This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
File:                     3230302e39332e3232342e302f32302d3234203d3e203237393437.roa (raw, json)
Hash identifier:          NSmvAJ0wie9VaG8eWQAIOQUblQ27W/Oo4ilsyRqiD70=
Subject key identifier:   1D:23:C5:CB:5F:E6:65:BE:AB:6E:6F:C5:57:1A:4F:AE:30:56:14:07
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5A6E08699028358B539605DA141A5A85240842FB
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:08:40 +0000
ROA not before:           Tue 06 Jan 2026 19:03:40 +0000
ROA not after:            Tue 05 Jan 2027 19:08:40 +0000
asID:                     27947
IP address blocks:        200.93.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6e:08:69:90:28:35:8b:53:96:05:da:14:1a:5a:85:24:08:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:40 2026 GMT
            Not After : Jan  5 19:08:40 2027 GMT
        Subject: CN=1D23C5CB5FE665BEAB6E6FC5571A4FAE30561407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:03:b5:fa:7d:b2:7b:f5:4c:90:33:de:54:
                    8e:09:9b:ec:11:2c:c7:e2:d6:e9:88:2e:dd:8b:0a:
                    f4:3c:0e:10:3c:6d:6c:78:d1:b7:3d:ff:ad:28:de:
                    2d:f2:ba:d3:e9:74:f9:a2:74:2b:7d:f4:0e:16:40:
                    f7:73:7e:93:b8:24:38:c7:ce:fe:38:d8:52:76:8f:
                    d7:8a:df:05:bf:fc:3f:f0:59:62:02:3a:68:0f:4a:
                    36:87:50:86:02:80:e2:43:4b:1b:0a:ec:83:3f:11:
                    90:7d:a8:7b:ab:12:e6:4c:13:17:12:15:fb:20:67:
                    17:03:93:3c:3d:21:42:f9:92:e4:54:8b:fb:39:94:
                    5d:2a:19:95:6c:c4:1a:4a:34:c7:a8:f9:47:20:0c:
                    fe:a9:df:87:bf:36:81:92:cc:ee:e9:8b:80:4c:a3:
                    fd:1f:20:8d:c0:5b:20:5f:57:32:8f:4a:0c:10:24:
                    0b:f3:e2:88:11:bf:aa:bd:06:bd:c3:61:c2:af:b8:
                    cb:b1:8b:b6:b2:3e:6a:43:0a:ce:cc:8a:18:b0:fb:
                    7d:f7:99:38:fb:65:a4:03:08:a3:ca:e3:78:35:e7:
                    81:54:3f:d5:a4:3e:5a:7e:56:03:51:54:39:a6:ca:
                    00:e3:15:81:b8:74:5a:71:b7:8f:6e:1e:a3:85:31:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:C5:CB:5F:E6:65:BE:AB:6E:6F:C5:57:1A:4F:AE:30:56:14:07
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:0d:7e:a8:28:63:a1:c8:60:89:6a:23:34:f8:20:a6:ff:
         47:e6:fa:b4:4c:3b:f6:34:44:0e:27:90:ea:1e:48:6f:df:a9:
         a7:aa:79:c3:4b:f2:85:1a:78:64:02:ca:af:68:06:9b:b5:d9:
         5b:34:38:96:ea:32:ae:87:a8:75:e2:65:f6:e9:dc:0f:00:19:
         0d:b3:c8:db:3f:85:ab:07:e5:0b:71:05:6d:01:87:c6:1d:4e:
         e2:13:ac:fd:62:9b:45:ac:1a:20:a0:8d:46:75:98:87:89:00:
         4a:0a:3f:24:1f:68:2c:70:10:59:9e:91:07:83:39:0e:3f:53:
         cf:98:9c:89:ba:73:a5:11:01:0b:47:2b:3c:ae:d8:20:d2:53:
         f5:77:71:fd:a0:57:c4:89:bb:1a:9f:82:e3:07:17:7b:50:bb:
         a8:06:a2:69:36:24:91:56:2d:e6:15:1b:45:cf:6e:13:36:4f:
         84:78:fa:b7:4f:30:33:98:fb:1d:a2:21:cd:fe:b4:25:eb:e3:
         72:2d:4c:60:f0:b8:62:96:18:57:a1:f4:c8:5a:c1:94:61:e6:
         55:84:62:c9:c9:75:41:4c:89:5c:59:35:b1:69:65:17:f8:02:
         09:ee:ec:31:d6:53:1d:e0:0d:44:8f:8f:fa:d0:4c:77:60:54:
         ea:5c:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:09:32 2026 by rpki-client