This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230382e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3230382e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          nd3dOgnnWDRqVDZZdpca40VYBVXbjXvhRYSlkCCIyT8=
Subject key identifier:   1E:56:AE:F2:BE:9C:AC:96:2D:3E:21:A7:7C:FA:CC:84:52:92:DD:E3
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       44D3D1CF8C2FC9667C885C0BF04CB1F5BCEEBF63
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230382e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 19:36:42 +0000
ROA not before:           Tue 06 Jan 2026 19:31:42 +0000
ROA not after:            Tue 05 Jan 2027 19:36:42 +0000
asID:                     6429
IP address blocks:        200.14.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d3:d1:cf:8c:2f:c9:66:7c:88:5c:0b:f0:4c:b1:f5:bc:ee:bf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Jan  6 19:31:42 2026 GMT
            Not After : Jan  5 19:36:42 2027 GMT
        Subject: CN=1E56AEF2BE9CAC962D3E21A77CFACC845292DDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:b8:f2:80:fb:62:66:1d:cd:9f:19:c3:ae:
                    6c:be:b6:09:cb:ef:6a:a0:ee:2f:68:81:f9:3b:7d:
                    a1:ff:62:e4:74:c7:ab:47:99:66:a3:fd:18:ca:2a:
                    26:41:5b:64:6a:63:0f:9e:65:fc:c3:16:4b:cb:f0:
                    f0:f4:36:83:de:53:d1:6b:ff:b7:a1:e7:cd:2a:24:
                    6a:16:ca:7b:87:21:ec:f0:b0:9f:0c:89:55:4c:6f:
                    4d:71:6b:81:47:b9:0c:58:07:a8:1c:91:c4:e3:17:
                    d5:68:84:0a:37:0c:1a:7b:d3:22:09:32:a8:06:39:
                    8d:55:b0:fb:90:d0:fd:27:56:ed:95:6f:7c:8a:cd:
                    74:9e:8c:23:35:d1:21:a0:26:af:79:08:51:6d:7f:
                    80:15:7f:52:12:1f:00:ab:13:2a:b3:2b:57:b2:21:
                    af:8e:7e:cc:3b:44:0d:26:d5:67:8c:fb:6c:63:00:
                    fb:5b:24:f1:51:9f:76:b8:2e:5b:48:a9:4e:52:e2:
                    62:dd:50:7d:f5:a9:6a:dc:31:3e:b2:6d:f4:6c:9d:
                    64:71:6d:1a:1b:66:b7:02:a5:33:8f:f2:3b:08:a9:
                    1f:0e:ab:ca:6a:54:48:9a:98:8b:81:81:99:1c:57:
                    36:39:8a:2b:29:44:80:3f:05:7e:30:34:a2:a1:91:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:AE:F2:BE:9C:AC:96:2D:3E:21:A7:7C:FA:CC:84:52:92:DD:E3
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230382e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:0e:f7:6e:19:12:5a:2b:86:b9:09:d3:d2:dc:43:3e:f3:
         d6:1b:ac:69:ba:53:39:fe:36:ad:2c:9f:b0:f5:cd:43:4e:ac:
         b0:23:73:07:17:ca:0c:6b:34:e7:44:01:72:1f:a9:4b:f6:85:
         5b:31:0e:99:8c:e4:9f:54:ee:4f:b6:50:33:b7:2a:76:e8:fe:
         f1:c7:04:30:db:3c:ee:bb:0c:7c:ce:0a:cb:99:17:dd:b0:3f:
         6a:b7:4e:8c:50:ca:3e:96:ed:81:49:91:2d:79:21:aa:86:8f:
         bc:12:15:ac:25:97:c3:73:32:e3:aa:ad:44:fe:a9:b2:d2:5d:
         f7:87:5c:08:f9:78:ae:21:f6:68:a2:69:96:d0:74:6b:52:85:
         e5:cd:ce:23:5e:33:47:4f:91:dc:b4:5d:3b:9c:87:82:ca:7d:
         9e:b5:3c:30:af:3e:a7:40:61:ce:8a:04:50:1f:46:b5:f7:3d:
         7f:0b:84:73:73:d1:1e:75:38:3e:17:82:d1:17:da:99:48:68:
         33:a1:f1:19:1b:09:e2:c0:d4:58:90:91:c5:7d:20:77:07:c3:
         84:61:0e:22:7b:aa:77:be:e0:fd:5b:b5:72:75:9d:4c:21:a3:
         e2:eb:ff:20:d2:9a:aa:79:5c:50:0b:29:fa:53:2f:18:b5:2e:
         ba:ff:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 17:55:37 2026 by rpki-client