This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3133332e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          9rItq7W5TAODYHENgJXQJslbNA/ubUlKAEtLL/qcA50=
Subject key identifier:   A5:D9:E1:77:90:C2:7D:01:13:0A:D2:27:57:5E:DE:10:E5:E2:34:3B
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       1AA158F1F4CE0B094CC20B86F4BCA14C06A499CE
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:32:27 +0000
ROA not before:           Tue 06 Jan 2026 19:27:27 +0000
ROA not after:            Tue 05 Jan 2027 19:32:27 +0000
asID:                     20299
IP address blocks:        200.30.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a1:58:f1:f4:ce:0b:09:4c:c2:0b:86:f4:bc:a1:4c:06:a4:99:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:27 2026 GMT
            Not After : Jan  5 19:32:27 2027 GMT
        Subject: CN=A5D9E17790C27D01130AD227575EDE10E5E2343B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:d1:9f:93:99:bb:e3:3f:f2:d9:9c:47:cf:
                    04:18:e1:89:12:fc:8f:b4:46:59:dd:8c:41:df:1e:
                    71:8f:c2:01:03:68:74:a1:45:c8:b1:4c:26:94:85:
                    e6:66:bd:e7:27:b1:3e:67:cf:c0:7f:0e:85:62:3c:
                    0f:bf:d6:ba:5d:ab:3a:3a:ba:8d:81:84:1b:5c:9d:
                    bd:e6:a5:bb:a1:52:4a:18:68:59:c8:b8:02:6c:b1:
                    f2:d7:13:1b:99:9e:f4:c7:73:88:e1:a7:5a:01:7e:
                    55:91:b4:55:44:22:6e:8c:b4:a1:19:57:55:ff:d5:
                    f6:a6:bf:5d:e2:84:09:f3:d1:75:23:37:99:dd:80:
                    5e:bf:c7:82:12:c4:ce:f5:e2:57:7f:bb:4a:3e:3a:
                    45:00:98:a1:ac:ce:19:70:06:3b:f9:67:8e:1f:85:
                    10:0d:93:33:31:72:e4:d1:a1:09:1d:6f:cb:e5:ba:
                    0f:81:cb:24:fa:92:43:e7:1a:6d:f7:11:56:fa:79:
                    6b:5d:8b:7d:eb:fb:39:ec:46:b4:9c:64:5e:02:dd:
                    8b:5c:9f:c6:f5:34:f5:86:06:74:95:2d:84:a7:c6:
                    9c:c5:cf:08:a9:d7:5a:44:0a:c4:25:60:46:ff:b8:
                    a1:30:fb:af:f0:5a:2a:91:4f:79:dd:37:0c:bf:8e:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D9:E1:77:90:C2:7D:01:13:0A:D2:27:57:5E:DE:10:E5:E2:34:3B
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133332e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:c7:14:95:6d:c7:b6:74:23:ac:ed:fc:9c:62:58:7c:1b:
         7f:64:f1:59:83:25:e5:bf:0d:f0:ab:ef:ae:aa:96:e3:56:9d:
         5e:7d:42:8c:7d:dc:a3:fc:9c:94:e4:46:2a:fb:07:10:9f:7f:
         28:23:f3:32:ed:c4:f0:a8:5b:89:61:ca:5e:56:bc:ff:6b:41:
         66:50:b3:7c:4b:03:26:d9:91:f5:66:d7:2d:59:58:ed:ba:3b:
         58:ed:66:72:22:ff:9c:a9:97:cd:23:84:e5:69:53:63:a7:54:
         78:f1:c8:ea:e7:a3:45:9f:4f:37:36:2f:18:97:d1:9a:74:10:
         54:4e:0d:03:d2:94:6f:d3:77:98:2b:d6:15:bc:1c:d2:81:d7:
         33:c8:69:d5:2f:e8:6e:e4:a9:01:35:b7:a4:7c:d8:5d:62:d2:
         2e:61:4d:ef:e6:0f:33:59:10:28:9b:3b:b2:94:6f:ef:cd:d5:
         c1:37:1d:29:e4:21:9d:30:05:21:9a:1c:e0:3a:e3:77:55:b1:
         f8:fa:cb:c9:c6:6a:b7:3f:b2:c1:53:44:cc:b8:7f:2f:0a:32:
         02:9d:7b:82:b8:e7:f2:68:18:d5:4a:66:f3:03:5e:fb:af:7c:
         1c:82:04:e2:77:38:65:13:2c:a0:f0:22:f3:e4:cb:01:ba:fb:
         6d:98:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:56:00 2026 by rpki-client