This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32342d3234203d3e20323639393331.roa
File:                     3230302e3132352e3136382e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          BJI79/FhCaLJpzpv6m8ZdkhtCPsgzf1CpyxJEu6dp2Q=
Subject key identifier:   CC:8D:22:FC:A8:51:12:BB:F3:BD:AB:FB:75:E5:6B:21:0A:F7:D5:B6
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       4F01A4E39A16139D4C4C372FF7C1605950E878D7
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 06 Jan 2026 19:00:56 +0000
ROA not before:           Tue 06 Jan 2026 18:55:56 +0000
ROA not after:            Tue 05 Jan 2027 19:00:56 +0000
asID:                     269931
IP address blocks:        200.125.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:01:a4:e3:9a:16:13:9d:4c:4c:37:2f:f7:c1:60:59:50:e8:78:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Jan  6 18:55:56 2026 GMT
            Not After : Jan  5 19:00:56 2027 GMT
        Subject: CN=CC8D22FCA85112BBF3BDABFB75E56B210AF7D5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:83:ce:ed:4e:0c:4c:c6:a5:da:82:48:5a:
                    fc:f9:3e:f3:9c:16:ae:95:dc:b1:b2:51:85:65:38:
                    73:ad:fc:50:08:12:77:d8:10:64:28:cf:7a:83:71:
                    2d:56:27:63:65:44:e7:78:a9:4a:36:de:16:d3:90:
                    37:9f:21:c2:59:22:77:07:ea:65:70:51:ef:f1:33:
                    cf:64:78:e3:24:e5:01:0e:a9:4d:a1:6b:38:4e:c6:
                    55:3a:51:00:e1:ca:b2:bb:45:ee:04:f3:8f:55:80:
                    f5:ea:ce:73:5e:cf:2b:5c:d3:6c:1a:b4:55:1a:74:
                    d9:72:c1:65:a1:cb:6d:51:fc:f2:7f:4b:72:c3:08:
                    1f:db:b3:1e:09:97:ca:1d:7b:f0:c7:a4:83:aa:29:
                    ee:66:3e:82:62:66:4d:0d:03:69:5d:ad:20:ba:98:
                    50:ae:40:10:f9:01:7c:d3:9d:0e:c9:58:1c:e7:84:
                    e7:34:89:49:cc:c2:e7:c3:b9:76:4b:7c:7c:1a:c7:
                    18:79:54:9e:6e:99:42:f7:80:b7:4d:5f:7c:e2:37:
                    b0:4d:ce:46:3f:e9:a4:2d:86:53:db:89:b2:75:1b:
                    d1:20:81:33:f7:a1:92:1b:94:a5:87:e7:e0:89:f4:
                    46:92:1a:4f:99:fe:1e:5f:ce:66:6b:8d:e6:42:7e:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8D:22:FC:A8:51:12:BB:F3:BD:AB:FB:75:E5:6B:21:0A:F7:D5:B6
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:2b:1a:7f:be:7c:66:11:d9:14:b2:bd:41:b0:56:f6:bd:70:
         87:fa:57:ab:e5:50:34:7d:7f:96:48:03:31:e3:a9:ff:e4:7d:
         6f:52:c7:a8:5d:50:cf:49:53:0e:82:c2:93:e2:35:23:df:bc:
         13:1d:e6:85:fe:9e:89:27:ce:3a:0e:02:c4:56:95:d8:6d:25:
         56:97:2c:75:2f:7b:66:af:3f:82:19:84:1f:3e:e3:4e:7f:88:
         66:5c:bb:1a:2c:1a:90:21:de:63:85:ee:ea:c9:93:b1:43:da:
         83:95:49:d2:5c:6f:47:30:72:4a:95:89:b5:0b:e2:a9:ee:5a:
         e2:70:66:43:21:f1:a6:66:09:0c:ee:15:ca:5b:18:3a:6e:0a:
         c9:42:37:eb:7c:5c:a2:63:7a:93:a2:18:51:b5:f0:b0:fd:64:
         e5:09:1c:13:10:b0:73:6e:35:9b:da:8e:cb:8e:89:ec:6c:8d:
         35:92:bb:bb:b2:fb:1c:3e:ff:13:4d:75:26:15:c5:78:85:8c:
         85:04:35:a2:86:74:47:52:fe:c5:57:07:cd:d4:80:e2:43:e3:
         36:18:d6:0d:6d:14:4a:66:14:cb:79:cb:0b:17:cd:44:58:3b:
         dd:a6:d8:28:b0:3d:b7:d0:9a:7a:42:37:30:02:2f:c7:fd:cf:
         24:ab:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:01 2026 by rpki-client