This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa
File:                     3230302e372e3135362e302f32322d3232203d3e203532333939.roa (raw, json)
Hash identifier:          IOM795N/h0Wf0FisESTfOh0YeraYUcITgIDnKavTPG0=
Subject key identifier:   CB:CE:5E:1F:89:09:71:6F:D5:21:8E:45:23:16:12:89:48:88:CE:AD
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       2E6E07FFBDADC0F2228147FA7D9BD15AB3D355B0
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:30:07 +0000
ROA not before:           Tue 06 Jan 2026 19:25:07 +0000
ROA not after:            Tue 05 Jan 2027 19:30:07 +0000
asID:                     52399
IP address blocks:        200.7.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 20:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6e:07:ff:bd:ad:c0:f2:22:81:47:fa:7d:9b:d1:5a:b3:d3:55:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Jan  6 19:25:07 2026 GMT
            Not After : Jan  5 19:30:07 2027 GMT
        Subject: CN=CBCE5E1F8909716FD5218E45231612894888CEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:b8:0b:1d:7b:56:68:cb:31:c5:92:3d:da:
                    e5:6d:dc:e7:f2:92:8a:9f:53:8b:9d:87:cb:d1:71:
                    76:f0:85:d2:01:e8:f0:46:2a:2f:15:55:69:40:56:
                    e9:52:97:7f:f8:eb:19:bb:2f:d1:19:a1:8e:7c:3b:
                    03:8c:f4:c4:b0:65:a9:70:15:ac:57:7d:f8:0d:94:
                    0f:e2:8c:7a:a1:8f:0f:bf:6c:9c:89:55:5e:49:27:
                    94:df:b3:63:b7:31:ff:a6:3b:a3:df:6e:07:97:64:
                    0f:d0:43:99:67:96:db:a6:e8:ba:80:64:80:56:22:
                    fc:ff:0d:9a:4a:c6:ef:ce:41:03:c4:45:af:c6:15:
                    af:23:0d:ba:f8:1e:20:6d:3a:cc:b4:cb:74:e4:61:
                    12:09:97:f3:61:99:1e:11:fd:51:af:9f:f5:e0:19:
                    46:54:ec:cc:ba:d5:d2:30:a7:c3:a3:6b:9e:6a:5b:
                    af:23:53:4b:88:da:2e:ec:a2:00:dc:c0:e9:34:fb:
                    8c:8a:fa:b2:51:07:48:07:e0:a3:19:4e:ea:39:52:
                    af:47:59:51:f9:bc:33:de:ec:73:f5:df:61:cb:73:
                    98:ee:81:40:dc:d2:bd:dd:5b:3a:02:ee:d2:2e:07:
                    fe:7b:f7:ab:8c:2c:49:f3:67:e5:18:24:80:24:a1:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:5E:1F:89:09:71:6F:D5:21:8E:45:23:16:12:89:48:88:CE:AD
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32322d3232203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:08:1c:53:52:a6:a3:2d:09:26:1a:3d:6d:46:6d:5d:4a:
         07:7d:ec:4d:57:b4:79:0c:7c:1e:0a:c1:e4:aa:0f:ab:6e:af:
         c2:95:f3:dc:71:ac:41:cb:d3:ee:98:b8:85:a1:ee:08:dc:5c:
         73:22:52:83:b3:23:ba:5f:f6:90:71:f4:eb:31:13:42:62:f6:
         f8:7d:7e:ab:99:04:f3:a3:dd:31:65:ee:f8:91:2e:16:07:6e:
         7f:fa:a6:06:4e:3b:76:58:89:57:af:65:56:f7:a7:13:49:77:
         b6:b3:81:fc:0e:8e:94:73:54:2e:20:09:f3:58:0a:46:6f:7e:
         7e:df:b0:a1:1a:a4:e7:36:53:f1:c1:63:9a:a9:5b:c9:f9:d7:
         fe:d0:fe:9a:97:c5:f5:3a:7d:5b:08:2f:10:93:ad:25:63:08:
         ec:0e:b8:cb:fd:4a:eb:51:61:8e:47:69:98:af:b8:e1:b5:ad:
         79:b9:dc:1b:4e:c0:61:cb:89:bb:03:8d:20:60:50:5b:0b:31:
         2a:1f:73:d8:f8:19:91:e8:25:6c:06:77:86:1d:05:38:16:ad:
         28:44:06:ea:ec:3f:b3:a6:6b:de:71:ee:a4:e7:4d:01:0c:d5:
         25:08:0a:c5:1f:d9:25:85:50:d0:6c:84:90:be:1c:f5:eb:30:
         b2:05:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 11:31:22 2026 by rpki-client