This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230362e302f32332d3234203d3e203134303830.roa
File:                     3230302e31342e3230362e302f32332d3234203d3e203134303830.roa (raw, json)
Hash identifier:          u30up9YpGvLl6mUPkxiVcKLccRnCwfbdlH4vcOXChnk=
Subject key identifier:   34:2E:1B:66:FE:7A:04:AC:C2:DF:31:FE:8F:33:82:88:A1:83:04:E3
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5AFE55F6AC711018B21FD87A9908D2AE7B9A5E40
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230362e302f32332d3234203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:36:38 +0000
ROA not before:           Tue 06 Jan 2026 19:31:38 +0000
ROA not after:            Tue 05 Jan 2027 19:36:38 +0000
asID:                     14080
IP address blocks:        200.14.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:55:f6:ac:71:10:18:b2:1f:d8:7a:99:08:d2:ae:7b:9a:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Jan  6 19:31:38 2026 GMT
            Not After : Jan  5 19:36:38 2027 GMT
        Subject: CN=342E1B66FE7A04ACC2DF31FE8F338288A18304E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:37:10:fd:07:39:34:ba:dd:20:90:7d:a1:
                    1d:03:86:8b:83:08:2b:84:ae:69:8e:fb:5c:0d:f0:
                    9e:1d:3a:4c:54:8e:97:9d:19:9d:00:e4:18:75:21:
                    67:73:02:4d:ce:da:e3:1b:57:20:e5:5d:40:b3:b6:
                    6a:4b:a2:e2:5f:c0:5a:fe:fa:bf:d4:fd:c1:d0:67:
                    e7:bf:13:5b:f0:16:3a:53:8f:93:86:79:5e:5d:70:
                    67:58:7c:3e:b1:f9:bd:69:e9:23:18:26:82:dc:08:
                    bd:06:d4:12:dd:ed:0b:99:ce:c1:1e:34:8c:1b:51:
                    45:41:d4:d1:d0:04:e6:61:ad:7f:a9:d4:cd:ad:13:
                    2e:1d:8f:b8:17:2b:05:ec:7c:69:7a:e5:a2:0b:f2:
                    4d:9d:92:12:65:b7:80:f4:ab:3c:30:ec:9b:dd:a3:
                    e3:cb:8f:ba:fa:2c:4c:0f:59:5c:8e:c7:bf:04:96:
                    90:80:09:23:23:f7:f6:dc:ae:6e:cd:39:f9:0a:00:
                    c5:49:45:e2:16:a9:02:9a:94:8e:44:8d:69:a9:5e:
                    d0:e1:8c:36:81:c6:73:e6:82:9e:52:b4:0b:a2:f1:
                    3f:c2:c9:2a:d4:b3:21:56:c2:aa:76:9c:3f:47:5e:
                    b0:39:36:b0:b1:0e:76:45:d8:0b:6d:5e:45:99:bd:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2E:1B:66:FE:7A:04:AC:C2:DF:31:FE:8F:33:82:88:A1:83:04:E3
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230362e302f32332d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:2f:83:6c:bb:8f:4b:e9:b3:e2:95:fb:fe:98:50:8e:eb:
         57:8b:1d:06:0d:f2:08:ec:c1:4d:5f:1d:7f:b8:7b:6d:9f:53:
         b6:b7:1f:0c:33:c3:1b:92:e9:6a:1f:f7:74:a9:75:38:be:3d:
         ff:b1:a4:eb:72:5e:25:3e:a2:70:8e:d4:46:94:7f:42:7e:52:
         f8:03:6d:89:5c:1a:99:1b:45:bb:80:93:92:84:85:dd:0a:57:
         b3:b3:e2:2b:fb:e0:bd:5d:6d:96:00:54:e6:7f:d5:08:35:ea:
         31:f4:f4:41:b0:21:13:31:6f:18:c9:ef:b4:13:bd:18:52:31:
         d0:17:95:c6:39:0e:de:01:e3:df:14:9f:a8:63:ff:0c:82:ea:
         76:88:61:37:87:16:2c:2e:c5:35:03:e9:48:1b:7a:47:6d:48:
         12:39:85:04:e0:64:69:2e:d5:63:f6:e3:2c:6c:1a:4a:7e:c9:
         5f:68:0a:f5:ef:b7:97:29:74:d4:38:f8:79:68:f5:20:57:61:
         21:ba:f4:a4:27:8c:64:b4:27:b8:32:82:f5:22:dd:26:e9:ab:
         a1:22:71:c1:32:11:0e:51:0d:74:1e:6c:17:17:3d:8f:04:5a:
         bb:a2:6f:c7:20:6e:fb:41:f6:3f:93:e7:e4:40:fb:49:87:ec:
         ef:2d:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 20:50:36 2026 by rpki-client