This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
File:                     3230302e39312e36342e302f31382d3234203d3e20323032.roa (raw, json)
Hash identifier:          hEnNjmyzxI0q6yUlSo+ColLZzdDLVtPfl5iEpCftE0s=
Subject key identifier:   B6:15:2D:07:A6:96:94:C0:42:9B:5F:7C:35:ED:E4:DC:DB:59:D2:90
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       27551D7E7EE9E2259C3240C9DF4D2BEAFA87C49C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
Signing time:             Tue 06 Jan 2026 19:30:45 +0000
ROA not before:           Tue 06 Jan 2026 19:25:45 +0000
ROA not after:            Tue 05 Jan 2027 19:30:45 +0000
asID:                     202
IP address blocks:        200.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:1d:7e:7e:e9:e2:25:9c:32:40:c9:df:4d:2b:ea:fa:87:c4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:45 2026 GMT
            Not After : Jan  5 19:30:45 2027 GMT
        Subject: CN=B6152D07A69694C0429B5F7C35EDE4DCDB59D290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:7c:89:8e:53:d6:70:72:80:03:bd:74:16:
                    e9:38:2f:95:4a:26:3e:f0:f5:c6:bd:10:bc:94:49:
                    8d:b0:3f:1f:31:db:0e:a6:bc:d7:70:d6:44:75:05:
                    52:10:a0:43:71:02:12:99:7f:0f:60:20:b4:d9:c2:
                    28:af:13:c4:bd:c4:67:dc:a7:da:c1:d1:fd:a5:35:
                    8f:bb:ac:ad:ba:10:f5:35:59:4a:34:33:ff:ee:52:
                    12:14:dc:54:a6:11:45:37:c7:67:36:54:51:ca:59:
                    ef:f1:aa:1c:35:e1:02:f1:ac:1b:c9:74:3b:a6:c3:
                    10:18:92:9e:57:73:a4:ea:a5:08:26:ba:4a:cf:9d:
                    5b:7f:29:97:56:7f:2f:5c:b8:b1:0a:4f:28:57:7f:
                    5e:3b:72:ee:61:f4:a5:c5:b6:a6:74:77:95:1e:c0:
                    0e:d5:03:ab:a8:65:a9:b1:f5:8b:da:e2:65:ce:03:
                    6e:8e:26:77:68:70:2e:2d:19:85:eb:4a:a3:15:16:
                    ce:87:c6:00:4e:a2:91:f6:80:ed:50:00:c4:3f:3a:
                    a6:fc:b9:55:c5:94:1c:b8:67:17:18:e0:58:8a:1f:
                    91:7a:93:30:f9:e6:25:9c:ec:bd:d4:d1:a3:94:16:
                    18:fd:2b:32:3a:14:e3:13:e5:45:e8:94:c6:19:ba:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:15:2D:07:A6:96:94:C0:42:9B:5F:7C:35:ED:E4:DC:DB:59:D2:90
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:78:a0:07:ee:7c:d1:51:51:72:db:96:00:96:f2:43:cf:fa:
         9f:1a:ec:30:61:5a:be:c0:64:af:3b:11:3f:9e:b9:78:e1:a2:
         db:1b:7b:be:10:10:c0:88:d2:fb:7f:c2:ef:fa:94:11:5f:b2:
         c1:ad:f8:95:ba:77:8b:82:fd:26:97:8e:a3:2a:45:ea:8f:90:
         3b:28:b3:e3:39:2a:1c:28:8a:52:1d:a0:e1:ee:8b:90:fc:57:
         33:58:30:6f:8b:ae:7e:66:e9:57:42:c4:5d:92:f9:be:43:c8:
         44:a7:cd:f2:65:95:93:ea:2f:42:ba:1b:36:a9:b9:7b:fc:c8:
         7d:9e:7f:4f:fa:89:8d:95:26:9a:28:91:ce:f8:af:b0:f0:d7:
         4d:69:cd:4b:8c:45:3c:14:6d:b5:7a:89:16:2d:0e:e7:c9:fa:
         7b:c2:b0:5d:e7:29:43:4d:72:e4:a2:48:bc:0c:64:cf:a5:a6:
         f4:be:f9:68:29:06:30:28:72:ae:e5:15:2b:19:a3:38:81:68:
         98:0f:48:eb:19:ba:8c:1b:73:d7:84:f7:8d:ff:1d:f2:06:80:
         e5:44:39:07:a2:d3:f4:91:4f:8e:e8:ab:aa:fd:9b:6c:e0:1b:
         b7:44:b5:c2:31:ba:ee:b4:77:a9:f8:34:eb:62:d4:e6:00:02:
         2f:8f:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:37:34 2026 by rpki-client