This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa
File:                     3230302e39312e34382e302f32312d3234203d3e203238303233.roa (raw, json)
Hash identifier:          Mqct+jNRRaAZ9qmDdNPRtYY0MkcwUpWWNBnqnq4Zxfg=
Subject key identifier:   AB:C7:44:FB:75:C4:6D:19:9C:94:2C:94:99:48:98:28:F6:D9:4D:1F
Certificate issuer:       /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial:       73B21CDFB090A21BEA24BE1511AB1CBB823155D0
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa
Signing time:             Tue 06 Jan 2026 19:19:26 +0000
ROA not before:           Tue 06 Jan 2026 19:14:26 +0000
ROA not after:            Tue 05 Jan 2027 19:19:26 +0000
asID:                     28023
IP address blocks:        200.91.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b2:1c:df:b0:90:a2:1b:ea:24:be:15:11:ab:1c:bb:82:31:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
        Validity
            Not Before: Jan  6 19:14:26 2026 GMT
            Not After : Jan  5 19:19:26 2027 GMT
        Subject: CN=ABC744FB75C46D199C942C9499489828F6D94D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:97:e8:4c:02:84:96:5c:3a:e8:2b:08:54:
                    d6:5a:6c:82:54:61:7e:13:2b:05:cd:5b:e2:37:e3:
                    4f:67:bb:49:5d:39:e1:b6:d0:01:a8:69:2f:e6:36:
                    a5:f0:35:fb:2c:a0:59:ff:1e:8a:e1:1a:6c:bf:c6:
                    cf:e0:d2:01:fa:68:10:e8:a0:93:7a:32:a9:ec:17:
                    79:94:42:ff:38:5d:21:64:71:10:18:43:8d:78:36:
                    58:30:61:98:9c:63:1b:68:31:31:db:89:9a:5f:55:
                    3d:a3:f9:82:a7:ad:e3:60:71:89:f0:03:43:7d:3d:
                    47:9f:60:2c:d3:9e:d0:a2:f0:a2:fb:97:9b:90:b9:
                    ca:33:6c:54:d5:c3:a1:b5:41:de:64:28:27:4a:e1:
                    89:ea:6a:60:e5:9e:23:f6:66:df:9f:49:ea:ec:f2:
                    a0:70:3e:75:3c:41:08:b2:60:45:ff:d1:73:f4:d9:
                    54:b0:f9:c3:3d:bd:7a:08:b1:b8:94:4a:bf:2e:dd:
                    45:4a:28:aa:31:9f:e1:37:41:9e:89:bc:f9:60:30:
                    93:7a:ee:22:c3:11:bb:12:d2:a3:17:1a:6f:53:ff:
                    a7:1c:2a:6f:57:be:01:63:9f:0f:82:9e:19:9a:b8:
                    04:95:dd:0c:fa:88:c0:a3:d1:df:91:4c:10:89:16:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:44:FB:75:C4:6D:19:9C:94:2C:94:99:48:98:28:F6:D9:4D:1F
            X509v3 Authority Key Identifier:
                keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:02:1d:40:41:b4:2e:2e:91:a2:7a:6f:2a:3b:e2:86:73:b7:
         ac:bc:52:98:ea:b2:fd:99:aa:06:e0:b9:db:eb:aa:ff:30:7e:
         cf:0d:99:c0:b3:3a:0c:ec:38:26:00:0e:4a:fd:9d:2e:c4:da:
         f6:a8:23:97:42:a3:d7:4c:0f:fb:d0:9d:7d:e6:a4:00:a6:c5:
         40:eb:ac:a6:2a:ba:17:95:ff:70:cd:df:8f:ab:d6:3d:64:c4:
         fd:ed:97:89:31:33:36:aa:10:c7:3b:66:e4:20:ed:e9:08:c3:
         c7:7d:5f:43:2b:95:e2:c9:10:ef:a5:e2:ef:4e:e2:bc:db:50:
         1b:0f:4c:fb:2c:e1:f1:e8:c6:8b:55:0c:c9:58:f2:6b:6d:a9:
         9b:8e:8e:f4:bc:96:c2:c8:c9:14:70:ad:9d:71:03:e8:e0:9c:
         0b:4a:3e:d0:31:5a:3f:cb:2e:8e:09:7c:ba:42:6b:6a:8f:d6:
         30:55:e5:b7:ef:0b:5b:3a:d3:08:bc:aa:15:42:91:b1:c8:4d:
         fc:45:5a:ef:a3:47:09:d6:9c:95:15:48:de:0b:a3:a8:23:19:
         2b:fc:1c:44:1e:7d:10:4a:8d:4e:ac:b8:59:be:c8:9c:7e:96:
         9e:1d:fd:14:6e:e7:3c:04:6c:82:0c:b4:d6:17:b8:2c:ad:c2:
         5a:1b:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:00:36 2026 by rpki-client