This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
File:                     3230302e34372e3137322e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier:          6N0z3c+9Lon5r/bQBIiOptX5dJfNsNkY97Q+KCrBHrk=
Subject key identifier:   C1:1C:7D:AE:2B:5F:F7:C8:12:30:62:B6:EC:1B:2A:CA:F9:01:06:C9
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       7F79EB207EADDDCBC578BA03570F3D862BB4E3A2
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
Signing time:             Tue 06 Jan 2026 18:58:44 +0000
ROA not before:           Tue 06 Jan 2026 18:53:44 +0000
ROA not after:            Tue 05 Jan 2027 18:58:44 +0000
asID:                     14187
IP address blocks:        200.47.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:79:eb:20:7e:ad:dd:cb:c5:78:ba:03:57:0f:3d:86:2b:b4:e3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jan  6 18:53:44 2026 GMT
            Not After : Jan  5 18:58:44 2027 GMT
        Subject: CN=C11C7DAE2B5FF7C8123062B6EC1B2ACAF90106C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:ef:a5:71:26:6d:61:02:ea:11:4b:f5:e1:
                    f2:37:eb:f5:ca:a1:ea:83:13:97:0a:34:cc:b7:e3:
                    4a:d0:e6:f8:32:3f:b8:66:b2:5d:8a:8a:02:91:12:
                    70:7e:f8:0d:42:90:80:8d:f5:7a:9c:66:84:a7:f7:
                    5b:fa:b3:b5:70:db:0b:a3:74:56:38:63:4a:bc:d8:
                    a0:2f:84:aa:4e:c4:c6:98:39:ec:9d:79:6f:9b:a7:
                    be:c5:f3:cc:e1:1c:5f:7a:85:6c:19:2a:fe:5d:11:
                    55:98:ab:a7:a0:8a:f0:6d:06:cb:2a:ed:16:4a:0a:
                    de:ee:1a:2e:4f:75:2d:63:61:f5:e6:4e:4c:b5:9d:
                    42:61:ec:1a:13:05:96:1f:d5:56:c3:ab:1d:9a:54:
                    94:07:23:91:ef:b4:9f:75:94:f5:e4:59:3a:6a:4a:
                    7c:f3:7c:56:c3:7b:14:9d:54:c0:fe:21:39:6f:cc:
                    b9:bf:60:88:f3:4c:d8:a9:46:fe:a6:d2:1f:ce:d9:
                    4c:7e:ca:eb:d8:53:a8:64:7d:a6:f4:00:34:5d:0e:
                    55:64:ed:cc:37:45:1b:38:7e:8a:20:17:c5:2b:e9:
                    72:46:bc:31:e0:1e:58:86:33:04:db:a0:5b:dd:46:
                    23:65:a0:80:90:2d:66:8e:97:1c:e6:8b:65:1b:6f:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:7D:AE:2B:5F:F7:C8:12:30:62:B6:EC:1B:2A:CA:F9:01:06:C9
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:33:c4:22:13:8e:99:55:9d:22:6a:f3:27:86:54:62:f7:
         47:7b:17:a0:99:18:d8:78:53:f1:0a:a1:80:c4:f1:f9:c4:ed:
         58:7d:60:f9:fb:cf:12:a2:9e:15:a3:d9:b6:c0:91:32:16:46:
         4d:d8:77:62:4e:40:e3:71:ff:da:9f:91:e9:ac:d4:1e:50:20:
         b6:a9:16:15:60:5b:34:67:c3:15:24:05:ab:e3:73:75:8c:86:
         bb:1e:40:c3:70:ed:2d:3f:e6:f2:8a:75:60:db:bd:bb:8a:97:
         1a:f6:97:d8:8f:a2:cf:be:0d:d5:5f:eb:29:2d:ba:f8:46:6f:
         50:71:95:bc:27:46:59:e6:5e:c4:01:18:71:ed:8f:2a:90:48:
         ae:9b:59:49:75:2f:8b:d0:8b:47:ab:c5:74:3f:49:62:d7:17:
         bd:fc:eb:4b:10:cf:65:bf:7f:de:58:11:3e:f0:9e:65:df:59:
         68:fb:fa:0b:18:40:81:45:56:6b:39:d6:2f:db:94:35:59:d6:
         ac:14:da:0c:f6:c0:63:3d:31:23:4a:47:b6:c0:f9:e9:24:1d:
         03:90:0e:bc:a8:c2:78:73:16:33:fe:32:e1:59:d4:8a:e1:6a:
         82:3d:c6:79:07:dc:a8:9d:ed:b3:03:13:fd:5c:22:50:80:6d:
         7e:8b:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:23 2026 by rpki-client