This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130302e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          v5LqZgqlfAg603ZhoiFU4NFcPU6evVukCrMcAYUTRLM=
Subject key identifier:   71:A3:50:C0:BE:56:5D:A1:AC:24:B4:7E:94:C4:C3:31:5A:DD:85:8E
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       3A079A61045FCDA67F4C49542B9EF8B147591E41
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130302e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:40 +0000
ROA not before:           Tue 06 Jan 2026 19:00:40 +0000
ROA not after:            Tue 05 Jan 2027 19:05:40 +0000
asID:                     27823
IP address blocks:        200.58.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:9a:61:04:5f:cd:a6:7f:4c:49:54:2b:9e:f8:b1:47:59:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:40 2026 GMT
            Not After : Jan  5 19:05:40 2027 GMT
        Subject: CN=71A350C0BE565DA1AC24B47E94C4C3315ADD858E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:ee:a8:c8:97:94:3b:ae:08:ff:71:00:cb:
                    76:eb:e9:99:82:5a:79:47:44:ba:f3:c6:26:ee:a6:
                    1f:d9:75:52:d8:d2:f9:f3:83:83:41:59:09:d2:87:
                    7a:6c:bb:df:10:95:7f:c2:1d:97:e3:b6:20:6f:03:
                    ac:4e:fc:e5:37:fb:5e:ce:24:e9:6e:28:35:0d:c2:
                    14:41:6b:88:36:9f:83:d0:1e:c4:c7:33:fc:97:04:
                    4c:8f:b7:b9:58:9c:3e:61:8f:62:8a:a2:da:c2:d2:
                    d2:9d:54:3b:99:b3:62:56:3f:42:3f:ad:28:e4:0c:
                    17:06:dd:c3:d0:1b:38:a7:f2:59:ce:ce:88:2f:35:
                    52:b9:cf:90:dd:de:66:5c:f2:17:fb:96:91:e8:e1:
                    84:67:f5:fd:e6:12:28:15:27:fe:44:e5:8e:a9:7c:
                    0e:9c:c4:96:73:94:09:c2:a0:d2:08:5b:0e:cc:b5:
                    bf:4f:44:07:c9:b6:67:7c:8e:25:a4:72:19:cb:51:
                    ff:e9:b9:35:0b:91:39:d3:b8:64:c9:f8:08:4f:1a:
                    43:de:46:b5:77:ff:df:7d:ba:e6:6e:a3:f0:5c:c1:
                    17:44:b8:33:85:cd:bd:29:91:ea:3b:73:0a:d3:f6:
                    d8:ee:ab:09:ab:ac:83:8c:19:04:ad:d3:d9:ea:9d:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A3:50:C0:BE:56:5D:A1:AC:24:B4:7E:94:C4:C3:31:5A:DD:85:8E
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130302e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:56:70:c5:8b:a9:e3:ba:45:4e:32:22:54:7e:9d:ef:b7:e0:
         a4:a4:9f:9b:1a:0c:65:76:bb:ca:07:61:ea:ef:3d:b2:da:03:
         86:fb:42:41:98:fa:5a:88:fa:67:27:bb:50:3a:65:7f:b1:0a:
         bc:ab:83:1c:02:d8:d8:10:82:97:37:3d:5f:a7:6b:aa:ff:b5:
         e7:5d:12:80:a7:48:bd:8a:a5:5e:85:03:5d:a6:53:79:93:00:
         5f:f9:1b:06:02:ae:37:12:c0:26:52:ae:f7:f5:30:e2:5b:20:
         09:74:c0:3e:f6:a4:8e:34:e8:8d:b8:8f:07:d4:f0:81:10:be:
         97:dc:82:b4:75:2a:15:c8:b4:e4:4f:81:b9:7f:14:89:79:b1:
         b8:08:91:2a:95:69:a2:14:84:58:71:8a:4f:2b:c5:7d:10:d0:
         bf:c0:88:07:9d:eb:aa:d7:58:c0:61:a6:0e:d6:fa:e4:f0:3a:
         d3:6a:d9:3d:46:4e:88:96:2d:fd:db:50:ca:62:ea:6e:70:27:
         be:bc:51:e8:c3:ad:45:ab:9c:c7:f2:65:8d:e9:54:2b:67:e2:
         71:f2:f0:fa:a7:29:71:ba:56:b0:bc:1c:50:88:a1:2c:6a:ee:
         17:49:23:c3:fd:69:4f:a4:b1:fc:2b:4e:e0:f6:00:c5:33:33:
         dd:88:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:42 2026 by rpki-client