This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa
File:                     3230302e32382e3138362e302f32342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          JtAhXjvpm0pLbyi+gLeUycIhYjW0excPIT6Qrsh2ZKk=
Subject key identifier:   1F:B6:61:C8:9E:95:E3:54:00:1E:A1:2C:C5:BF:98:75:18:59:23:5D
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       39A6FCB71AE8F83E5569FF218901CE6A8D1BEF0B
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:36 +0000
ROA not before:           Tue 06 Jan 2026 19:19:36 +0000
ROA not after:            Tue 05 Jan 2027 19:24:36 +0000
asID:                     16629
IP address blocks:        200.28.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:fc:b7:1a:e8:f8:3e:55:69:ff:21:89:01:ce:6a:8d:1b:ef:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:36 2026 GMT
            Not After : Jan  5 19:24:36 2027 GMT
        Subject: CN=1FB661C89E95E354001EA12CC5BF98751859235D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:98:93:9a:47:b7:c4:5b:30:bd:c7:f0:4c:
                    ff:d3:9c:96:47:e6:a3:f0:57:75:94:31:69:a4:60:
                    eb:4e:0e:d0:41:ab:2e:de:74:e3:85:d1:c5:d8:9f:
                    b1:d7:23:e6:11:99:fe:de:83:29:e0:1f:00:e2:ee:
                    60:3b:28:02:6b:fb:cd:db:eb:7f:59:9a:d0:a7:8f:
                    f3:64:fc:89:26:70:bb:de:ba:cd:3f:f8:2d:b3:b4:
                    b7:4e:f6:e6:97:7c:ce:41:8d:d4:a4:02:c9:c0:0c:
                    36:5d:47:e4:e2:f1:14:1d:c6:ae:87:b6:a2:53:ca:
                    06:f3:9f:ef:22:96:28:f8:a1:b3:65:25:8d:1d:f7:
                    ed:6d:fe:f5:61:47:57:76:a9:ee:a1:01:65:29:ea:
                    cc:11:31:c0:c4:07:da:da:a2:19:7e:13:bd:ba:d5:
                    b6:ed:5c:0c:d0:d4:9b:7f:5e:a6:85:c8:6b:80:ed:
                    d1:8e:77:75:d1:77:f9:8f:6c:42:e9:0f:4d:e2:50:
                    d6:d9:ae:64:b2:0b:b7:bd:51:02:c9:de:a6:3a:33:
                    e8:f6:de:9a:5e:1c:6f:e2:b1:a5:42:ba:31:1a:79:
                    2a:c2:4a:87:25:06:6a:0c:a5:99:a1:07:bd:3c:eb:
                    58:57:af:de:13:6e:47:31:60:81:be:9a:70:47:93:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:61:C8:9E:95:E3:54:00:1E:A1:2C:C5:BF:98:75:18:59:23:5D
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:40:01:58:84:10:3c:51:61:c9:54:5a:e1:e8:b6:7b:a1:
         72:7a:72:72:4f:27:7f:c1:bc:5b:db:2c:8f:c2:2a:27:fc:e7:
         6f:a0:3d:02:e4:19:45:c4:ad:63:87:d1:58:2b:4d:71:c3:a3:
         97:c2:45:19:9b:07:09:dc:ba:49:34:fe:5d:83:e4:6b:ab:e8:
         c2:6d:ec:01:8a:5b:67:90:a9:86:d7:9d:f2:ea:0a:bf:8b:89:
         9f:02:13:39:5e:51:33:04:c1:c7:a9:7b:c0:64:9a:21:48:c0:
         7b:d9:9b:6a:0f:f9:1f:58:6d:e6:86:76:1d:92:76:02:17:4c:
         36:fc:1b:b5:71:46:25:1a:d1:38:34:f3:76:31:fa:df:9a:5a:
         6a:a0:b0:ee:c5:0c:89:39:71:64:b2:83:67:d4:a2:3b:76:48:
         d6:c7:94:51:19:96:d6:f4:eb:1d:e7:41:82:97:aa:9c:be:90:
         2c:7b:6b:59:cb:87:eb:3c:12:fe:2e:a2:3e:56:a8:38:bf:23:
         dd:38:3f:e5:16:75:74:10:45:c3:07:41:89:48:b6:77:8b:44:
         1d:50:49:f7:85:df:9c:56:86:66:c7:10:83:ce:e6:90:75:fe:
         4d:a0:16:a0:3a:26:cf:32:00:7f:62:1f:85:e9:9c:43:f9:9e:
         b2:29:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:41:27 2026 by rpki-client