This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e37352e33322e302f31392d3234203d3e203139343239.roa
File:                     3230302e37352e33322e302f31392d3234203d3e203139343239.roa (raw, json)
Hash identifier:          kldlQjDh6QtoXhvcbjOzorzAcyIwLNaxDXZ1fSZUUxo=
Subject key identifier:   9A:87:47:CF:4C:A6:36:F9:7E:DA:2F:25:0B:D6:43:D4:E2:E8:AB:6A
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       08D02EFD2A2C0FD5857193467E08658D99032E22
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e37352e33322e302f31392d3234203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:14:03 +0000
ROA not before:           Tue 06 Jan 2026 19:09:03 +0000
ROA not after:            Tue 05 Jan 2027 19:14:03 +0000
asID:                     19429
IP address blocks:        200.75.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d0:2e:fd:2a:2c:0f:d5:85:71:93:46:7e:08:65:8d:99:03:2e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Jan  6 19:09:03 2026 GMT
            Not After : Jan  5 19:14:03 2027 GMT
        Subject: CN=9A8747CF4CA636F97EDA2F250BD643D4E2E8AB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:f7:1b:d5:81:49:36:bd:a2:8a:66:cc:19:
                    d5:b5:c8:b0:84:b4:f9:ae:bd:33:8a:62:fc:db:9d:
                    22:0a:45:79:dd:21:96:62:1a:94:1a:37:9c:44:20:
                    ed:08:c5:8f:61:7c:a6:83:c1:53:2e:a0:d7:67:06:
                    b1:e1:c9:eb:3a:14:57:33:29:80:00:31:e2:44:9b:
                    b4:c2:95:8e:a1:93:c0:56:50:c6:a7:8a:f4:61:dd:
                    f1:f8:d9:4f:e9:0f:93:79:18:d9:cf:47:bb:15:43:
                    23:be:6b:4d:5e:c7:a2:9d:ae:b9:d3:a2:32:f7:e6:
                    67:dc:6b:c7:1b:a6:28:a9:69:f9:5a:9f:e8:bc:2a:
                    ea:d0:55:c2:e5:1d:5a:de:55:b6:f2:57:6d:bc:a2:
                    a1:be:f7:2d:eb:95:9c:46:83:cb:ec:a0:17:e7:b0:
                    5b:32:a9:07:e4:38:1d:20:0e:54:99:d8:0a:a6:d3:
                    d2:22:9a:29:08:48:13:d2:1a:36:db:30:49:00:4b:
                    ce:f1:ad:8b:68:f7:2f:f5:15:ee:0d:62:a7:2f:88:
                    88:b1:05:22:dc:71:a2:f4:6b:58:4d:55:86:fd:fa:
                    96:71:b4:e6:e4:d7:c6:9e:4f:e7:04:ea:76:f5:93:
                    29:1b:40:0e:8e:6e:6b:4c:40:15:71:c9:ce:cf:1e:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:87:47:CF:4C:A6:36:F9:7E:DA:2F:25:0B:D6:43:D4:E2:E8:AB:6A
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e37352e33322e302f31392d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:d4:8c:15:2e:68:93:7c:7f:07:8b:74:c4:a9:39:67:3f:
         ca:b0:29:d4:61:05:d8:ed:f4:3b:37:72:5d:72:4f:0c:9f:c5:
         60:3b:5b:7e:65:24:9c:89:1b:58:e1:2e:53:9a:42:57:b0:69:
         24:e8:75:d4:c8:bd:be:1d:67:98:15:42:c3:24:d1:07:6d:82:
         f6:a7:1a:4f:1f:58:02:9d:61:f8:66:cb:c3:52:86:d3:7b:d5:
         96:b6:65:fb:c0:af:7a:01:5a:65:6d:04:7e:e9:ff:11:63:bb:
         6b:9b:88:b8:61:8b:30:33:3c:6b:c1:4b:8e:7e:98:f6:6e:46:
         90:d0:4b:58:aa:ec:70:42:4d:4b:b4:76:cc:eb:3e:34:20:8e:
         48:51:e9:d5:a7:d4:f0:ad:42:76:b8:73:76:86:ae:35:6c:af:
         86:c6:b4:52:d9:d0:db:39:4b:e7:a6:51:6c:c7:70:f6:5b:0f:
         f3:e3:94:82:b4:0b:84:9b:bc:4f:81:7d:b0:81:b8:30:ba:8a:
         fd:65:81:ba:cf:23:9d:24:2c:3c:8d:6e:1f:ef:34:8b:de:5d:
         95:0b:09:96:14:f2:11:9e:b3:82:c3:b3:8e:93:9d:02:fe:c2:
         bf:b6:6c:f7:cc:28:bf:1a:2a:9c:6f:e2:9e:e5:55:bc:c8:44:
         69:01:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 11:55:50 2026 by rpki-client