This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
File:                     3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          i/X+gqMArhv7OuP8xL0Y2nDkc0hFJUbfqVhXCYXq85E=
Subject key identifier:   1C:39:73:FB:F5:6E:04:D1:0D:CB:58:24:ED:AD:68:C5:13:A0:CF:20
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       52B35FE6F4AD17853663F82A04EE0A609510BAB8
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
Signing time:             Tue 06 Jan 2026 19:32:24 +0000
ROA not before:           Tue 06 Jan 2026 19:27:24 +0000
ROA not after:            Tue 05 Jan 2027 19:32:24 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b3:5f:e6:f4:ad:17:85:36:63:f8:2a:04:ee:0a:60:95:10:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Jan  6 19:27:24 2026 GMT
            Not After : Jan  5 19:32:24 2027 GMT
        Subject: CN=1C3973FBF56E04D10DCB5824EDAD68C513A0CF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:22:68:cf:f5:7e:c3:8e:9b:f8:51:6e:f9:
                    03:41:84:e5:01:b1:1e:3c:80:f1:54:84:e7:c3:57:
                    3e:98:4e:3e:e5:7b:45:ac:e8:a4:ee:b2:19:ca:98:
                    c1:7c:1a:d0:5d:57:5a:7a:15:ee:c9:15:00:55:c3:
                    71:eb:ac:a5:5b:27:6f:fc:1b:1f:39:05:3c:97:08:
                    ac:35:ae:db:05:9d:f0:5b:3d:55:02:70:66:f6:24:
                    10:b6:b2:78:34:8c:2b:4d:bd:54:d2:81:e4:e7:3c:
                    84:46:d4:ed:dc:cd:fa:69:47:3f:14:71:e9:93:dc:
                    f6:30:28:7c:5f:69:cd:f6:49:38:56:a1:a1:10:63:
                    ed:c1:4a:20:f8:7c:b3:17:9e:a9:fc:e1:e5:ee:56:
                    27:fd:91:19:c0:d5:b1:fc:31:de:97:e4:de:d9:b1:
                    9a:49:3e:3f:98:8a:74:c2:73:50:4b:a3:75:be:8f:
                    44:fe:1b:0f:68:13:0f:e6:67:9c:a5:12:99:ad:d3:
                    dd:98:49:57:16:16:31:a8:68:3b:2e:53:76:49:62:
                    a7:b1:41:9e:46:40:5f:a1:03:b8:3f:57:c8:a2:78:
                    ad:6d:a5:7f:26:d5:71:0f:16:92:e4:3c:0c:87:7c:
                    3d:69:80:ce:66:fb:85:2e:4e:b1:a0:33:b7:51:ea:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:73:FB:F5:6E:04:D1:0D:CB:58:24:ED:AD:68:C5:13:A0:CF:20
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:6a:c6:29:1b:db:52:7d:be:43:29:79:00:73:da:60:b7:
         b5:d1:d3:5b:76:54:7b:84:be:12:0f:f7:60:0a:28:45:7a:42:
         26:fe:02:38:5b:16:9d:47:51:0a:d6:c2:0c:79:4e:ee:7d:d5:
         b9:7d:b1:5d:bd:e0:05:a5:3e:43:7a:25:5c:88:c1:f2:e4:8c:
         d2:19:1e:e9:87:fa:cc:e4:77:09:27:be:04:0b:0f:86:2d:2d:
         22:e2:5e:7a:28:22:14:00:40:da:ba:8a:2d:4b:f2:97:20:a4:
         ab:80:96:46:f1:f1:16:8d:c1:b9:2f:d5:0e:3e:72:00:95:2e:
         d1:d6:12:5c:92:e9:2a:93:6e:39:9a:ca:a4:5f:0b:83:f3:6e:
         7f:94:f4:e3:86:1f:cb:0c:e9:e7:93:99:fa:88:b3:77:15:db:
         4f:24:fa:88:5c:5f:75:cf:1c:24:27:51:0f:8e:f8:b8:cc:82:
         09:5f:5c:38:df:4a:90:ac:b4:53:88:d8:22:21:e8:9d:cd:92:
         e7:50:1e:9b:08:70:4e:da:18:18:02:a4:7e:b8:58:3d:c0:5c:
         b2:90:cc:cf:e6:e1:8d:bd:f4:a9:94:5d:c7:9b:40:a3:5e:99:
         e5:b9:52:ed:62:c8:8c:76:05:36:e6:9a:f9:81:d8:d2:a6:48:
         ea:2a:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:56:01 2026 by rpki-client