This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          QfX9pC7UZtAh95OzeYbYHoBz+fXl1YDVcxhocebcw08=
Subject key identifier:   1C:D4:81:95:F2:E8:AE:4A:BB:DB:3F:27:CE:5B:01:27:70:36:19:7C
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       4E1D0709607E19DD892265DCD23FA4013233554A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:56 +0000
ROA not before:           Tue 06 Jan 2026 19:00:56 +0000
ROA not after:            Tue 05 Jan 2027 19:05:56 +0000
asID:                     27823
IP address blocks:        200.58.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:07:09:60:7e:19:dd:89:22:65:dc:d2:3f:a4:01:32:33:55:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:56 2026 GMT
            Not After : Jan  5 19:05:56 2027 GMT
        Subject: CN=1CD48195F2E8AE4ABBDB3F27CE5B01277036197C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:b2:79:31:82:b3:a5:6b:86:a6:ea:e4:b3:
                    9d:1b:11:46:d9:f2:7f:9e:0f:40:1d:20:1a:be:29:
                    dd:e9:8a:6f:a6:c7:db:26:a8:0f:9b:3c:43:b1:c8:
                    97:c3:19:10:4d:f1:2f:2f:b9:41:3b:92:7a:6b:86:
                    76:a4:20:76:85:40:fa:c7:89:ae:89:c8:28:c3:f0:
                    0d:73:7b:9f:4a:5a:8a:bb:58:67:3a:7d:ff:a7:87:
                    ef:00:ac:14:4e:c2:51:6f:eb:b8:29:30:57:af:a6:
                    ae:ca:82:c3:b3:22:bf:e3:56:df:c1:06:5b:36:7a:
                    79:2d:cb:68:5d:c4:ab:0a:8f:a8:e7:e4:3d:9b:ff:
                    66:6e:fc:e3:4b:5d:42:3b:92:77:03:a6:36:f2:bd:
                    fb:29:2d:11:cc:2e:24:74:da:11:50:68:f7:8d:36:
                    de:e8:20:22:cb:c2:8a:0d:f0:26:cc:13:4f:93:51:
                    6c:5c:ed:17:d8:48:a7:4f:af:98:96:3c:3c:71:4b:
                    c0:22:f7:ea:27:0d:47:60:4d:24:fa:de:53:fa:8e:
                    7d:ae:59:15:5c:d6:ac:78:38:ea:bf:32:54:3e:79:
                    61:bf:e9:6f:1e:89:b4:2d:75:3e:e9:c3:ec:64:b4:
                    be:cd:ee:98:e9:24:f8:16:cf:83:2c:f5:2f:27:e9:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D4:81:95:F2:E8:AE:4A:BB:DB:3F:27:CE:5B:01:27:70:36:19:7C
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:93:a4:0d:0d:a0:8e:b6:c4:33:ae:d9:ef:d6:55:c6:5b:26:
         74:7c:9b:54:10:19:b3:45:da:8d:61:9e:78:14:93:b7:e3:62:
         17:39:d2:0a:ba:ad:49:7b:fc:da:21:28:8f:d2:e4:6a:fb:ce:
         a7:4a:e2:5c:81:2e:df:62:93:70:31:c5:48:0c:2f:bb:7a:0e:
         c7:fa:1b:0d:a0:6f:da:b1:c1:3d:30:5e:e6:62:33:c4:dd:29:
         67:71:31:4c:f5:56:1b:bd:b5:91:5c:52:eb:7e:8b:c8:60:c0:
         c8:ad:df:38:72:6a:a7:00:95:c0:a3:8f:85:c7:ab:69:b4:f9:
         93:89:66:2e:da:74:37:d9:b6:3b:67:9d:52:07:3c:70:14:12:
         9d:da:88:81:25:0f:9b:0b:d5:58:a0:73:3f:1b:d5:74:74:cd:
         1c:2d:50:1a:f9:89:bc:ad:f4:95:fd:76:fe:98:80:aa:07:54:
         ed:4c:5d:7e:0a:a4:64:99:b5:53:06:0c:3e:fa:07:ca:0c:96:
         c1:c7:7c:c3:1f:b3:f5:9c:04:5c:d3:eb:07:d9:96:97:b4:85:
         84:2c:bd:a3:53:13:1e:86:a5:04:ec:a2:7a:31:12:50:ec:d2:
         30:ea:4c:91:a0:90:e7:e8:86:c4:b8:b7:7c:30:c4:a5:50:e6:
         c9:44:31:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTh0HCWB+Gd2JImXc0j+kATIzVUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNjAxMDYxOTAwNTZaFw0yNzAxMDUxOTA1NTZaMDMxMTAvBgNV
BAMTKDFDRDQ4MTk1RjJFOEFFNEFCQkRCM0YyN0NFNUIwMTI3NzAzNjE5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgC7J5MYKzpWuGpurks50bEUbZ
8n+eD0AdIBq+Kd3pim+mx9smqA+bPEOxyJfDGRBN8S8vuUE7knprhnakIHaFQPrH
ia6JyCjD8A1ze59KWoq7WGc6ff+nh+8ArBROwlFv67gpMFevpq7KgsOzIr/jVt/B
Bls2enkty2hdxKsKj6jn5D2b/2Zu/ONLXUI7kncDpjbyvfspLRHMLiR02hFQaPeN
Nt7oICLLwooN8CbME0+TUWxc7RfYSKdPr5iWPDxxS8Ai9+onDUdgTST63lP6jn2u
WRVc1qx4OOq/MlQ+eWG/6W8eibQtdT7pw+xktL7N7pjpJPgWz4Ms9S8n6fPRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHNSBlfLorkq72z8nzlsBJ3A2GXwwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMyMzAzMDJlMzUzODJlMzEzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg6bTAN
BgkqhkiG9w0BAQsFAAOCAQEAFpOkDQ2gjrbEM67Z79ZVxlsmdHybVBAZs0XajWGe
eBSTt+NiFznSCrqtSXv82iEoj9LkavvOp0riXIEu32KTcDHFSAwvu3oOx/obDaBv
2rHBPTBe5mIzxN0pZ3ExTPVWG721kVxS636LyGDAyK3fOHJqpwCVwKOPhcerabT5
k4lmLtp0N9m2O2edUgc8cBQSndqIgSUPmwvVWKBzPxvVdHTNHC1QGvmJvK30lf12
/piAqgdU7UxdfgqkZJm1UwYMPvoHygyWwcd8wx+z9ZwEXNPrB9mWl7SFhCy9o1MT
HoalBOyiejESUOzSMOpMkaCQ5+iGxLi3fDDEpVDmyUQxFA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:12 2026 by rpki-client