This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/3230302e31302e3233352e302f32342d3234203d3e20323731383939.roa
File:                     3230302e31302e3233352e302f32342d3234203d3e20323731383939.roa (raw, json)
Hash identifier:          42mQk6CpcB+wFzvC6Kz9M5FMsqheyazSMvTn+KcFdtI=
Subject key identifier:   B0:88:E6:99:45:BD:73:B4:E2:8A:43:24:2A:83:FF:CB:6B:97:79:F1
Certificate issuer:       /CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
Certificate serial:       5D6B2DFB1131BC4EDA59765400849391B887B43B
Authority key identifier: 0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/3230302e31302e3233352e302f32342d3234203d3e20323731383939.roa
Signing time:             Tue 06 Jan 2026 19:23:41 +0000
ROA not before:           Tue 06 Jan 2026 19:18:41 +0000
ROA not after:            Tue 05 Jan 2027 19:23:41 +0000
asID:                     271899
IP address blocks:        200.10.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6b:2d:fb:11:31:bc:4e:da:59:76:54:00:84:93:91:b8:87:b4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DBCCD52BCE922D836F133FF30209D2BA5683C71
        Validity
            Not Before: Jan  6 19:18:41 2026 GMT
            Not After : Jan  5 19:23:41 2027 GMT
        Subject: CN=B088E69945BD73B4E28A43242A83FFCB6B9779F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:1b:a8:35:dc:3f:6f:53:9c:52:57:69:f8:
                    06:df:ba:74:1c:2c:b5:fb:f6:8d:e1:c2:6d:43:c7:
                    fd:95:d5:6e:b1:ae:21:37:39:eb:f4:d3:f5:26:b3:
                    b2:6b:e7:b4:a5:4a:74:30:82:39:24:66:0c:b5:ba:
                    b1:04:5f:c9:79:e3:0d:19:08:ce:ec:60:28:21:da:
                    f9:80:9a:7c:84:34:23:73:90:8c:68:06:c9:58:84:
                    7b:8c:5e:54:a1:7b:3d:67:d6:2b:9e:d1:1a:48:22:
                    09:7c:ea:50:ef:f3:63:42:c4:f1:a6:0a:7d:02:f8:
                    54:b8:1c:79:8d:46:a4:b6:19:8e:e1:b6:4a:67:33:
                    86:98:e9:f0:9f:fb:d7:4a:6f:75:8f:99:4e:67:e1:
                    9f:db:92:2b:86:20:1d:b2:33:a3:42:04:c0:c7:0c:
                    54:de:66:e9:e3:e3:6d:3c:e5:5e:42:48:4a:57:6c:
                    72:8d:10:50:83:94:b2:94:e6:23:63:f4:e4:80:90:
                    f5:19:3f:65:f8:b2:f8:a6:17:16:f2:c5:f9:3b:0f:
                    ca:e7:2b:b4:a6:ee:5c:e9:5c:70:ac:84:a4:69:96:
                    80:05:00:f9:30:cc:63:75:b9:b8:e8:5e:99:e3:09:
                    49:ca:75:42:12:8c:19:61:48:86:c7:35:89:c4:59:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:E6:99:45:BD:73:B4:E2:8A:43:24:2A:83:FF:CB:6B:97:79:F1
            X509v3 Authority Key Identifier:
                keyid:0D:BC:CD:52:BC:E9:22:D8:36:F1:33:FF:30:20:9D:2B:A5:68:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DBCCD52BCE922D836F133FF30209D2BA5683C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0E22DD087B9967815BADA49E867AB76D587AE0392E0A1CC8E74FAED9D8F6E0E/0/3230302e31302e3233352e302f32342d3234203d3e20323731383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:eb:e6:52:15:e1:46:f4:dd:ee:62:d3:06:04:4e:bb:cb:cf:
         a1:4b:79:65:db:60:3f:aa:54:2d:a1:af:c1:df:fc:fa:a6:aa:
         63:f5:74:4a:fc:d9:1c:3d:f3:cf:ab:dd:29:c2:44:ff:e0:2a:
         72:fa:cf:46:38:42:c4:41:e2:04:24:1e:4e:aa:50:9f:4d:20:
         b2:3f:a6:5a:48:5e:2b:e0:d3:c7:db:57:82:49:f2:7b:9b:b1:
         32:ac:01:4a:e7:e5:2f:c9:71:c7:3a:e1:01:ec:76:72:5a:e3:
         cd:1a:80:f9:7a:56:36:b0:9b:90:c0:cb:13:18:26:73:36:4d:
         82:80:e6:13:db:b1:53:c7:8e:d8:27:a4:4e:ae:95:52:36:ab:
         97:dd:6c:7a:66:8c:9e:bb:4f:44:be:80:2f:c0:bd:2d:ac:9f:
         cf:2a:6c:8f:7b:8e:62:34:d4:51:c2:6a:37:f1:77:94:ec:c1:
         a0:14:f4:0e:70:8f:7f:7d:bc:5d:86:28:c8:91:41:f5:71:56:
         40:7d:e7:9a:d5:21:8e:88:39:17:3f:cf:7e:18:bb:41:f2:a5:
         ab:5f:29:1b:eb:25:40:f9:61:60:76:ba:17:ab:4e:1e:6c:99:
         fe:9f:37:fb:72:b1:ed:f5:4a:23:2b:60:2a:d9:22:44:67:ea:
         2b:1e:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:30 2026 by rpki-client