This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e20323632313732.roa
File:                     3230302e3131392e3137362e302f32312d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          sEbfacbOpPVF/oUP80eDyFP1fjlzsLtzPoPshi6Q9vA=
Subject key identifier:   C7:DF:8E:A3:CE:36:7D:0F:48:9F:EC:C7:C8:68:8F:19:4E:65:57:06
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       79AFB8753D1E73A0F6EA6BC7F410392EE31F7571
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e20323632313732.roa
Signing time:             Tue 06 Jan 2026 19:47:18 +0000
ROA not before:           Tue 06 Jan 2026 19:42:18 +0000
ROA not after:            Tue 05 Jan 2027 19:47:18 +0000
asID:                     262172
IP address blocks:        200.119.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:af:b8:75:3d:1e:73:a0:f6:ea:6b:c7:f4:10:39:2e:e3:1f:75:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:18 2026 GMT
            Not After : Jan  5 19:47:18 2027 GMT
        Subject: CN=C7DF8EA3CE367D0F489FECC7C8688F194E655706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7d:69:cf:8d:d3:74:88:fd:35:79:6a:99:83:
                    55:17:a3:26:8e:1f:f7:f5:73:7a:61:9f:01:23:05:
                    2a:fe:c0:15:13:c9:0a:c5:03:0c:aa:2e:b4:69:ec:
                    2b:5e:a2:5d:54:a4:0e:41:55:ef:fa:44:25:f4:53:
                    34:b1:f4:e7:d9:82:eb:19:73:36:ee:92:72:d2:6e:
                    51:f1:30:8c:83:43:0d:66:98:5f:33:9d:17:b2:28:
                    83:03:c6:b1:e4:e2:d0:1b:f9:de:0f:18:28:4a:09:
                    c8:3c:3f:0c:5b:0d:ea:02:d7:c9:1d:cf:ae:e3:bf:
                    98:5d:75:d0:6b:6c:25:fb:9f:dc:aa:46:ea:11:db:
                    58:6f:00:d7:d0:ca:6e:cd:6d:a0:dd:84:c0:94:d7:
                    aa:b3:a4:5d:8e:74:dd:ce:28:5b:6e:41:31:db:9a:
                    6e:41:91:08:67:0c:2a:aa:0b:b5:ac:89:15:ae:fc:
                    60:f0:04:10:72:6a:99:0b:57:cc:07:01:96:54:50:
                    fd:36:3e:45:ff:35:b2:e4:6e:c2:d8:98:93:88:30:
                    c4:b3:0f:82:bf:37:5a:8b:d0:48:da:49:37:ae:bd:
                    70:ab:00:ac:33:57:54:75:e7:77:aa:fe:6f:ca:ca:
                    38:db:e3:ee:50:5a:d8:9c:74:5d:70:1f:c4:19:a5:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DF:8E:A3:CE:36:7D:0F:48:9F:EC:C7:C8:68:8F:19:4E:65:57:06
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:17:55:9d:e8:39:f6:66:2f:b1:62:25:76:31:9f:09:a6:
         57:4c:09:8c:7d:1a:b4:3d:62:70:a3:77:66:0a:e9:08:ef:a2:
         24:e6:09:63:cd:e4:f4:32:c9:49:73:e9:19:66:a9:8e:70:3e:
         05:a3:5d:9c:09:14:49:5a:5a:db:97:c8:73:31:f2:3d:7e:f1:
         e2:9f:89:3d:2a:33:8f:53:61:f6:00:c2:e4:83:ea:4f:b8:d6:
         eb:08:72:cf:d2:0d:ae:06:85:dd:9c:ce:3a:8e:b2:86:b6:30:
         ee:e7:36:86:f6:61:7d:f2:89:21:18:1b:e1:e9:50:cd:94:34:
         e7:25:1f:46:aa:0a:98:80:60:e7:85:34:09:ab:cc:ca:4b:36:
         6b:e3:13:0a:c3:89:78:97:43:c4:a6:cb:cf:b5:74:24:27:c2:
         fc:04:49:55:b7:76:39:fc:63:16:90:d8:58:36:94:5b:30:3d:
         04:ac:d5:7a:2c:99:8c:f2:7a:ad:1d:47:8c:a1:ca:5c:d3:97:
         a6:8e:d1:76:f9:4d:60:4a:9e:63:f9:e8:fd:64:68:f6:b3:03:
         be:3a:5d:67:36:8a:cc:97:4c:ea:c3:f1:f3:f9:95:21:aa:7e:
         9e:ac:f7:aa:38:f1:e8:01:4b:01:23:7a:96:40:0c:bd:b4:c3:
         f1:c3:78:2b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUea+4dT0ec6D26mvH9BA5LuMfdXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjAxMDYxOTQyMThaFw0yNzAxMDUxOTQ3MThaMDMxMTAvBgNV
BAMTKEM3REY4RUEzQ0UzNjdEMEY0ODlGRUNDN0M4Njg4RjE5NEU2NTU3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfWnPjdN0iP01eWqZg1UXoyaO
H/f1c3phnwEjBSr+wBUTyQrFAwyqLrRp7Cteol1UpA5BVe/6RCX0UzSx9OfZgusZ
czbuknLSblHxMIyDQw1mmF8znReyKIMDxrHk4tAb+d4PGChKCcg8PwxbDeoC18kd
z67jv5hdddBrbCX7n9yqRuoR21hvANfQym7NbaDdhMCU16qzpF2OdN3OKFtuQTHb
mm5BkQhnDCqqC7WsiRWu/GDwBBByapkLV8wHAZZUUP02PkX/NbLkbsLYmJOIMMSz
D4K/N1qL0EjaSTeuvXCrAKwzV1R153eq/m/Kyjjb4+5QWticdF1wH8QZpc0lAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUx9+Oo842fQ9In+zHyGiPGU5lVwYwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM3MzYy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM3MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPI
d7AwDQYJKoZIhvcNAQELBQADggEBAB1EF1Wd6Dn2Zi+xYiV2MZ8JpldMCYx9GrQ9
YnCjd2YK6QjvoiTmCWPN5PQyyUlz6RlmqY5wPgWjXZwJFElaWtuXyHMx8j1+8eKf
iT0qM49TYfYAwuSD6k+41usIcs/SDa4Ghd2czjqOsoa2MO7nNob2YX3yiSEYG+Hp
UM2UNOclH0aqCpiAYOeFNAmrzMpLNmvjEwrDiXiXQ8Smy8+1dCQnwvwESVW3djn8
YxaQ2Fg2lFswPQSs1XosmYzyeq0dR4yhylzTl6aO0Xb5TWBKnmP56P1kaPazA746
XWc2isyXTOrD8fP5lSGqfp6s96o48egBSwEjepZADL20w/HDeCs=
-----END CERTIFICATE-----
Generated at Sun Feb 8 00:10:02 2026 by rpki-client