This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa
File:                     3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          9JdBlkVTPFmj9VhZvPwvIQxe1ZJVtKocpeeLZmSo6hU=
Subject key identifier:   8B:08:2E:62:1F:C6:75:1B:82:81:D0:EB:F4:C7:7C:24:DB:D8:41:B1
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       113A41127432C39828DD0ED55FDD80A6E5B1910D
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa
Signing time:             Tue 06 Jan 2026 19:47:21 +0000
ROA not before:           Tue 06 Jan 2026 19:42:21 +0000
ROA not after:            Tue 05 Jan 2027 19:47:21 +0000
asID:                     262172
IP address blocks:        200.119.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:41:12:74:32:c3:98:28:dd:0e:d5:5f:dd:80:a6:e5:b1:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:21 2026 GMT
            Not After : Jan  5 19:47:21 2027 GMT
        Subject: CN=8B082E621FC6751B8281D0EBF4C77C24DBD841B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:9a:c6:ac:dd:a1:f8:72:ad:1d:79:bf:44:
                    80:f3:ba:16:59:85:b5:5f:c9:c9:fa:e1:c0:c6:a0:
                    de:46:24:8b:5b:4e:51:8e:da:5a:a3:3f:6f:cf:f8:
                    a9:b3:fc:d4:62:47:25:63:7e:6b:20:7f:f6:78:8c:
                    ff:28:c9:3f:35:a5:b3:42:6e:b2:9c:10:86:1a:6d:
                    9c:bc:0e:5b:0f:41:ec:96:d4:ee:aa:e5:df:05:93:
                    2b:d4:43:5f:56:69:74:98:5c:d5:70:b3:16:56:9e:
                    f5:9a:47:50:0f:cd:1f:0f:1d:83:dd:03:19:92:29:
                    d0:dd:aa:d4:81:3d:81:91:13:d1:c9:d7:5d:f7:16:
                    18:af:98:72:35:b5:3c:eb:11:2b:8f:75:84:53:7c:
                    67:18:66:f7:d2:46:69:40:ef:e7:0c:8f:c8:bc:98:
                    35:e6:ae:2c:9e:6b:9e:b1:3f:67:ba:fa:0a:54:61:
                    cf:1b:33:36:75:61:c7:1e:6b:eb:ff:1b:9a:60:61:
                    24:ef:e8:71:49:63:28:00:e0:62:fa:5c:03:de:c8:
                    c1:33:76:c8:15:6d:2d:cd:6f:a6:96:a0:ae:ac:ee:
                    82:a2:19:b7:17:e6:f0:83:10:87:05:e4:13:d5:c8:
                    22:9d:18:98:3b:0c:7b:6d:2c:24:b4:9f:25:c8:3f:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:08:2E:62:1F:C6:75:1B:82:81:D0:EB:F4:C7:7C:24:DB:D8:41:B1
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:61:7b:4d:23:2f:d3:80:30:77:94:35:ad:90:4d:6c:d5:
         c6:46:7b:78:4b:df:7f:18:3d:e0:e3:26:7c:bf:ea:bb:b1:f7:
         80:0b:00:0f:75:29:6b:f8:d2:4b:fb:a4:c3:ba:9b:db:e6:5e:
         64:72:38:4f:96:0f:4b:91:d6:07:a2:41:3d:43:56:50:fa:44:
         e4:6b:4e:bc:1e:8f:af:e1:fd:f3:e0:90:2e:0e:47:11:71:97:
         13:4c:3b:fd:dc:a2:81:38:0f:4b:43:8c:11:4c:e6:4c:38:e6:
         7c:ba:d7:70:57:e0:07:99:f2:3d:65:98:d4:5f:74:59:5a:c3:
         98:dd:22:67:14:54:a4:37:ec:9c:8a:4a:19:53:ed:89:af:78:
         6b:0f:c0:b5:89:af:ef:0d:ce:82:4c:f3:24:ac:50:30:cf:28:
         d8:78:c2:af:c2:10:46:51:7b:8e:d4:41:62:ee:73:7e:96:b3:
         32:c4:f4:c0:be:4d:89:c7:99:4a:15:59:3d:48:a5:09:7f:00:
         9f:e1:0c:5d:ec:33:07:28:b6:c6:c3:5f:36:a6:8f:49:34:cd:
         fa:7c:43:50:d6:04:ff:28:48:c6:c4:e8:4e:5c:f9:16:87:60:
         c2:0a:fa:5d:cb:0a:b6:66:c5:1b:64:6f:25:77:18:64:1c:82:
         0d:bb:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:07:27 2026 by rpki-client