This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/3230302e31342e38382e302f32322d3234203d3e203238303832.roa
File:                     3230302e31342e38382e302f32322d3234203d3e203238303832.roa (raw, json)
Hash identifier:          9CI7zXIDZHpaNAzgmKZ4oc1JJFupc3kotr7iP5sU9ZQ=
Subject key identifier:   52:D3:7B:C9:66:75:3B:A2:51:C1:BE:0E:47:D6:05:9A:1A:5F:FA:C5
Certificate issuer:       /CN=0596036CA6E8321C25872A5DFE3B2234D1307206
Certificate serial:       77305FD98208289806EDC1530269FAD0A323634F
Authority key identifier: 05:96:03:6C:A6:E8:32:1C:25:87:2A:5D:FE:3B:22:34:D1:30:72:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0596036CA6E8321C25872A5DFE3B2234D1307206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/3230302e31342e38382e302f32322d3234203d3e203238303832.roa
Signing time:             Thu 18 Dec 2025 20:25:00 +0000
ROA not before:           Thu 18 Dec 2025 20:20:00 +0000
ROA not after:            Thu 17 Dec 2026 20:25:00 +0000
asID:                     28082
IP address blocks:        200.14.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/0596036CA6E8321C25872A5DFE3B2234D1307206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/0596036CA6E8321C25872A5DFE3B2234D1307206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0596036CA6E8321C25872A5DFE3B2234D1307206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:30:5f:d9:82:08:28:98:06:ed:c1:53:02:69:fa:d0:a3:23:63:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0596036CA6E8321C25872A5DFE3B2234D1307206
        Validity
            Not Before: Dec 18 20:20:00 2025 GMT
            Not After : Dec 17 20:25:00 2026 GMT
        Subject: CN=52D37BC966753BA251C1BE0E47D6059A1A5FFAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:b7:20:e1:5a:c4:ce:13:73:17:bd:ab:76:
                    35:d3:2e:cd:b9:a0:82:0f:39:2d:75:e1:73:54:d5:
                    da:3f:75:a2:d6:fc:bc:3e:5b:14:eb:b3:52:8b:01:
                    63:5d:78:5b:78:19:e9:56:f9:7d:64:f6:85:d9:a8:
                    55:fd:88:96:61:c8:33:5e:f1:87:19:04:82:63:3a:
                    c4:c5:60:85:46:95:81:dc:66:db:a5:f4:e1:b0:ba:
                    77:e7:d8:e9:82:de:31:56:fa:ac:d6:54:22:f8:0e:
                    bb:27:0f:ef:9b:52:69:88:7c:6c:c9:fb:f1:39:21:
                    5a:e6:57:dc:18:30:d4:63:df:db:8f:56:5f:22:31:
                    03:03:c8:ab:2a:f4:d2:ad:01:e6:52:37:8a:d7:45:
                    ae:8c:a6:a4:f1:36:61:aa:f1:d6:68:71:f1:85:4e:
                    9b:91:83:be:57:d3:56:b7:bf:91:13:d9:c7:1b:54:
                    35:83:00:84:9a:38:84:da:f9:f5:d9:86:4c:73:99:
                    5e:e8:13:ac:02:bf:68:c5:fa:a3:44:90:46:48:33:
                    a1:84:c8:e1:e5:9c:61:1d:0d:c9:b9:13:90:ef:a2:
                    75:97:01:37:8e:c7:d3:16:09:06:99:7f:d6:69:31:
                    fd:50:d0:b1:79:37:3f:29:f3:3b:91:d2:8a:fe:d4:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:7B:C9:66:75:3B:A2:51:C1:BE:0E:47:D6:05:9A:1A:5F:FA:C5
            X509v3 Authority Key Identifier:
                keyid:05:96:03:6C:A6:E8:32:1C:25:87:2A:5D:FE:3B:22:34:D1:30:72:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/0596036CA6E8321C25872A5DFE3B2234D1307206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0596036CA6E8321C25872A5DFE3B2234D1307206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC2A465CBAB2661DC21D3234C82D9B2D3A67B55E9A9C27E0EEF3442555D8B9F3/0/3230302e31342e38382e302f32322d3234203d3e203238303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:2d:ee:71:fb:03:30:a6:a2:db:6e:ac:17:cc:18:a6:d9:
         cb:e8:c2:5f:fe:c4:a3:34:4c:76:70:88:c7:86:02:c7:ba:92:
         d6:43:ba:40:24:7d:76:09:c2:99:76:5a:e8:db:9e:d1:48:a9:
         5e:07:0a:f4:55:b0:05:a4:2e:e0:b9:f6:85:94:d8:79:dc:fc:
         5c:1e:11:43:ac:11:19:29:e0:ed:fc:d7:51:89:66:a9:56:25:
         90:a8:9e:3f:2b:d0:23:e5:0c:b3:f4:0e:7b:12:92:2d:c5:25:
         26:24:9c:26:f9:fc:a0:1a:48:8d:2e:be:19:a2:18:27:f5:89:
         47:c3:96:63:cf:9b:ba:3e:85:41:49:5b:88:d7:aa:e4:9f:a7:
         e1:9c:64:e1:fd:99:d9:95:a0:d2:6a:aa:14:7d:a3:ef:37:ed:
         ec:e8:f9:b2:91:d4:a1:58:c3:d5:7b:6a:6a:29:0f:9f:21:cd:
         a5:62:81:ac:ab:2e:ae:59:ac:41:28:6f:14:62:ee:f8:92:89:
         20:11:58:e8:98:34:a1:6b:81:a8:61:f5:f1:fc:bb:f3:c2:3e:
         c0:cb:2b:7d:23:cf:cb:55:e8:84:8a:3b:10:dd:e7:55:3e:fd:
         5f:6b:71:5c:9d:79:9a:82:a8:48:84:a1:a8:57:17:83:86:55:
         83:94:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:58:56 2025 by rpki-client