This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137382e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3137382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          0cXrh5AP7N63NywnuTSbWjEoxpgs0t747vi+5kEzo28=
Subject key identifier:   32:58:2A:0D:6A:E4:33:8C:A3:62:9A:F9:A8:94:EB:F4:12:09:EA:DB
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       4F540CC0AF79236C3B7522C27F93819837D66ABC
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:32:31 +0000
ROA not before:           Tue 06 Jan 2026 19:27:31 +0000
ROA not after:            Tue 05 Jan 2027 19:32:31 +0000
asID:                     23383
IP address blocks:        200.30.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:54:0c:c0:af:79:23:6c:3b:75:22:c2:7f:93:81:98:37:d6:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:31 2026 GMT
            Not After : Jan  5 19:32:31 2027 GMT
        Subject: CN=32582A0D6AE4338CA3629AF9A894EBF41209EADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:91:7d:50:af:d1:19:19:5b:73:b5:2b:58:
                    b2:cc:23:ee:c8:fc:f7:89:8d:ce:df:78:ad:37:16:
                    9e:be:60:7a:89:66:fe:6f:27:34:a5:5b:61:75:bc:
                    55:e9:ea:ef:06:71:28:55:c7:10:81:b4:58:94:85:
                    f0:1e:b6:15:d8:54:a4:95:a6:3c:38:f6:5b:c2:80:
                    25:5e:77:c6:d3:70:15:45:65:09:e6:99:c3:66:ff:
                    b0:3f:24:21:26:5b:08:c8:2e:7b:9b:fd:1f:75:2f:
                    45:ae:01:73:2c:86:b9:f3:46:3e:05:3a:bf:8f:dd:
                    d4:69:19:f4:f0:39:fc:7a:eb:47:5e:c0:84:17:a0:
                    f2:5d:4e:a9:2b:bc:95:b4:4a:82:2f:27:5e:74:f4:
                    9b:e8:35:8a:e4:af:07:ab:fd:3e:79:be:37:a0:06:
                    40:1b:3f:09:85:0d:a7:d4:af:4b:b0:55:b5:06:bc:
                    32:87:96:09:4b:d8:de:eb:8d:91:11:2b:bd:f2:8f:
                    cd:7a:3c:0b:58:3c:89:77:04:72:3c:6d:08:c4:cd:
                    1c:6d:c8:7d:79:19:03:75:3e:d9:83:f6:79:78:53:
                    67:fb:2d:da:cd:5f:1a:5b:59:2d:e2:e5:62:ad:56:
                    19:c1:4d:1a:d4:21:d7:f5:8d:14:80:e1:7e:19:ed:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:2A:0D:6A:E4:33:8C:A3:62:9A:F9:A8:94:EB:F4:12:09:EA:DB
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:b6:e8:ee:e7:ea:68:dd:c1:a2:90:db:ef:dc:59:af:44:
         9a:f3:ff:50:b8:0b:8e:20:73:5a:42:e1:93:8d:41:b0:c1:ee:
         d6:57:8a:36:5a:b8:d7:31:53:79:8b:35:1d:2a:cc:a6:7b:54:
         39:50:eb:36:92:b4:a2:b8:b8:c8:5b:53:2b:f4:8e:44:95:22:
         24:52:45:9d:16:f1:9e:53:eb:4e:a2:69:e4:30:bf:e9:01:d0:
         3a:d1:b0:8a:a6:52:e3:16:6e:74:19:12:ec:f3:b1:79:e1:77:
         7b:41:23:66:7c:57:00:8f:f7:79:39:e1:3b:17:dc:3f:f1:6f:
         96:55:59:c7:11:66:66:bd:5c:62:a0:ed:76:2e:d8:85:53:2d:
         b6:82:1b:a2:80:b1:6f:87:cc:5d:11:d3:2b:4d:12:49:43:a8:
         b5:f5:9e:6d:6b:db:30:f8:4a:50:af:75:94:38:70:92:f0:36:
         e8:f9:50:b4:99:72:84:4c:13:0d:1e:9a:1e:8b:9b:87:e5:c0:
         79:1e:ac:15:5e:22:bf:8b:af:51:0a:6e:e3:3e:20:99:24:db:
         96:61:33:6f:90:20:44:c2:f3:b8:d1:bb:a5:4d:71:c2:31:77:
         b3:08:5f:7a:49:dc:3e:0e:22:4e:4a:8c:ca:85:09:df:3e:e0:
         73:30:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:55:44 2026 by rpki-client