37:14:04:7c:58:29:88:21:06:cd:b2:f5:63:72:1d:d7:
         c2:54:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:54:39 2026 by rpki-client