This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
File:                     3230302e33302e3133382e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          XxrH313b3wnH0tm0RBJm9mBrKReE4LtMMGvjbEwRAys=
Subject key identifier:   7C:19:44:91:44:1D:37:59:16:34:62:D9:DC:B3:59:45:68:49:09:20
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3668012B6BB534C97B069369E0EABF51FFC1F5C3
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 19:32:27 +0000
ROA not before:           Tue 06 Jan 2026 19:27:27 +0000
ROA not after:            Tue 05 Jan 2027 19:32:27 +0000
asID:                     27773
IP address blocks:        200.30.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:68:01:2b:6b:b5:34:c9:7b:06:93:69:e0:ea:bf:51:ff:c1:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:27 2026 GMT
            Not After : Jan  5 19:32:27 2027 GMT
        Subject: CN=7C194491441D3759163462D9DCB3594568490920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:52:1f:89:41:47:91:7a:cd:5c:75:dd:d0:
                    97:fb:0f:3a:b7:d0:e4:b0:01:63:57:0c:ad:42:ce:
                    72:e3:a5:19:eb:d8:cc:d3:cd:bc:3a:6f:e8:51:1f:
                    c6:2f:ed:e0:06:aa:17:6d:ee:5a:e4:8b:38:c2:71:
                    02:b1:e3:9d:f6:b3:2b:d6:0b:7a:5d:01:ee:2f:95:
                    8b:3c:65:5e:a6:2c:fc:6b:de:c8:36:74:e7:a7:ea:
                    2c:23:5d:2f:e8:53:54:b7:2b:26:18:92:dd:df:70:
                    49:5c:3f:32:4c:00:3e:59:0e:30:c7:65:0e:2a:f7:
                    58:b6:7a:3b:a2:e4:d5:4a:d2:37:45:c2:7a:a1:2c:
                    48:9e:9d:a6:40:ec:46:ea:af:5b:00:5f:1e:2b:b5:
                    b8:3d:e8:54:10:b0:dc:8e:31:63:32:79:30:76:fe:
                    5e:07:bf:4f:db:e1:30:3c:70:e3:52:5f:7e:51:73:
                    fd:d0:43:48:26:6a:71:e3:8f:53:21:a4:82:dc:d8:
                    16:af:62:c0:16:b9:e0:45:2b:8f:ca:48:bc:ed:7f:
                    ef:de:bd:51:f8:1b:13:62:5a:b8:50:6e:d7:58:4b:
                    7a:2e:4c:90:67:bf:f2:98:11:c1:8c:1e:56:be:83:
                    0f:ef:fe:c7:f6:32:db:9d:a5:5b:08:71:7a:e3:3a:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:19:44:91:44:1D:37:59:16:34:62:D9:DC:B3:59:45:68:49:09:20
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:74:58:e1:c4:ce:a9:65:01:7c:88:39:10:b0:8b:9d:53:
         d4:2a:53:a5:26:6f:79:8e:19:fa:58:30:28:df:c8:8d:83:a9:
         94:b5:5c:c3:ed:9a:df:ab:14:42:4d:c0:d8:9d:0c:d0:e8:7d:
         00:15:7e:ab:09:58:83:78:71:5c:6b:37:46:c7:9e:81:a6:fb:
         0d:72:13:5b:6b:33:6f:0b:ef:f3:bf:60:44:db:5b:53:94:2e:
         c2:be:52:7f:04:9c:c3:9b:26:70:eb:f2:05:2c:7f:c7:c8:11:
         c7:87:f4:1b:ef:b1:e7:b5:0b:2b:06:bc:12:73:5a:a1:b1:18:
         be:bc:9f:03:1d:7a:c6:ba:d6:43:5a:ff:25:f0:a0:cd:25:1c:
         83:ce:0f:21:2b:85:a0:e0:44:fc:c7:95:a5:5a:5e:46:fa:4b:
         64:3d:16:1d:83:4e:6f:c7:43:05:5a:00:37:2e:26:27:b6:aa:
         57:4a:36:c7:2f:45:b5:e8:d9:aa:b0:9c:f0:59:d7:e3:41:d7:
         c6:b4:e6:a4:44:7d:3a:ab:70:3a:92:99:94:7b:fe:47:6a:b7:
         18:2f:c3:70:8e:02:f5:2a:36:d1:42:7b:80:db:7f:71:95:64:
         16:c9:ee:b0:ab:0f:a2:60:39:f5:e9:4c:16:6a:fa:dc:97:06:
         68:06:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:59:47 2026 by rpki-client