This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
File:                     3230302e322e3230342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          ud4RXzGX5+C8jOSa+weW4YEkotECEocndvjEi6ToTNg=
Subject key identifier:   CB:6D:CE:DB:68:14:57:73:C9:A0:AD:08:E3:16:C0:C4:80:A5:0F:94
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       29E0D1896F4F42C1DF21CE263FECB975C36BD70A
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 20:54:28 +0000
ROA not before:           Tue 06 Jan 2026 20:49:28 +0000
ROA not after:            Tue 05 Jan 2027 20:54:28 +0000
asID:                     20015
IP address blocks:        200.2.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:d1:89:6f:4f:42:c1:df:21:ce:26:3f:ec:b9:75:c3:6b:d7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:28 2026 GMT
            Not After : Jan  5 20:54:28 2027 GMT
        Subject: CN=CB6DCEDB68145773C9A0AD08E316C0C480A50F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:ea:1b:cb:92:f9:4c:84:7f:6e:42:7e:e7:
                    f0:d4:1a:ce:f6:a9:7d:e9:db:18:0f:e1:bf:e2:d1:
                    c3:5d:89:7e:2b:3e:36:cf:a2:63:2e:0a:f3:aa:8a:
                    78:da:5b:ac:ef:4b:eb:3f:29:eb:2a:05:a8:50:18:
                    81:89:c2:11:3b:f1:f3:d3:38:5b:16:ee:27:43:82:
                    c0:23:87:58:d9:ff:8b:bc:b6:d6:1c:45:d7:8e:0a:
                    65:3b:0c:fc:de:41:66:80:9e:ff:37:27:4c:0f:a7:
                    13:d8:43:3f:dd:26:29:7a:42:8f:b3:d8:2e:66:e3:
                    7e:13:2b:1f:7c:04:2f:5a:c8:62:02:36:d1:0b:8f:
                    3e:c7:6e:b9:4b:21:cc:91:d7:b7:3e:55:72:43:c7:
                    81:bf:dc:ee:c9:9e:f0:9e:2a:77:b5:2b:69:34:93:
                    ca:07:e3:17:12:df:cf:bb:83:c0:f4:55:16:62:ab:
                    fa:e3:9a:f4:af:26:49:13:07:b9:a8:31:0a:9e:6b:
                    25:52:ee:b9:fd:b7:2d:4f:f8:7a:b3:64:b4:34:75:
                    90:0f:6f:be:d3:32:27:cc:b9:c3:ef:f4:3e:9b:ea:
                    1c:76:b6:5d:39:5c:5f:27:73:62:70:ad:6c:80:66:
                    5d:cf:37:10:94:66:0f:e3:93:10:1e:88:d9:02:fa:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6D:CE:DB:68:14:57:73:C9:A0:AD:08:E3:16:C0:C4:80:A5:0F:94
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:52:92:4c:ac:f7:95:47:09:0f:f5:e2:5e:bd:a6:9f:27:42:
         b0:94:35:c4:65:a4:ff:20:26:64:9c:7c:c2:94:7e:53:eb:1f:
         49:61:75:b5:18:f2:c7:17:89:73:8d:4d:e5:7f:dd:bd:15:4a:
         bc:50:41:b1:b5:c2:2c:ec:ec:9f:55:33:28:97:27:f1:36:32:
         b6:df:f4:cc:5c:46:fa:66:f9:d0:f5:4b:97:3d:d2:61:5f:b8:
         4e:32:47:0c:53:dd:f3:20:81:5c:fc:70:52:24:d0:88:f2:dc:
         90:5c:5c:82:2a:02:44:75:6a:d5:b6:96:b6:b4:99:c3:5b:34:
         7e:c8:06:0a:8f:de:66:26:0b:ed:ad:12:eb:47:fc:d5:22:81:
         14:78:3c:a3:05:80:64:3f:41:62:16:29:de:8f:62:6b:a3:37:
         32:ca:7d:77:09:64:32:e4:4a:d6:e3:eb:b0:0b:ba:9f:e7:0e:
         dd:e2:47:af:ad:80:cc:03:7b:17:ff:71:92:11:6d:99:25:3a:
         1e:76:69:7c:c1:16:e6:5c:b7:10:ee:bb:9d:8d:d1:b0:e6:b0:
         e8:40:b0:78:91:46:50:f4:0a:c7:eb:90:50:67:ce:71:d5:34:
         f0:94:30:c9:52:3e:45:e3:30:b4:61:d3:be:6c:55:28:e8:b9:
         f1:d2:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:33:30 2026 by rpki-client