This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
File:                     3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          T0L2na1WrTIRsDYz0jfRNdq53Q7JA+xDBRZFsSPAgRY=
Subject key identifier:   FF:70:17:4C:28:BB:60:D4:E1:1C:C6:6C:2A:FF:A8:D5:56:69:71:5F
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       3346541CF8213508A81AADBB51F01E38035DE870
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 20:58:12 +0000
ROA not before:           Tue 06 Jan 2026 20:53:12 +0000
ROA not after:            Tue 05 Jan 2027 20:58:12 +0000
asID:                     19905
IP address blocks:        200.10.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 02:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:54:1c:f8:21:35:08:a8:1a:ad:bb:51:f0:1e:38:03:5d:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Jan  6 20:53:12 2026 GMT
            Not After : Jan  5 20:58:12 2027 GMT
        Subject: CN=FF70174C28BB60D4E11CC66C2AFFA8D55669715F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:31:7e:e8:44:39:ff:a8:61:4e:09:64:62:
                    6d:7e:9f:0a:be:9a:e7:7b:ab:fe:2a:e6:53:66:e0:
                    7f:20:06:71:b5:59:7a:6d:e0:a1:9b:6b:33:0f:8a:
                    91:d0:62:8f:7f:ea:d4:a7:6b:db:15:30:8d:40:67:
                    6e:fc:9d:8e:01:a5:d9:7e:c7:7d:4c:fc:35:23:d4:
                    0c:24:de:ef:b9:19:25:69:27:04:b5:76:b4:32:50:
                    7f:22:98:b6:48:b1:0f:7d:91:cc:93:41:bb:40:57:
                    bc:10:2b:1d:72:d8:52:83:20:f5:fa:4d:07:5e:8c:
                    16:90:b9:13:71:49:9e:dc:9d:94:d3:b7:67:2d:98:
                    89:e8:fd:c1:36:35:c2:6b:32:ab:44:9b:3b:8a:47:
                    3b:09:fa:2e:30:be:33:81:6a:b4:c9:db:6b:7a:08:
                    45:81:62:c0:c2:11:6e:31:d7:d6:d4:f8:e3:d2:ff:
                    b1:48:2b:0a:16:c1:80:19:b6:76:94:e1:fc:18:33:
                    6b:cf:3f:cb:f0:ec:25:be:b8:78:d1:b4:e7:f8:5a:
                    b8:d3:1d:ef:f0:52:8f:0c:39:52:c1:25:39:21:89:
                    a7:99:56:fd:85:d1:f7:65:2b:c1:04:c2:5f:a3:87:
                    7a:e1:ab:f7:65:ef:ce:6e:28:21:01:42:c5:00:7e:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:17:4C:28:BB:60:D4:E1:1C:C6:6C:2A:FF:A8:D5:56:69:71:5F
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:62:25:fc:be:eb:a2:1f:fd:fd:85:96:0c:04:f6:79:59:4b:
         27:ff:dc:09:45:02:73:53:2a:29:47:4a:4d:50:38:93:5e:1f:
         79:41:ea:40:08:40:b9:8a:04:97:a4:c1:25:0a:6f:38:ca:77:
         9b:fb:bd:85:2c:1d:37:a4:89:18:3c:43:af:a6:a2:38:55:b0:
         bc:f3:29:9d:ea:26:6f:f8:09:d8:10:cc:cd:25:bc:4e:1f:44:
         48:08:ff:b1:88:72:d5:11:92:9b:3d:cd:39:8a:d6:6b:e3:e0:
         83:ae:42:4c:dc:b1:96:88:6d:a2:23:a4:27:12:bb:ae:a7:c9:
         03:fb:c0:28:e3:c2:a9:d3:81:00:0d:49:71:6d:a6:9c:3b:12:
         bc:90:d4:ab:70:4f:69:86:9c:22:cf:a7:c5:bf:3a:d3:fc:ed:
         a3:c8:09:9e:c8:87:a4:52:90:75:d6:35:5b:d8:f9:48:e8:29:
         ce:70:42:5c:db:39:10:c2:43:eb:67:52:12:22:15:30:fc:43:
         08:41:45:ec:6b:48:73:ee:10:f7:e8:ff:ea:63:e7:ed:0e:28:
         e3:3c:fd:40:ae:3b:e1:da:03:96:71:98:3b:b8:8b:8c:27:30:
         fc:2d:f2:45:af:75:75:ff:a8:6d:bb:bc:b8:e6:4a:6c:01:bb:
         94:b8:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:26:05 2026 by rpki-client