This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135352e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3135352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          7tpUFEW0A/Y9iIEBM5/0CW+QOBuFjEvUq5aP8AWdHlw=
Subject key identifier:   FB:35:59:E9:A0:CF:7B:1F:E3:59:59:67:7A:BE:F9:74:83:79:28:3C
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       55FF85F3878ED1EF3FCFF3ACADA08DF788DCE954
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:32:35 +0000
ROA not before:           Tue 06 Jan 2026 19:27:35 +0000
ROA not after:            Tue 05 Jan 2027 19:32:35 +0000
asID:                     23383
IP address blocks:        200.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ff:85:f3:87:8e:d1:ef:3f:cf:f3:ac:ad:a0:8d:f7:88:dc:e9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:35 2026 GMT
            Not After : Jan  5 19:32:35 2027 GMT
        Subject: CN=FB3559E9A0CF7B1FE35959677ABEF9748379283C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:70:21:6a:10:78:11:da:13:49:19:0c:0c:de:
                    20:4a:43:75:6c:66:3a:ae:af:ef:f7:d1:dd:4a:d0:
                    4b:7a:4d:fd:29:3b:3c:c8:a4:9b:94:77:87:c5:38:
                    66:78:2d:bd:01:9c:36:0c:d8:7a:e3:c4:87:3b:bd:
                    5f:b3:53:b1:78:e1:15:27:f6:c1:18:6c:4d:87:db:
                    9a:25:bd:06:2f:b0:ad:8a:b4:89:b4:a5:9a:47:a6:
                    5d:08:90:90:6c:1d:6e:5a:7b:62:3d:fe:36:91:ad:
                    0b:19:b4:0a:1a:b5:ac:24:87:b6:0a:66:5c:c5:82:
                    9c:d7:3f:ee:99:e1:3f:3a:5f:63:97:59:5c:fc:15:
                    89:b6:fe:df:e8:df:5c:7d:ba:55:da:69:c7:a9:4e:
                    08:74:9d:b3:95:e7:5e:81:1d:8e:6c:14:af:ed:aa:
                    6b:4d:eb:9a:32:d9:ed:dc:57:97:4e:d1:7c:bf:3e:
                    3f:b8:11:9a:14:07:03:c4:a0:8a:da:5f:53:c7:69:
                    6e:a4:c7:03:b5:d0:1c:d8:78:4a:4c:42:b0:61:54:
                    67:90:72:5c:48:63:6a:be:ad:86:82:01:b5:20:92:
                    6c:00:c6:2f:be:38:f8:a3:4a:f7:62:a3:c9:e4:b8:
                    01:38:5c:b8:5f:dc:51:aa:25:96:b7:e3:44:23:48:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:59:E9:A0:CF:7B:1F:E3:59:59:67:7A:BE:F9:74:83:79:28:3C
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:df:83:37:b4:e0:9c:a0:d5:7b:b7:63:d3:d0:25:23:9c:de:
         a5:ac:bd:bb:43:b9:bb:80:4c:ea:32:de:6a:38:41:32:ea:e5:
         aa:8d:9f:7e:14:9d:16:bb:3d:53:7a:1f:1e:ce:66:f7:36:3d:
         6b:50:f7:56:3d:d3:ee:0d:11:08:b8:08:b9:7d:42:e0:bd:28:
         d5:cf:6d:4f:11:6b:65:78:15:36:b0:43:40:cb:ad:61:cd:f1:
         39:e2:37:96:39:a3:0d:ac:d9:04:66:23:71:1f:8f:a6:14:3f:
         fb:0f:47:84:50:a2:b5:c7:59:76:c2:6f:12:7d:be:c9:7a:fd:
         63:55:42:18:01:cf:c8:a9:ad:99:7a:5c:8b:d9:4e:cf:6c:99:
         1a:52:af:3b:a0:9d:c0:fb:fb:db:3f:d6:1f:55:b2:01:65:eb:
         c7:fe:d9:ca:84:45:75:27:a1:58:e4:eb:d2:23:49:8d:b2:60:
         89:ed:5d:fd:df:68:89:fe:60:20:86:98:6e:e7:38:2a:c0:7c:
         cd:dc:a9:3d:ae:b8:69:6a:1e:ea:9c:66:3d:14:18:7b:9a:25:
         74:f4:56:40:93:c1:b4:72:64:be:8e:6f:db:47:16:82:45:c9:
         c0:ac:47:01:e8:b4:7e:6c:96:ed:4d:d6:2c:fd:7f:b7:f9:9c:
         72:b5:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:55:21 2026 by rpki-client