This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa
File:                     3230302e39312e3132382e302f31382d3234203d3e20323032.roa (raw, json)
Hash identifier:          J5ExNiT6l906gS31zwA51qCKLqPy5tLqPuq6yVz2ptk=
Subject key identifier:   83:26:FA:31:28:B4:84:8E:A8:1E:62:C3:2B:57:DF:A5:36:91:DD:88
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       2371434BD9CC3770890AD5AD5E6AE8C09A8EFE8F
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa
Signing time:             Tue 06 Jan 2026 19:30:36 +0000
ROA not before:           Tue 06 Jan 2026 19:25:36 +0000
ROA not after:            Tue 05 Jan 2027 19:30:36 +0000
asID:                     202
IP address blocks:        200.91.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:71:43:4b:d9:cc:37:70:89:0a:d5:ad:5e:6a:e8:c0:9a:8e:fe:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:36 2026 GMT
            Not After : Jan  5 19:30:36 2027 GMT
        Subject: CN=8326FA3128B4848EA81E62C32B57DFA53691DD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:77:8b:6c:0d:96:43:8e:6f:7a:67:5f:2e:
                    f1:ed:e7:64:6e:85:2f:31:93:30:b0:4e:4f:a3:9b:
                    8b:17:a4:1a:22:21:13:f3:a0:7c:04:33:bb:6d:3a:
                    9a:ce:4a:08:2c:83:79:e8:88:b8:c7:50:03:1c:de:
                    d0:7e:3a:d0:70:67:3c:0a:b7:e0:03:6e:6f:dc:49:
                    95:0d:cd:7f:73:10:10:f7:eb:54:3d:96:a8:22:47:
                    05:20:8c:a8:86:f0:7a:d0:40:aa:10:27:95:bc:28:
                    74:50:6e:4d:ff:d1:0f:1f:76:87:8f:8d:60:a0:0d:
                    55:08:32:c3:5d:8c:4d:07:d0:87:68:fb:f7:e6:2d:
                    49:d0:34:b4:2d:6a:9c:ce:88:79:e3:34:cb:e2:d9:
                    5a:e2:53:65:c0:93:72:c3:9a:50:8e:f9:cd:25:54:
                    84:f6:7b:ca:8e:82:52:90:3f:8f:c4:17:17:2c:40:
                    5d:86:7c:66:34:48:1b:92:9b:05:a8:3a:2f:27:66:
                    08:98:f7:9c:e0:65:11:7a:fe:5b:16:81:b2:82:93:
                    96:67:c4:e6:d1:e8:06:28:33:f0:6b:10:45:70:28:
                    d3:8c:75:c4:6d:ea:49:23:9a:b1:ff:8a:1c:2a:91:
                    9d:3c:f5:c0:dc:02:1d:55:11:79:fb:e8:9c:e0:67:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:FA:31:28:B4:84:8E:A8:1E:62:C3:2B:57:DF:A5:36:91:DD:88
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:c3:7f:6f:4e:95:26:2d:ff:40:31:43:a0:3b:5c:37:cf:
         ef:f4:13:13:10:f9:76:00:7a:a5:48:5f:83:ba:2c:83:c2:e3:
         99:37:e0:09:74:bf:36:bf:cd:9c:5a:41:ee:40:35:e8:92:16:
         c1:01:e6:bc:af:50:56:e7:05:79:e1:ae:2c:44:08:34:e3:b0:
         b0:8c:01:80:cf:c8:77:0e:eb:f9:fb:c0:cf:b6:c4:53:49:6b:
         11:ac:82:e6:54:3e:1b:e6:60:a9:04:7a:6f:5f:27:f1:e3:c2:
         0e:9b:b8:10:67:7e:05:87:07:99:51:f8:08:84:5c:db:2d:36:
         8d:d6:cb:1d:5f:3f:d5:bd:c0:60:25:2e:77:3a:ed:7f:31:f1:
         ae:ce:58:c0:f5:fe:6e:db:5d:49:94:81:c0:9f:0f:a8:03:18:
         00:90:51:f8:a9:c8:32:61:9f:eb:71:28:58:c3:10:79:da:39:
         32:bd:e4:e4:3a:27:81:ad:37:52:ec:0f:f9:11:a6:e8:61:08:
         18:33:a6:ef:e4:90:e1:bf:31:db:ed:15:e3:73:99:ff:d9:97:
         d0:87:98:78:9f:9e:dc:7d:18:ea:a4:b3:01:f7:69:d2:25:fe:
         11:07:f8:b2:50:05:16:c9:ab:a7:6a:47:df:7a:71:44:18:81:
         4b:92:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:38:31 2026 by rpki-client