This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32312e302f32342d3234203d3e203532343434.roa
File:                     3230302e34312e32312e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          5sck6pdCOEME3EVAGNzom53qwH1Fa/lxyYcV5mkMGV0=
Subject key identifier:   D4:8B:65:6A:94:5A:4F:53:E0:DB:4F:80:20:09:89:DF:8F:8B:B4:8D
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       79A898EDB07C2CEE8AE79EA8DFA74B93B53F9B98
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32312e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:35:00 +0000
ROA not before:           Tue 06 Jan 2026 19:30:00 +0000
ROA not after:            Tue 05 Jan 2027 19:35:00 +0000
asID:                     52444
IP address blocks:        200.41.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a8:98:ed:b0:7c:2c:ee:8a:e7:9e:a8:df:a7:4b:93:b5:3f:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:00 2026 GMT
            Not After : Jan  5 19:35:00 2027 GMT
        Subject: CN=D48B656A945A4F53E0DB4F80200989DF8F8BB48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:d9:35:c8:3c:45:79:fe:1d:c0:26:17:ea:
                    1e:41:60:70:2c:70:9a:c9:cf:86:0c:db:ce:7a:ca:
                    0d:9c:f4:9a:b2:c5:d9:2c:0c:b4:9d:0e:25:c3:6f:
                    a7:b4:38:0e:71:bd:58:a3:3f:db:f4:cf:a6:32:e2:
                    9d:58:7e:3f:21:79:ad:6f:32:e5:0a:98:54:da:75:
                    75:1d:53:d4:f4:ee:e5:71:bf:be:1b:c5:2d:e5:75:
                    b1:d0:00:73:31:33:4d:e5:ed:09:71:7a:cd:c3:df:
                    f8:35:08:17:e6:19:29:fc:7d:c1:58:ef:ba:74:4c:
                    65:1e:df:54:9d:a4:ff:e1:26:2f:67:12:ac:b0:f3:
                    ca:0a:af:2f:98:75:65:0d:5c:e4:c3:5a:09:f3:52:
                    89:1e:f3:23:aa:72:8d:cb:87:ca:6b:be:cb:41:4f:
                    ab:c9:fe:10:71:06:b5:04:55:07:45:54:f6:31:43:
                    55:65:50:48:c3:d9:f8:f3:ec:07:cb:78:fc:78:d9:
                    b0:40:01:3e:3a:63:95:d2:92:db:61:6b:83:94:96:
                    97:cc:ef:f2:c8:1e:23:f4:c7:39:d7:02:1d:62:61:
                    e2:a3:f0:86:62:5a:59:f9:6c:99:ad:55:b7:2a:2b:
                    3d:95:0e:84:f4:a8:17:c1:8c:fe:b8:41:04:4e:d7:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:65:6A:94:5A:4F:53:E0:DB:4F:80:20:09:89:DF:8F:8B:B4:8D
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32312e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:35:58:cf:b8:93:83:3f:c0:17:1f:7b:ee:1c:c4:ff:6c:d3:
         1b:65:c4:ec:6e:e0:46:57:78:aa:ee:c3:53:b3:00:79:40:69:
         3e:9b:3c:0d:0d:15:d7:d8:16:93:8e:9c:ae:26:4f:a4:65:f4:
         da:5e:d2:ac:b2:00:50:fc:f0:cc:b3:59:e5:af:38:67:3a:b2:
         9c:05:54:fa:97:92:89:d6:6e:2e:85:2c:11:ba:ac:14:f8:d8:
         28:56:14:cb:31:1e:85:4f:ab:3b:4e:de:42:58:0e:95:6b:94:
         e7:c1:c4:af:ff:3f:26:83:b5:a5:73:31:8a:60:fc:ee:02:8a:
         d2:4d:d8:d7:d1:17:89:cf:c2:77:4b:ed:23:4e:1a:25:1c:08:
         db:8a:85:ba:b4:5a:2b:75:3a:51:5b:13:7c:95:60:13:1f:4d:
         42:fd:8c:a6:43:92:a7:0d:66:ec:78:97:49:40:4e:60:32:ad:
         7c:ac:21:64:cf:ab:60:68:d7:76:fd:75:5d:08:6f:d3:36:15:
         76:41:fa:01:ec:3d:a3:f4:a8:5c:ed:53:d5:4d:25:94:86:39:
         2a:33:d1:aa:13:ce:74:90:ab:bb:ea:9c:b4:80:7f:73:2a:17:
         c7:c4:74:0b:9d:14:3d:17:a0:b9:2c:44:08:48:81:26:ac:bf:
         f1:62:20:c8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeaiY7bB8LO6K556o36dLk7U/m5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAxMDYxOTMwMDBaFw0yNzAxMDUxOTM1MDBaMDMxMTAvBgNV
BAMTKEQ0OEI2NTZBOTQ1QTRGNTNFMERCNEY4MDIwMDk4OURGOEY4QkI0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQ9k1yDxFef4dwCYX6h5BYHAs
cJrJz4YM2856yg2c9JqyxdksDLSdDiXDb6e0OA5xvVijP9v0z6Yy4p1Yfj8hea1v
MuUKmFTadXUdU9T07uVxv74bxS3ldbHQAHMxM03l7Qlxes3D3/g1CBfmGSn8fcFY
77p0TGUe31SdpP/hJi9nEqyw88oKry+YdWUNXOTDWgnzUoke8yOqco3Lh8prvstB
T6vJ/hBxBrUEVQdFVPYxQ1VlUEjD2fjz7AfLePx42bBAAT46Y5XSkttha4OUlpfM
7/LIHiP0xznXAh1iYeKj8IZiWln5bJmtVbcqKz2VDoT0qBfBjP64QQRO17WZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1ItlapRaT1Pg20+AIAmJ34+LtI0wHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzQzMTJlMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIKRUwDQYJ
KoZIhvcNAQELBQADggEBACI1WM+4k4M/wBcfe+4cxP9s0xtlxOxu4EZXeKruw1Oz
AHlAaT6bPA0NFdfYFpOOnK4mT6Rl9Npe0qyyAFD88MyzWeWvOGc6spwFVPqXkonW
bi6FLBG6rBT42ChWFMsxHoVPqztO3kJYDpVrlOfBxK//PyaDtaVzMYpg/O4CitJN
2NfRF4nPwndL7SNOGiUcCNuKhbq0Wit1OlFbE3yVYBMfTUL9jKZDkqcNZux4l0lA
TmAyrXysIWTPq2Bo13b9dV0Ib9M2FXZB+gHsPaP0qFztU9VNJZSGOSoz0aoTznSQ
q7vqnLSAf3MqF8fEdAudFD0XoLksRAhIgSasv/FiIMg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:39 2026 by rpki-client