This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137322e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3137322e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          wRJUlv1KvNRoHLD4ScFGDyJD1imvvyuvskm7r3m8bWY=
Subject key identifier:   CE:B2:3E:B6:4D:44:1A:6F:1E:75:BC:53:EE:26:4D:9F:55:6E:61:28
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       6EF2D895E50B95603E7C13D898FCF1BE0A313432
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137322e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:32:35 +0000
ROA not before:           Tue 06 Jan 2026 19:27:35 +0000
ROA not after:            Tue 05 Jan 2027 19:32:35 +0000
asID:                     20299
IP address blocks:        200.30.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f2:d8:95:e5:0b:95:60:3e:7c:13:d8:98:fc:f1:be:0a:31:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:35 2026 GMT
            Not After : Jan  5 19:32:35 2027 GMT
        Subject: CN=CEB23EB64D441A6F1E75BC53EE264D9F556E6128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:47:fb:28:e1:58:d5:be:66:1b:b0:63:7a:
                    70:9b:2b:73:9e:4f:22:31:b8:0a:95:f7:fd:70:7c:
                    fa:9b:e0:48:f2:25:16:76:06:a8:a6:bf:e7:a7:81:
                    44:a8:5b:dc:81:a1:e1:9f:40:b6:1a:4c:b8:2d:ce:
                    03:9e:5a:b3:74:8b:26:63:1e:27:97:2e:80:0a:e1:
                    52:88:90:20:b4:b1:2e:5f:1e:62:6f:02:eb:ae:90:
                    16:5d:5c:7e:f4:ff:0e:08:a9:68:88:a9:81:13:d6:
                    77:84:08:4f:eb:96:42:89:67:ad:b8:f7:3a:c2:81:
                    3f:01:06:60:b1:76:f7:29:5c:b2:a3:7f:b2:d1:37:
                    aa:6b:9f:22:39:9b:b3:e5:43:a0:6a:5c:74:f7:cd:
                    6c:ce:5b:82:7e:7e:94:e3:55:27:11:2a:0d:5b:fb:
                    3c:68:28:24:44:03:c2:95:bc:70:16:e7:d8:59:cb:
                    7c:d6:f1:e8:cb:f3:88:d7:07:58:b2:64:44:68:aa:
                    f3:74:a3:d6:16:bc:7c:29:a3:ba:48:d2:c3:60:f9:
                    62:bd:6f:e7:05:a4:8a:04:21:4f:65:c0:5b:96:35:
                    c1:7a:35:5e:50:6e:47:fe:36:03:c8:1c:79:49:e2:
                    30:04:57:44:0a:51:e3:1c:ff:e7:61:f1:a0:71:4b:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:3E:B6:4D:44:1A:6F:1E:75:BC:53:EE:26:4D:9F:55:6E:61:28
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137322e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:69:a9:85:53:3d:a3:cc:28:7f:60:63:76:29:4f:ab:3b:
         ca:78:af:47:41:f7:36:99:99:7d:43:98:7c:43:ff:e1:46:a8:
         63:83:10:ae:15:5e:8f:3f:d6:ae:0d:65:27:fc:06:0a:8e:4d:
         00:45:97:9f:7d:f5:6b:49:a3:b7:dd:6b:d1:32:e1:da:96:5a:
         ae:29:0e:59:b0:fe:63:a6:9d:0c:87:f7:0b:11:ee:7b:7f:7e:
         72:93:a8:a6:9c:02:06:68:6b:6e:34:11:0b:17:13:20:09:99:
         3c:4b:bb:b9:23:f6:ff:a6:c5:77:e7:31:13:bd:4f:a4:6f:88:
         af:f5:75:a5:f5:a8:89:23:1d:b3:bf:4a:1c:72:c6:c9:b7:1f:
         92:ca:8a:7f:fd:4a:c6:01:04:60:d2:fe:f3:9c:53:d8:49:40:
         33:19:f3:cc:c4:7d:c3:4a:bf:f7:36:85:2e:a3:15:0d:8f:33:
         73:e0:c7:36:6c:ef:96:fc:63:69:8f:ca:a9:48:07:fe:49:6e:
         f7:38:7f:93:81:53:d4:7d:df:5f:ae:e5:57:20:02:2a:31:97:
         2c:de:dc:c5:8d:40:c3:4c:11:f2:25:9b:11:af:75:3c:a7:af:
         4c:c9:cc:8f:fa:83:d5:d8:0c:89:c5:a1:0c:6a:74:4f:a9:d9:
         48:cc:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:54:02 2026 by rpki-client