This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34362e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34362e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          Okp+2byP8RAFyp8faIOasHgVzrpI1BM6Iqc1jHcRi/s=
Subject key identifier:   85:A0:3B:BC:92:16:C1:AF:84:08:B2:37:E6:E4:A6:CD:78:2C:B6:73
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       11BEAA71B0BBB19C7FDEEB58D4C7ED96655E9944
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34362e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 06 Jan 2026 19:15:39 +0000
ROA not before:           Tue 06 Jan 2026 19:10:39 +0000
ROA not after:            Tue 05 Jan 2027 19:15:39 +0000
asID:                     27810
IP address blocks:        200.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:be:aa:71:b0:bb:b1:9c:7f:de:eb:58:d4:c7:ed:96:65:5e:99:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Jan  6 19:10:39 2026 GMT
            Not After : Jan  5 19:15:39 2027 GMT
        Subject: CN=85A03BBC9216C1AF8408B237E6E4A6CD782CB673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:87:1a:d1:88:e4:ba:a7:0c:08:7a:58:18:
                    07:39:ce:c7:76:37:60:31:d7:c1:97:c1:91:8d:9e:
                    47:06:3d:0b:58:17:e1:f7:14:d5:75:79:d8:1d:50:
                    94:cf:01:f5:46:b4:f7:e9:ab:8f:a8:b5:ec:7f:e5:
                    04:8e:16:2b:3e:4b:f1:d1:ac:d3:f6:f9:6e:4d:79:
                    82:1e:b1:03:3b:9a:2f:01:8d:16:a4:29:7d:2f:c7:
                    ac:bb:53:03:d9:1a:a2:1a:4b:0d:4d:0d:87:3e:60:
                    17:e0:0a:32:2a:96:6f:dd:7e:36:3d:53:e5:41:48:
                    c5:1e:a8:43:4e:c1:28:1e:30:1f:ac:e6:fb:ae:43:
                    76:e5:2f:56:26:d5:60:3e:cc:ed:0b:6b:42:d9:4d:
                    79:91:33:31:d0:10:58:14:e0:ea:cd:63:da:b7:5f:
                    b4:06:5d:59:df:17:5a:92:79:5d:82:78:21:98:bf:
                    8c:82:13:e0:86:83:df:7f:8e:be:f4:04:40:7a:2e:
                    23:73:a3:2f:f0:9d:e2:2f:3b:2b:87:cf:d8:31:31:
                    4a:03:c6:df:d8:15:87:49:d8:67:f7:fc:f7:9b:87:
                    5e:05:e3:aa:44:e1:c7:f5:50:a3:b3:b9:f6:a8:69:
                    37:6e:1d:70:c3:da:e7:e2:b5:0d:24:f7:39:b4:e4:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:3B:BC:92:16:C1:AF:84:08:B2:37:E6:E4:A6:CD:78:2C:B6:73
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34362e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:ce:2a:51:37:0a:5a:fb:e7:ed:f1:e3:46:39:73:d5:0c:
         7e:2b:ee:19:ac:6b:60:82:8c:ae:6c:7b:4d:8d:63:76:b4:db:
         5d:37:e2:bf:bc:b5:73:07:c9:3b:1f:a5:72:8a:57:6d:f2:9e:
         95:ee:f3:44:86:7a:a1:ea:b5:80:0e:c2:f6:a3:62:1d:24:43:
         d7:80:f9:6d:ab:e8:d4:bf:0e:99:82:48:0c:8e:32:75:14:f2:
         94:c2:e5:e3:36:3d:3d:37:40:8e:47:f4:a6:09:ff:cb:fe:db:
         a7:12:65:8d:df:e0:38:94:3a:0c:5a:8f:7e:55:07:af:81:fd:
         97:9e:71:4b:6c:67:cc:67:cb:fc:f7:2d:c0:6a:a2:7f:13:c5:
         46:d6:51:13:2b:ea:94:21:da:97:85:85:09:c0:fe:19:2c:53:
         60:57:49:f2:b4:9f:f6:37:10:85:f9:af:5c:4b:d1:9f:40:01:
         59:f1:0b:cc:2c:4d:85:70:9f:52:e1:cd:26:8d:53:b0:fa:e5:
         b9:03:b5:b3:b8:0c:18:0c:1b:9a:c3:74:dd:42:ed:e7:d8:ef:
         bb:0d:fe:2b:12:81:d7:0c:2a:44:31:cd:73:66:0c:03:37:fb:
         78:2d:26:90:50:c9:8b:1c:c6:0c:cf:a6:68:e0:a1:42:99:d4:
         3d:dd:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:07:05 2026 by rpki-client