This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
File:                     3230302e302e32382e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          XXHUubFhSGJijhBV0kCgCtresa+zPYrXfcOXBU2n4/c=
Subject key identifier:   42:80:BA:FA:67:88:5E:4A:39:2A:EA:1C:18:11:D6:14:38:67:AE:30
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       7ED82C40B413B1326A62D63693DE506CBD1BBA42
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 20:53:33 +0000
ROA not before:           Tue 06 Jan 2026 20:48:33 +0000
ROA not after:            Tue 05 Jan 2027 20:53:33 +0000
asID:                     61468
IP address blocks:        200.0.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 05:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:2c:40:b4:13:b1:32:6a:62:d6:36:93:de:50:6c:bd:1b:ba:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Jan  6 20:48:33 2026 GMT
            Not After : Jan  5 20:53:33 2027 GMT
        Subject: CN=4280BAFA67885E4A392AEA1C1811D6143867AE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:7e:59:f4:0e:59:95:da:74:1f:c5:08:e6:
                    05:38:8b:48:29:d1:ee:1b:1a:58:ae:9e:c6:05:0a:
                    cf:9b:97:f4:ce:58:75:af:20:f3:72:bb:0a:ed:22:
                    9f:e4:c4:aa:93:ef:b7:a2:78:60:b3:0c:6b:b5:01:
                    76:94:dd:b1:78:a7:b7:91:9b:72:1b:63:00:d8:d5:
                    8f:37:66:a0:ac:d2:5e:b5:e0:04:47:bf:d0:74:27:
                    c9:fa:42:5c:ad:08:61:68:36:98:98:b3:8c:c6:e8:
                    64:f4:ac:45:53:b5:5a:d1:4c:43:be:00:ca:4c:99:
                    79:ff:a5:74:3a:1d:26:86:5e:e3:8d:55:8c:68:d3:
                    d9:2d:93:e2:1c:a6:bf:fe:c2:cd:0e:84:3a:fa:19:
                    21:a5:74:06:aa:f0:38:7d:66:aa:11:86:73:c0:58:
                    4d:f1:d7:be:a3:c5:6d:bb:d1:29:31:fa:b9:c2:e9:
                    2c:60:bb:94:9c:35:d1:44:5d:37:12:f3:76:82:fd:
                    f8:c3:48:a3:b8:ba:9e:9c:c9:4d:02:1f:19:5b:64:
                    71:53:26:08:5d:56:65:a6:88:aa:90:9c:f2:bc:3b:
                    01:3c:30:99:36:8e:a1:be:84:bc:14:4d:24:45:5f:
                    98:a9:38:01:bf:83:ed:bb:19:8b:43:20:66:83:de:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:BA:FA:67:88:5E:4A:39:2A:EA:1C:18:11:D6:14:38:67:AE:30
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:83:a5:a5:1e:38:65:53:f7:8d:06:3d:92:1d:7f:ba:94:
         c8:e9:1b:41:45:73:90:e4:01:18:58:9d:53:e6:5a:de:ea:86:
         31:50:07:a1:82:39:61:ba:16:7f:a7:f2:d5:43:f1:1a:07:23:
         27:fe:4e:42:a4:b9:94:90:59:b0:d0:aa:f6:63:01:4d:1d:15:
         36:e2:7c:37:45:11:fe:b8:0c:7b:b1:45:9d:14:f8:df:63:cd:
         76:84:6c:c1:82:e7:77:2d:7c:b7:85:74:a4:d7:f1:a3:ca:6c:
         25:13:99:b2:b3:0d:c3:02:85:25:d4:58:17:e9:9c:f0:28:7d:
         76:d4:ce:e5:f0:aa:67:31:4a:45:63:db:22:92:42:48:21:5f:
         11:b1:7f:67:7b:f3:ce:5f:84:4e:87:c8:bc:a3:94:7e:09:28:
         32:12:e2:9e:e6:ea:9a:c8:22:13:6a:59:a4:17:16:df:9c:cc:
         4f:37:c7:c6:7f:fd:7d:76:b9:a7:9d:9e:74:16:08:26:22:d9:
         c4:b2:43:a2:e3:26:a3:67:83:59:72:1a:9f:bc:be:b4:5f:d4:
         5d:ff:0f:69:30:38:c1:c1:14:c0:f1:bf:1b:df:74:05:5f:80:
         58:9d:3b:2f:d5:f6:ee:a6:d5:4b:bb:23:fa:77:7e:1b:10:d8:
         a2:bb:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:25:21 2026 by rpki-client