This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa
File:                     3230302e31312e34302e302f32312d3234203d3e203139343239.roa (raw, json)
Hash identifier:          3qaFjA/xgJyoHeSHRLtZHOFthu+mKjjM/cViGvjLIec=
Subject key identifier:   EB:4F:13:1F:6F:77:DE:40:22:42:A4:90:CE:31:91:F4:2D:07:A0:65
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       6D2CCFCCD07AC34D24CFDDBFDD8C8C7DE38A7C40
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:14:02 +0000
ROA not before:           Tue 06 Jan 2026 19:09:02 +0000
ROA not after:            Tue 05 Jan 2027 19:14:02 +0000
asID:                     19429
IP address blocks:        200.11.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2c:cf:cc:d0:7a:c3:4d:24:cf:dd:bf:dd:8c:8c:7d:e3:8a:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Jan  6 19:09:02 2026 GMT
            Not After : Jan  5 19:14:02 2027 GMT
        Subject: CN=EB4F131F6F77DE402242A490CE3191F42D07A065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:b8:22:b2:04:4c:7b:8c:78:12:86:47:33:
                    51:21:f0:b0:94:01:6a:eb:bc:cc:b6:9a:ae:6a:be:
                    15:bb:47:3e:18:7f:db:27:91:ef:3c:39:ea:bd:ac:
                    e3:a4:2f:30:bf:fb:fe:a8:f7:8f:88:d6:1f:6b:a8:
                    56:7a:c2:f4:0a:b0:cb:0f:5b:17:f1:80:1a:b0:de:
                    ab:4f:5b:bb:62:51:67:5b:2c:65:00:dc:cc:35:a2:
                    cc:5b:aa:c0:60:eb:fb:76:24:ed:14:59:77:cd:69:
                    5b:70:fe:d6:fa:54:6f:e8:61:57:be:e2:3d:8b:9f:
                    41:bf:40:1d:76:b5:12:a1:3f:b7:27:c5:8e:5d:5e:
                    24:dd:ac:05:f0:4b:ca:83:4e:9a:40:dc:9a:b5:05:
                    9c:73:bc:74:bc:87:70:5e:08:55:c9:ea:2f:60:43:
                    18:3e:26:2c:f2:eb:44:04:03:a5:fd:12:fa:21:60:
                    f9:5c:19:60:69:57:9c:20:84:ed:70:46:c4:fa:28:
                    3e:cf:8d:16:b5:da:7b:b6:68:ef:1c:9d:ce:00:88:
                    df:1e:f8:90:a3:76:f4:38:ca:ba:6f:f3:f5:c4:bc:
                    eb:82:21:da:f0:32:34:27:3b:c8:a9:3d:13:64:de:
                    6c:e0:52:c9:6f:dc:f2:d3:5f:33:86:73:af:8f:d5:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4F:13:1F:6F:77:DE:40:22:42:A4:90:CE:31:91:F4:2D:07:A0:65
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:85:4d:18:72:3a:9f:6a:34:34:b1:d5:d0:87:7e:9a:f4:62:
         d3:6c:4a:46:97:7d:59:f0:50:16:bb:bb:fe:17:f6:20:0a:0b:
         83:ff:8f:e3:8e:10:96:76:85:9c:ea:94:d3:f9:d9:11:68:38:
         d4:da:2f:b3:88:a8:e2:66:c6:22:fd:b7:d8:3e:1a:58:a8:36:
         2b:42:fa:36:35:cb:bc:d4:68:ef:67:a2:31:7a:07:db:20:8d:
         6e:e6:49:b6:ad:e1:89:2f:39:7c:b0:02:0c:67:ae:fd:7e:32:
         a1:f1:10:66:70:97:55:c2:07:3e:d7:8c:9b:bf:ce:40:ae:82:
         2b:30:17:02:00:8c:40:92:74:0b:d2:53:2b:4e:56:ba:61:00:
         42:f4:7f:cb:c0:53:cb:a6:ee:25:b5:fd:60:49:f4:8b:06:a7:
         4a:9e:38:d8:e2:f6:09:84:f9:51:ce:82:df:43:6e:3f:aa:93:
         74:30:07:c9:13:9b:80:db:49:f1:3c:d7:b0:28:ff:05:0e:95:
         31:b6:f0:0b:27:e0:81:08:4c:cb:0b:7c:db:a3:9c:7a:a7:37:
         5e:e1:27:80:02:17:3a:7f:cb:ea:40:82:ff:58:24:be:ef:b2:
         93:e4:dc:cc:f5:53:89:4f:fc:7a:f7:1f:15:cb:d8:5e:29:58:
         23:5b:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 11:55:38 2026 by rpki-client