This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa
File:                     3230302e302e31392e302f32342d3234203d3e203532323934.roa (raw, json)
Hash identifier:          Q34eFs0MAI+iEyZNRzih1sjM4Y7FNS6jwdRONjMf1fg=
Subject key identifier:   98:00:6F:1A:B1:1D:57:99:82:02:D2:D9:F8:E0:59:43:06:90:88:80
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       7F316D12B6685ADAFE47D8B75EDD0D45D0DE362D
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa
Signing time:             Tue 06 Jan 2026 19:29:30 +0000
ROA not before:           Tue 06 Jan 2026 19:24:30 +0000
ROA not after:            Tue 05 Jan 2027 19:29:30 +0000
asID:                     52294
IP address blocks:        200.0.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:31:6d:12:b6:68:5a:da:fe:47:d8:b7:5e:dd:0d:45:d0:de:36:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:30 2026 GMT
            Not After : Jan  5 19:29:30 2027 GMT
        Subject: CN=98006F1AB11D57998202D2D9F8E0594306908880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:5a:a0:9d:18:2c:52:d5:e5:bf:54:49:e0:
                    9c:37:b3:9b:69:71:42:fd:32:e5:33:c5:97:42:bd:
                    b0:1d:0e:c3:01:50:64:11:30:f8:e1:c7:f5:4f:5e:
                    e4:45:fa:1e:0f:2a:81:a3:13:12:74:9b:50:f2:e3:
                    c9:62:2f:ac:f4:91:7f:d7:85:36:d9:78:04:9a:f6:
                    b7:52:71:1d:ba:4d:cc:86:01:ad:25:af:9a:23:ac:
                    d4:bb:3f:bc:7b:e3:ce:f6:de:29:23:ed:91:e2:53:
                    8c:bc:66:1a:9f:0f:e5:2f:09:3c:74:24:1e:33:b0:
                    3a:74:6f:b2:1b:ac:69:b5:38:9b:fb:04:69:2b:2a:
                    72:8e:ea:69:f2:ce:63:66:ff:3c:c8:2b:6b:4b:09:
                    da:0a:1c:4e:75:f8:9d:a2:af:e3:4c:fc:11:c6:c5:
                    6e:5e:70:00:a9:67:45:b7:37:60:b0:c2:98:3b:b0:
                    61:ec:1e:8a:2a:5a:ab:37:10:aa:b9:32:11:e5:4c:
                    03:56:75:3b:f2:22:1a:98:70:fd:44:1f:1b:04:8a:
                    08:1b:52:28:3e:65:18:3a:d3:b5:8e:07:8a:b7:8c:
                    02:80:7a:c8:e4:9f:0c:b8:d3:6b:cb:40:73:b9:0e:
                    ba:6f:8f:42:3d:8f:a5:12:17:74:38:e7:71:ac:b8:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:6F:1A:B1:1D:57:99:82:02:D2:D9:F8:E0:59:43:06:90:88:80
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:5e:b8:cd:6d:41:85:da:8f:11:07:a0:ed:09:b3:ac:87:
         d6:f5:ef:e2:6c:7c:77:de:e3:d7:fe:8b:a0:bb:62:68:69:7b:
         a7:49:79:06:e7:33:54:33:12:0d:6d:19:1d:8c:01:ea:eb:01:
         7f:a6:df:98:8d:44:21:be:24:3d:3e:5f:6c:b7:97:dd:27:8a:
         4d:7b:5e:78:53:ad:0a:5a:f0:7e:1a:4c:72:d1:e8:b6:f2:19:
         c1:ac:95:27:a5:f9:f1:95:0b:f5:40:02:5c:5e:95:9d:cf:98:
         0b:af:d4:72:c7:24:af:48:81:e3:42:fe:b4:79:1d:4a:40:36:
         0c:69:a7:8c:1c:f1:ff:08:fb:d7:ae:cc:a1:a0:90:6b:bd:ed:
         d7:83:92:85:fc:cb:62:62:3b:22:87:74:e5:ea:59:61:4c:1b:
         da:d6:ae:16:ac:4d:b8:21:0b:f9:de:47:bc:5a:1d:53:35:6e:
         a7:2a:6b:ec:9a:04:c5:a0:77:70:9c:f0:75:9a:e7:89:f8:83:
         50:ae:e4:dc:c5:6f:31:27:f2:e1:38:ce:1b:8e:78:2a:65:b1:
         81:7d:79:e8:8f:a4:30:b8:f5:cb:a2:73:0c:1f:f6:b6:12:17:
         f2:48:b1:8b:49:3e:8a:f7:77:60:e1:77:b5:f6:c3:46:b1:35:
         4b:36:d7:2d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUfzFtErZoWtr+R9i3Xt0NRdDeNi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNjAxMDYxOTI0MzBaFw0yNzAxMDUxOTI5MzBaMDMxMTAvBgNV
BAMTKDk4MDA2RjFBQjExRDU3OTk4MjAyRDJEOUY4RTA1OTQzMDY5MDg4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrFqgnRgsUtXlv1RJ4Jw3s5tp
cUL9MuUzxZdCvbAdDsMBUGQRMPjhx/VPXuRF+h4PKoGjExJ0m1Dy48liL6z0kX/X
hTbZeASa9rdScR26TcyGAa0lr5ojrNS7P7x748723ikj7ZHiU4y8ZhqfD+UvCTx0
JB4zsDp0b7IbrGm1OJv7BGkrKnKO6mnyzmNm/zzIK2tLCdoKHE51+J2ir+NM/BHG
xW5ecACpZ0W3N2Cwwpg7sGHsHooqWqs3EKq5MhHlTANWdTvyIhqYcP1EHxsEiggb
Uig+ZRg607WOB4q3jAKAesjknwy402vLQHO5Drpvj0I9j6USF3Q453GsuFBfAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmABvGrEdV5mCAtLZ+OBZQwaQiIAwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDJlMzAyZTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAATMA0GCSqG
SIb3DQEBCwUAA4IBAQBE8164zW1BhdqPEQeg7QmzrIfW9e/ibHx33uPX/ougu2Jo
aXunSXkG5zNUMxINbRkdjAHq6wF/pt+YjUQhviQ9Pl9st5fdJ4pNe154U60KWvB+
Gkxy0ei28hnBrJUnpfnxlQv1QAJcXpWdz5gLr9RyxySvSIHjQv60eR1KQDYMaaeM
HPH/CPvXrsyhoJBrve3Xg5KF/MtiYjsih3Tl6llhTBva1q4WrE24IQv53ke8Wh1T
NW6nKmvsmgTFoHdwnPB1mueJ+INQruTcxW8xJ/LhOM4bjngqZbGBfXnoj6QwuPXL
onMMH/a2EhfySLGLST6K93dg4Xe19sNGsTVLNtct
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:14 2026 by rpki-client