This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa
File:                     3230302e33362e3135362e302f32332d3234203d3e2033313332.roa (raw, json)
Hash identifier:          lKkMPeQ/mi8W9sjxETzO3ufWE5r5L7679bj8zgr5IrI=
Subject key identifier:   04:6A:D9:57:99:62:39:7F:EF:A3:AF:EC:08:7D:0B:1A:1B:31:89:42
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       03B64D6A7843028B19F3D2F86FF17AEBAD73C5DD
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa
Signing time:             Tue 06 Jan 2026 19:46:09 +0000
ROA not before:           Tue 06 Jan 2026 19:41:09 +0000
ROA not after:            Tue 05 Jan 2027 19:46:09 +0000
asID:                     3132
IP address blocks:        200.36.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b6:4d:6a:78:43:02:8b:19:f3:d2:f8:6f:f1:7a:eb:ad:73:c5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Jan  6 19:41:09 2026 GMT
            Not After : Jan  5 19:46:09 2027 GMT
        Subject: CN=046AD9579962397FEFA3AFEC087D0B1A1B318942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:4a:94:86:20:f4:52:31:52:df:0c:3d:4a:
                    33:2b:28:ef:69:f6:4e:e6:d0:7b:0b:27:ad:ae:4e:
                    13:16:ea:3d:c9:88:e9:ea:03:e2:30:ed:18:e3:58:
                    0b:74:68:68:55:1e:27:25:c1:d4:20:09:bb:d3:e5:
                    aa:d3:d7:c3:04:11:67:c3:35:fb:0f:85:c9:c2:cb:
                    26:a5:4b:54:ce:3f:40:aa:55:c8:c9:58:6a:e6:b9:
                    0f:04:0c:1d:10:4b:0b:f3:e6:ab:63:3d:90:ac:7b:
                    71:e9:17:74:cb:04:e2:13:62:23:2c:7a:c4:5b:9c:
                    60:d5:a7:5f:7e:2f:8a:f7:34:89:11:67:d3:b7:d6:
                    3f:34:e9:54:47:f7:57:27:d0:65:99:42:46:bc:28:
                    14:0f:c2:fb:28:09:91:e0:ad:97:3c:8e:1c:44:1a:
                    12:a7:1d:7b:93:66:c7:82:6a:51:3a:bb:d4:53:80:
                    52:39:9f:bc:f9:62:44:15:fe:d4:2d:a1:4d:a7:e5:
                    cb:74:6e:6d:e9:89:16:37:a7:84:76:e2:81:3b:01:
                    b7:f5:bb:14:e3:4d:9c:1d:5e:e1:2b:4c:62:94:e8:
                    f1:c1:eb:d6:42:ff:a9:5d:14:67:83:dc:a4:ea:92:
                    57:6d:77:34:82:e1:1b:f1:4c:5a:49:9e:3a:f6:b6:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:D9:57:99:62:39:7F:EF:A3:AF:EC:08:7D:0B:1A:1B:31:89:42
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:45:73:3a:c7:fe:b9:6d:55:1f:58:b8:dd:97:eb:24:c3:
         df:a4:52:2a:16:41:95:7d:0f:7a:31:13:5d:f7:85:d7:f6:3f:
         a9:e7:07:c5:96:93:e3:75:b7:17:2e:e3:b0:53:bd:29:48:61:
         b3:ef:75:07:99:48:5d:13:05:08:32:14:ad:12:95:80:67:57:
         92:a5:26:bc:a2:2c:19:89:14:a9:d2:68:88:ae:85:e9:77:d2:
         bc:4c:bc:0b:0a:80:0d:f1:fe:cd:a0:56:66:ad:c4:a8:85:7a:
         2c:67:18:51:1f:b5:2f:52:d9:16:49:42:d3:ef:63:ae:48:70:
         48:6f:7f:58:64:64:f7:5d:47:44:27:c2:12:e5:d1:34:b7:2b:
         18:02:72:62:a0:33:b9:67:8d:2a:83:7a:53:64:9d:d3:91:6a:
         04:9d:0e:df:10:47:0e:c3:88:05:85:d8:23:11:7e:06:50:ea:
         91:c2:cc:5a:2f:e9:b8:50:62:a1:41:cf:37:d8:4b:30:56:68:
         59:d4:12:ab:be:25:66:67:18:4c:13:20:13:f6:82:e8:70:5a:
         fc:3f:d1:2c:b2:79:20:92:91:2c:e3:10:dd:9e:ed:4c:21:2e:
         44:85:73:d2:5a:7e:15:e0:f6:e1:2a:6b:6b:63:b0:29:8e:15:
         da:dd:17:77
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUA7ZNanhDAosZ89L4b/F6661zxd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNjAxMDYxOTQxMDlaFw0yNzAxMDUxOTQ2MDlaMDMxMTAvBgNV
BAMTKDA0NkFEOTU3OTk2MjM5N0ZFRkEzQUZFQzA4N0QwQjFBMUIzMTg5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHvkqUhiD0UjFS3ww9SjMrKO9p
9k7m0HsLJ62uThMW6j3JiOnqA+Iw7RjjWAt0aGhVHiclwdQgCbvT5arT18MEEWfD
NfsPhcnCyyalS1TOP0CqVcjJWGrmuQ8EDB0QSwvz5qtjPZCse3HpF3TLBOITYiMs
esRbnGDVp19+L4r3NIkRZ9O31j806VRH91cn0GWZQka8KBQPwvsoCZHgrZc8jhxE
GhKnHXuTZseCalE6u9RTgFI5n7z5YkQV/tQtoU2n5ct0bm3piRY3p4R24oE7Abf1
uxTjTZwdXuErTGKU6PHB69ZC/6ldFGeD3KTqkldtdzSC4RvxTFpJnjr2tiHnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBGrZV5liOX/vo6/sCH0LGhsxiUIwHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzAzMDJlMzMzNjJlMzEzNTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIJJwwDQYJ
KoZIhvcNAQELBQADggEBAGPJRXM6x/65bVUfWLjdl+skw9+kUioWQZV9D3oxE133
hdf2P6nnB8WWk+N1txcu47BTvSlIYbPvdQeZSF0TBQgyFK0SlYBnV5KlJryiLBmJ
FKnSaIiuhel30rxMvAsKgA3x/s2gVmatxKiFeixnGFEftS9S2RZJQtPvY65IcEhv
f1hkZPddR0QnwhLl0TS3KxgCcmKgM7lnjSqDelNkndORagSdDt8QRw7DiAWF2CMR
fgZQ6pHCzFov6bhQYqFBzzfYSzBWaFnUEqu+JWZnGEwTIBP2guhwWvw/0SyyeSCS
kSzjEN2e7UwhLkSFc9JafhXg9uEqa2tjsCmOFdrdF3c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:23:20 2026 by rpki-client