This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3132382e302f31392d3234203d3e203532343638.roa
File:                     3230302e32342e3132382e302f31392d3234203d3e203532343638.roa (raw, json)
Hash identifier:          IgMyRZKPU+oyzDFaCMqKZzVZKD7j6vNFvp7lgbgM5mA=
Subject key identifier:   BD:FA:A1:10:9B:BC:59:88:52:3F:4A:DD:C8:BA:E1:A0:73:62:24:6C
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       773454D06787BAEF2BB5FF3511644CD8E4BD94DD
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3132382e302f31392d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:46:41 +0000
ROA not before:           Tue 06 Jan 2026 19:41:41 +0000
ROA not after:            Tue 05 Jan 2027 19:46:41 +0000
asID:                     52468
IP address blocks:        200.24.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:54:d0:67:87:ba:ef:2b:b5:ff:35:11:64:4c:d8:e4:bd:94:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Jan  6 19:41:41 2026 GMT
            Not After : Jan  5 19:46:41 2027 GMT
        Subject: CN=BDFAA1109BBC5988523F4ADDC8BAE1A07362246C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:ce:dd:db:ec:a0:8d:81:67:7a:8b:c9:80:
                    d2:71:16:0d:0a:32:97:c3:e6:d3:15:96:63:29:39:
                    3a:1e:52:9a:7c:b9:4f:f8:c2:ce:7b:43:e9:b3:46:
                    fb:f9:37:22:bf:0d:1c:ec:4b:66:c5:db:67:04:f7:
                    64:e3:7b:37:b9:b3:fa:7a:ab:7c:d0:1c:a4:f4:76:
                    61:cd:8d:88:93:db:34:6d:70:65:73:89:77:e6:c4:
                    2e:62:57:1e:0d:b8:b9:41:94:e3:df:3a:26:ca:5c:
                    0a:34:4f:fd:30:b8:ed:10:55:d8:a4:af:0f:60:fe:
                    07:fe:eb:c5:0f:29:68:aa:73:67:e8:b4:f3:ad:92:
                    5e:4d:a6:eb:28:36:7e:8d:6f:78:33:bb:22:a7:bf:
                    c7:f6:84:2e:53:a8:5f:18:d6:d5:ee:ae:30:c6:44:
                    96:af:5c:76:02:35:ac:34:94:4c:58:d4:7b:f0:5c:
                    5f:84:67:73:d6:23:35:be:01:9d:46:4f:e7:c2:fc:
                    dd:f9:9c:2b:60:0c:20:4a:ff:a4:f9:2e:ca:c8:fb:
                    7e:49:be:dd:eb:6b:3d:95:b2:71:ab:35:2c:0b:f2:
                    99:48:4e:b4:dd:a5:0b:7a:db:71:8f:94:df:21:0f:
                    99:13:2a:a1:05:ba:06:ad:38:db:cc:58:e6:aa:82:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:A1:10:9B:BC:59:88:52:3F:4A:DD:C8:BA:E1:A0:73:62:24:6C
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3132382e302f31392d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:cc:3b:77:1d:96:18:6c:66:91:eb:fd:e4:8c:dd:a1:de:75:
         36:64:ab:56:d0:3d:27:d0:7b:2d:de:55:8d:3f:81:e9:97:61:
         6a:2c:86:8b:69:59:76:df:39:88:e6:32:81:32:70:dd:25:e1:
         46:71:41:e7:f7:54:d7:fd:5d:e4:91:25:f2:53:18:51:70:40:
         14:a7:ae:d0:5f:9e:e2:52:d4:f8:f5:fa:ec:31:50:7a:7a:23:
         24:a5:d3:98:5d:ae:93:6f:1e:99:6e:3b:ca:8b:36:1d:33:b4:
         38:ef:89:a2:d9:14:87:7f:ed:6c:f3:55:c0:c7:52:f6:5e:69:
         c9:21:13:ee:b3:bf:f9:f5:b1:60:d3:e1:90:c3:d7:02:67:be:
         a9:bc:e8:4a:ae:a3:6f:f2:44:5c:46:9d:c4:5c:32:c7:a8:27:
         a4:64:2a:a1:82:9f:43:e8:60:96:76:ca:2a:87:a2:a5:ee:0c:
         74:f6:6e:34:c2:3c:2b:71:fe:06:9a:9d:f3:80:a2:18:ab:19:
         d4:d4:00:a7:0a:e6:96:27:80:d5:49:2d:16:aa:f9:32:e7:5d:
         62:e6:06:17:c3:46:bc:b5:23:73:94:e9:84:44:ec:9b:10:78:
         60:04:99:38:d2:50:18:b8:d6:58:62:3f:f2:c1:6a:5a:24:e6:
         37:07:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 03:52:09 2026 by rpki-client