This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
File:                     3230302e39312e302e302f31392d3234203d3e2037303034.roa (raw, json)
Hash identifier:          F3ibYZei+R4Jys1XDaPDq8gzq4ERuRrPkg6XLpSkLYo=
Subject key identifier:   C7:E1:58:3E:A6:DF:2C:DC:56:A2:5F:46:60:E1:E3:76:CC:08:2F:CA
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4451333FB28C9746A3EFD4F5319C7CB14E30E037
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
Signing time:             Wed 24 Dec 2025 20:56:04 +0000
ROA not before:           Wed 24 Dec 2025 20:51:04 +0000
ROA not after:            Wed 23 Dec 2026 20:56:04 +0000
asID:                     7004
IP address blocks:        200.91.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:33:3f:b2:8c:97:46:a3:ef:d4:f5:31:9c:7c:b1:4e:30:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Dec 24 20:51:04 2025 GMT
            Not After : Dec 23 20:56:04 2026 GMT
        Subject: CN=C7E1583EA6DF2CDC56A25F4660E1E376CC082FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:f3:de:b0:45:72:61:e5:7f:00:4f:74:54:
                    69:24:31:d0:98:dc:0d:1c:5e:f4:a6:00:7c:3f:f0:
                    7d:5a:e9:83:55:62:da:cb:78:b4:05:31:af:a6:93:
                    5b:53:30:9b:17:5d:1e:ca:a5:b1:63:2f:5b:4b:14:
                    90:63:c2:28:ed:d4:bd:74:8b:3a:26:3b:63:30:98:
                    2f:38:f2:68:a7:2a:48:2f:b8:97:8a:cb:d2:d0:1e:
                    1e:99:c6:56:0d:42:65:a1:af:e2:84:74:d4:93:8c:
                    8d:0d:e2:eb:ed:02:71:59:df:31:39:9c:9d:8b:dc:
                    b5:4a:da:e6:61:b0:9b:a5:1b:f3:4b:11:54:37:99:
                    16:7d:20:d1:64:56:18:28:5b:7a:c9:e9:52:cf:5d:
                    2a:24:94:cf:4e:56:4e:c5:2a:47:c1:5a:b6:ce:cb:
                    59:35:e4:94:ef:12:34:d0:db:0e:38:cb:79:03:0a:
                    6c:ce:1c:d2:bc:65:de:1a:fb:29:a0:18:99:8e:6e:
                    b7:1a:80:16:f8:95:38:01:c3:c5:10:c7:ef:19:f6:
                    98:1e:18:8d:3d:f6:f2:d6:a0:34:85:e0:ee:03:f1:
                    61:5f:4d:bb:25:1c:d6:a6:fe:6d:4e:27:f7:50:02:
                    87:4d:a2:bb:b1:f6:01:16:5f:44:58:a7:b5:8f:cb:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:58:3E:A6:DF:2C:DC:56:A2:5F:46:60:E1:E3:76:CC:08:2F:CA
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:11:c1:26:af:29:f3:00:ec:68:45:8c:66:59:e0:25:1d:55:
         df:3f:f7:ee:6b:2a:65:2e:c5:0a:c1:c7:9b:d1:86:b2:10:18:
         fd:d1:70:c2:75:72:a4:7a:46:ef:a8:7e:b2:34:0d:5a:0d:f0:
         35:bb:5d:89:c4:7f:81:77:63:c4:78:e0:7d:8c:53:eb:3d:71:
         bd:dd:11:02:79:75:80:f9:57:7f:25:dd:25:3b:69:97:31:c9:
         a1:75:85:19:22:e5:d9:00:51:59:55:48:80:27:7c:12:14:81:
         36:75:81:c6:6b:07:ec:b5:1a:39:29:80:c1:32:53:04:27:9e:
         ea:6b:cf:0a:0c:ae:2e:d4:bc:f2:a1:4f:b3:9d:8e:0e:cb:7e:
         0e:23:3d:25:9d:b5:a1:a9:c5:3e:b5:9d:32:09:b8:31:c6:74:
         94:45:ed:81:ec:df:df:1b:b6:ea:c7:b5:10:a6:68:2a:7d:03:
         5a:3b:77:07:e5:fa:12:c8:51:3e:f1:85:73:d9:d1:4d:ea:3e:
         99:87:43:cd:00:a0:21:ce:5c:a7:54:cc:dc:72:2c:e7:3c:5c:
         59:12:7f:8b:89:e1:c0:a2:58:d3:2a:bd:03:a0:ce:68:04:23:
         46:84:2c:b1:4f:74:5e:18:1a:2b:00:82:0c:d8:42:49:8e:8c:
         fb:bd:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:21 2026 by rpki-client