This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa
File:                     3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa (raw, json)
Hash identifier:          hVGngTEyB3xKtsRgWnp1wmIKp++vR5SqbY1mV0gbs6k=
Subject key identifier:   03:77:C0:AF:0A:09:55:A4:33:AA:C3:20:E9:25:7B:4E:AB:31:2E:5D
Certificate issuer:       /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
Certificate serial:       3895CD841BFCD868DAC89BE9A947D71F5CE71DDD
Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa
Signing time:             Tue 06 Jan 2026 19:17:07 +0000
ROA not before:           Tue 06 Jan 2026 19:12:07 +0000
ROA not after:            Tue 05 Jan 2027 19:17:07 +0000
asID:                     264747
IP address blocks:        200.33.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:cd:84:1b:fc:d8:68:da:c8:9b:e9:a9:47:d7:1f:5c:e7:1d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
        Validity
            Not Before: Jan  6 19:12:07 2026 GMT
            Not After : Jan  5 19:17:07 2027 GMT
        Subject: CN=0377C0AF0A0955A433AAC320E9257B4EAB312E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:96:96:55:b3:c3:31:70:47:17:97:51:c3:
                    f6:cc:ca:ca:6c:82:e9:2b:88:03:a3:cf:a3:1f:32:
                    89:4f:9e:df:36:ff:18:a4:dc:46:d8:f2:0b:8e:10:
                    75:f9:d5:a9:7f:69:e9:49:cd:e9:dd:b2:e7:b2:88:
                    be:53:52:5a:91:62:f8:1d:d4:0c:3e:3b:97:a2:27:
                    4b:20:c2:a7:e6:37:1c:fa:1e:52:a1:4f:ac:29:d4:
                    41:eb:7c:85:67:c3:c7:29:e3:95:ac:bb:18:5a:28:
                    98:4f:63:c5:e6:3d:07:45:ec:b8:b1:9f:86:fd:e6:
                    b9:86:34:ff:77:f9:9d:79:55:b7:9d:48:ac:10:4e:
                    d7:65:95:95:db:2f:ab:ae:b6:84:81:cf:51:92:58:
                    41:3c:b7:82:f2:f9:24:55:9a:26:df:41:b2:80:09:
                    e8:f6:5e:80:98:da:78:0f:58:29:55:f5:4b:16:91:
                    02:87:71:82:34:c9:13:16:00:96:ef:a1:71:54:7a:
                    dd:8e:9f:bf:74:17:a6:49:5f:18:35:35:e9:f2:e0:
                    37:f9:11:08:b6:59:1e:63:b9:7a:4e:82:f1:58:89:
                    e9:eb:3f:4b:61:8e:6a:75:44:25:ee:e2:af:c0:00:
                    3f:8c:d4:ea:2c:71:f7:ba:82:d8:c8:55:74:69:ed:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:C0:AF:0A:09:55:A4:33:AA:C3:20:E9:25:7B:4E:AB:31:2E:5D
            X509v3 Authority Key Identifier:
                keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:c7:da:36:7b:7c:58:b6:b8:0d:57:32:96:98:b5:60:a4:
         4a:91:c3:34:fa:ab:26:b4:1c:17:97:01:3e:01:d1:1f:29:18:
         7b:46:e8:68:19:3a:2f:61:b4:7e:3a:b1:d8:10:60:ba:2e:90:
         d1:1d:a7:87:32:33:73:06:f8:15:90:f8:dc:5d:f5:2c:3d:96:
         8a:84:9b:8c:97:b3:b6:89:11:e0:4c:52:90:24:84:17:26:8f:
         cd:a9:8f:b3:6d:02:66:be:b2:d7:46:c0:42:54:19:8b:17:8c:
         43:c0:07:2b:ea:86:1a:c2:ca:bc:8a:76:27:7a:e6:cc:3b:5e:
         a1:ac:46:d5:ad:84:ef:c5:6b:d2:d5:50:e6:e2:30:54:ec:73:
         94:d9:ab:75:93:81:ea:0c:75:56:ab:7b:09:1f:b8:27:fa:cc:
         a7:b7:11:e8:7c:4d:25:09:78:8e:f8:32:c1:94:61:06:65:07:
         38:8d:69:bf:d1:b3:06:2c:94:d3:31:64:3c:a6:dc:a9:4b:62:
         02:9e:d3:eb:37:81:c6:d1:ec:42:ba:05:7e:d1:92:0a:23:73:
         d4:ff:26:03:d8:23:53:94:62:cd:f6:95:28:3d:91:be:53:45:
         72:73:44:b0:eb:f9:3a:9d:1f:64:f4:5a:17:0e:6a:e5:b1:dc:
         24:d5:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:57:01 2026 by rpki-client