This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31372e302f32342d3234203d3e203532333736.roa
File:                     3230302e302e31372e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier:          1fhiUem6JWfhmNkg+ZOVM6ULDxb9PXu8jTAiMFovqOI=
Subject key identifier:   3E:FD:6B:D3:F0:1D:31:80:D6:F8:0B:76:5D:16:67:E7:75:BE:82:DA
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       201267E3D7C4D6BC4DFC6DDE9D209B886C110B13
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31372e302f32342d3234203d3e203532333736.roa
Signing time:             Mon 17 Nov 2025 15:52:53 +0000
ROA not before:           Mon 17 Nov 2025 15:47:53 +0000
ROA not after:            Mon 16 Nov 2026 15:52:53 +0000
asID:                     52376
IP address blocks:        200.0.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:12:67:e3:d7:c4:d6:bc:4d:fc:6d:de:9d:20:9b:88:6c:11:0b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Nov 17 15:47:53 2025 GMT
            Not After : Nov 16 15:52:53 2026 GMT
        Subject: CN=3EFD6BD3F01D3180D6F80B765D1667E775BE82DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:b6:08:3c:c1:e2:60:7e:39:84:ab:8c:f1:
                    c3:69:54:a0:27:c9:22:69:d5:ba:44:be:2c:93:90:
                    77:96:71:d2:77:08:91:ae:83:e8:6c:fa:e3:05:9d:
                    9a:58:cc:1e:90:93:d0:66:a7:5a:ac:18:c8:e5:05:
                    52:c6:d0:2d:ec:47:98:14:2c:f8:23:d7:f7:31:f7:
                    b1:fb:98:6e:b4:49:28:76:ff:db:32:d0:b6:57:95:
                    bd:c1:4c:2e:94:22:4e:cf:b4:a0:7b:9e:3c:ac:ca:
                    39:cf:bd:1c:55:7c:33:a4:2a:e2:3b:b0:28:15:96:
                    b6:4c:1f:0e:19:39:4a:ff:00:c3:38:5b:bb:44:b1:
                    56:ea:0e:61:cf:9f:96:f1:41:d5:ff:82:51:f3:bf:
                    63:75:c0:6d:86:48:1d:0b:d2:67:3c:22:28:af:84:
                    3e:c7:e6:2f:bb:ea:2c:aa:83:ba:ad:27:c7:a0:4d:
                    d0:61:42:c3:32:c3:23:2f:11:f4:37:6c:ef:09:ff:
                    fe:1f:82:c2:da:b5:1c:a3:57:7f:91:27:12:9c:f1:
                    d2:58:73:2e:e4:c1:67:09:3e:1e:22:48:c6:f3:bf:
                    c7:6e:dd:a9:4b:16:3a:4e:43:8a:6d:ea:5f:8d:f3:
                    cb:c1:32:d4:5c:64:2a:82:9c:76:0a:8a:48:6f:9f:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:6B:D3:F0:1D:31:80:D6:F8:0B:76:5D:16:67:E7:75:BE:82:DA
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31372e302f32342d3234203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:88:fa:af:42:f3:21:f3:a9:72:80:b2:89:fa:0d:25:87:
         73:03:01:b0:e2:60:8a:98:32:2c:ec:ba:76:33:bc:bc:52:01:
         0a:83:75:d2:65:99:c6:0a:51:cd:46:a8:44:5f:ab:15:65:a3:
         7f:12:45:0d:bd:14:c5:6c:f3:a4:c5:df:0b:34:e8:b2:24:49:
         76:e6:19:c9:a1:a6:5a:cd:cf:22:70:2d:00:dd:b6:b8:03:7a:
         53:e2:ac:47:d8:a4:58:03:29:57:21:8a:11:a6:08:66:23:16:
         48:2a:de:38:c0:4d:6a:ed:c5:81:38:98:09:ac:a3:35:65:ee:
         2c:d5:29:a9:7d:09:b4:3d:01:d9:0a:87:b7:fc:f2:da:f6:99:
         1e:e5:20:47:0d:30:6f:ad:7c:5f:00:98:36:ab:95:f2:10:56:
         f0:32:78:29:7a:ba:fa:21:06:52:70:82:48:ca:30:27:fd:d4:
         e5:8a:98:b3:61:03:4c:d6:ed:00:5c:85:60:99:9d:9a:d2:97:
         1f:7b:d2:0b:1c:01:e3:03:76:98:f2:26:d2:54:2d:e1:13:ff:
         66:9e:5f:12:c9:d4:7c:16:50:df:47:66:9c:52:d6:6e:c6:d5:
         63:fe:c7:46:cb:9f:8b:74:a5:c9:28:b2:4b:77:d9:1e:13:5d:
         18:69:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:56:07 2025 by rpki-client