This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa
File:                     3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          SZLzpqMg7qBPlniWpAEk2IdufQEyU8T7gGHyQYQeM3I=
Subject key identifier:   CF:CD:31:AE:57:45:3E:F2:A7:01:2A:42:B1:E4:DC:42:10:AD:39:F6
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       1E45D6A6B03860EC3AD44625759F83502B6FCE2F
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa
Signing time:             Tue 06 Jan 2026 19:00:55 +0000
ROA not before:           Tue 06 Jan 2026 18:55:55 +0000
ROA not after:            Tue 05 Jan 2027 19:00:55 +0000
asID:                     269931
IP address blocks:        200.125.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:45:d6:a6:b0:38:60:ec:3a:d4:46:25:75:9f:83:50:2b:6f:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Jan  6 18:55:55 2026 GMT
            Not After : Jan  5 19:00:55 2027 GMT
        Subject: CN=CFCD31AE57453EF2A7012A42B1E4DC4210AD39F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ef:6a:a5:f1:64:f9:7e:fa:c7:55:6d:40:97:
                    8f:e9:f6:ae:16:ec:f8:28:10:ad:d9:fa:b6:cb:cc:
                    9e:71:c5:4d:af:82:e3:30:f9:78:81:35:7a:9a:5b:
                    7d:a2:58:4f:06:d6:44:2a:e7:a3:c4:55:1b:5b:5c:
                    c4:17:95:54:ea:98:e4:49:66:67:9f:c5:f7:41:8f:
                    dd:b7:3c:36:ac:a6:51:3c:82:94:20:90:84:c7:7a:
                    1d:29:9b:b3:34:27:28:28:e5:d6:bc:37:f8:59:a3:
                    c8:ad:e3:1e:01:d0:a4:15:0c:56:23:aa:0d:aa:36:
                    ac:17:d7:b0:0f:79:33:7b:b2:8c:b0:cc:f5:8a:26:
                    71:c0:ae:37:f5:e6:85:ab:19:a1:f0:05:59:b3:d3:
                    8a:04:d9:16:33:c3:9b:0a:4e:10:dc:47:8d:61:2c:
                    d8:12:84:ea:17:fa:d5:68:56:6a:df:bd:db:a2:dc:
                    22:0a:96:75:74:7d:60:de:09:5d:3f:0d:03:0f:85:
                    89:60:b3:4b:e4:5e:5b:b8:3a:58:54:c0:6f:86:6c:
                    ed:84:97:73:19:31:7b:03:e0:bc:c8:74:d2:d8:1c:
                    ae:31:bf:b6:fe:43:16:c9:5c:0e:f7:68:dc:02:27:
                    7e:74:e2:3d:f6:8f:00:c2:dc:b5:c1:13:f7:a5:11:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:31:AE:57:45:3E:F2:A7:01:2A:42:B1:E4:DC:42:10:AD:39:F6
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:65:33:e0:3b:a2:f2:10:42:90:ea:99:15:0c:1b:13:4f:
         8b:40:e2:a8:72:10:58:9e:d4:26:c2:53:d7:73:61:5a:ec:e0:
         2e:89:cf:47:58:76:96:e1:cc:91:a4:86:ea:75:ec:b9:c8:d6:
         6c:67:8b:a1:3a:7f:63:4f:ea:35:cc:9e:e0:a5:51:e7:4d:73:
         7b:9b:91:73:04:b8:b4:08:ad:b0:2e:7d:35:64:e3:bb:2c:14:
         72:d5:26:ea:bf:16:5e:3f:a4:b2:27:f8:01:b7:e5:e2:d3:a0:
         66:c2:3d:af:c1:c6:31:d0:0b:44:8f:4b:5c:1c:28:0d:e0:b0:
         24:fc:68:db:8b:3d:32:cf:d2:b9:e4:39:21:7f:dd:19:fe:0b:
         ed:95:a7:27:ca:97:d1:71:42:bd:0f:82:de:de:90:cf:90:32:
         ee:d1:f4:74:df:33:c1:e6:f5:81:c2:c6:e3:10:34:d3:8f:dd:
         7c:b5:1d:bc:56:ce:85:18:b3:f8:73:72:f7:cd:6c:fd:ef:c8:
         35:aa:c6:87:23:48:c6:c3:5d:88:95:23:4f:55:7f:df:0a:e5:
         c9:27:9b:7e:02:79:61:2d:34:fa:41:88:be:dd:14:1c:0c:16:
         f5:bc:a4:5c:e2:3e:1d:18:4b:b1:f2:ce:0f:58:23:3a:c4:1f:
         22:1f:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:00 2026 by rpki-client